Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
File:                     sRofl3C6sHdRW3cSy41JVQsxOKE.mft (raw, json)
Hash identifier:          X2M8K0pxekzcelDJ5Uu5ZMuIl+UWRZuIJZok1gw6HAc=
Subject key identifier:   CC:10:2C:BD:66:B9:14:A2:3D:8D:16:28:2E:96:98:CA:DD:EF:30:B3
Authority key identifier: B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
Certificate issuer:       /CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Certificate serial:       01A003940D1071BD38976F572E664F8A255A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
Manifest number:          0F56
Signing time:             Sat 15 Aug 2026 04:00:29 +0000
Manifest this update:     Sat 15 Aug 2026 04:00:29 +0000
Manifest next update:     Sun 16 Aug 2026 04:00:29 +0000
Files and hashes:         1: IHeSpn9zzFGkB0I3Aq-TbT_Yi_M.roa (hash: I4iH62Xbpv9TcN2x5dZKrT7UkMHzqfLA1ys5Hw46kzg=)
                          2: WCA0B9M68iSK-689JNNQ3x_gaaQ.roa (hash: mIL2rvF2fj48OLmmFlBKTID0LzN8VFC9HV5FYjZjf+Q=)
                          3: sRofl3C6sHdRW3cSy41JVQsxOKE.crl (hash: 2CpMA0dooIDiUY4svrvfweVj+TW//Dm0cQGTulzSsZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:94:0d:10:71:bd:38:97:6f:57:2e:66:4f:8a:25:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b11a1f9770bab077515b7712cb8d49550b3138a1
        Validity
            Not Before: Aug 15 04:00:29 2026 GMT
            Not After : Aug 16 04:00:29 2026 GMT
        Subject: CN=cc102cbd66b914a23d8d16282e9698caddef30b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f5:d9:98:c6:9b:2a:42:9d:de:c8:47:af:21:
                    ff:83:f0:f5:cf:35:f2:f3:99:f4:7d:d6:72:60:1f:
                    88:c1:91:a0:b0:2c:a6:ea:fc:c5:bb:fd:68:20:6c:
                    8c:45:fc:1b:de:c0:1d:fb:9d:22:a9:8c:d6:41:4c:
                    6e:f7:41:80:9d:f1:d0:cd:a0:a6:fe:56:7f:6c:23:
                    e4:6b:b9:2d:40:51:9a:70:26:c3:4b:8b:6b:9e:c4:
                    f9:08:d4:4d:f3:0d:9f:dd:f6:ae:5d:6e:a3:b7:b4:
                    3a:67:ce:26:03:8d:39:c7:ce:ae:9b:e9:7b:53:1d:
                    f7:7c:d3:75:75:73:a6:ba:2b:86:c0:56:ce:ce:cb:
                    bb:1d:a3:20:43:4b:e1:b9:e2:17:e9:72:64:13:a2:
                    09:79:6a:e8:3f:da:aa:57:54:41:57:20:34:35:b6:
                    87:bb:a4:e7:3d:32:57:84:75:e3:32:54:4c:4f:3c:
                    ca:b3:83:6f:90:43:51:cb:5a:38:a7:d7:d7:fa:78:
                    cb:0a:89:88:c5:bd:dc:42:cd:5a:42:41:64:7a:78:
                    1d:54:27:8f:2b:73:ff:d6:bf:a9:b8:16:b3:b3:af:
                    13:7c:63:9e:b2:ff:c5:1a:03:5a:7c:b8:c9:72:8a:
                    9c:e5:7a:e2:f9:dd:82:67:b8:b2:1b:70:3a:dc:d4:
                    f7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:10:2C:BD:66:B9:14:A2:3D:8D:16:28:2E:96:98:CA:DD:EF:30:B3
            X509v3 Authority Key Identifier:
                keyid:B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:33:c9:d7:d3:2f:69:6d:b5:b4:d5:00:b4:d7:f1:69:62:df:
         be:82:07:0f:4c:66:0a:c8:91:bf:19:9c:48:63:20:9e:7c:26:
         14:87:70:d8:7b:c4:36:25:59:04:59:75:d2:90:cc:b8:2c:35:
         8c:64:40:91:df:9f:8f:fd:3b:40:04:09:30:44:f0:db:f1:0b:
         db:3e:d1:5a:35:47:43:c7:3b:c8:08:03:60:66:5f:fd:0f:a8:
         64:18:5c:f2:34:0b:a7:dc:03:b7:e9:c1:1f:48:d3:a4:06:d4:
         d5:a2:c3:ea:09:a0:ad:e7:ee:52:89:a9:0f:8e:02:aa:ad:20:
         c9:28:25:a2:7e:1e:0b:68:ae:aa:eb:e5:c4:03:14:53:ae:66:
         38:f7:b7:0b:16:c8:9b:01:91:1d:e5:6b:02:48:d5:f2:7b:2c:
         83:67:12:97:8e:2b:ed:ca:a8:9a:80:51:2a:c7:fc:a0:2d:77:
         44:9b:5a:a9:56:88:bf:a8:76:c7:24:13:f8:43:a8:6d:1e:05:
         25:f9:e4:21:5e:98:bd:de:d4:b1:76:ef:8b:7f:33:3a:4c:c3:
         59:fb:22:89:d6:a2:8b:32:82:3b:b7:8f:cc:a1:d1:db:0b:62:
         c9:fc:06:83:61:7b:a5:6e:aa:30:13:63:b5:0d:ba:01:5d:7d:
         07:8a:2c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:28:14 2026 by rpki-client