Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
File:                     0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft (raw, json)
Hash identifier:          ep+Uea/Jhs2nBr7EwsqcmFJVOh4NtX3piFmwoxbAGAU=
Subject key identifier:   61:C5:48:C7:0B:B8:30:60:59:B6:DF:28:80:82:AC:E4:76:07:B5:32
Authority key identifier: D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
Certificate issuer:       /CN=d031655023bd141731d56fb8453ff0514f728865
Certificate serial:       01A001701DC16343654485EA2BFD4E0087EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
Manifest number:          16B7
Signing time:             Fri 14 Aug 2026 18:01:59 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:59 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:59 +0000
Files and hashes:         1: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl (hash: qDUJjR/jsmsmkDEJeKYICO3Xz9p+yyYmxH8lmgNMgFk=)
                          2: 3AB4ABWLvkMBLhXbVPQ47Et_IPE.roa (hash: 7TTeY9RzcNuOB9ePCi+NTRAM5DwBMiMi62WzvEoHHl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:70:1d:c1:63:43:65:44:85:ea:2b:fd:4e:00:87:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d031655023bd141731d56fb8453ff0514f728865
        Validity
            Not Before: Aug 14 18:01:59 2026 GMT
            Not After : Aug 15 18:01:59 2026 GMT
        Subject: CN=61c548c70bb8306059b6df288082ace47607b532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:eb:12:c3:3b:1b:78:41:dd:8b:a3:37:81:af:
                    5c:65:d1:33:c7:26:82:de:a3:a9:4b:e8:e0:31:40:
                    ea:70:7a:7c:48:75:cd:ad:3c:ad:01:4e:bf:a4:4a:
                    68:f7:bd:ef:1f:c0:00:6c:f7:1e:c9:b6:39:75:c3:
                    b1:80:16:6b:78:c1:1f:80:0c:46:fd:a7:79:b1:d2:
                    91:b5:55:7f:bd:dc:6b:b9:56:98:f3:c9:aa:31:80:
                    b3:38:1b:89:07:d0:c1:8f:3a:bd:5f:8b:28:43:02:
                    4c:84:7a:10:c3:c5:5f:f8:41:2c:a5:1f:dd:a8:81:
                    6e:c3:a1:e2:75:34:d7:87:cd:14:dc:27:f7:d7:8a:
                    a5:9f:73:fe:65:94:4c:ac:07:48:00:9c:e9:20:60:
                    20:bd:95:ca:86:94:fc:05:a1:90:99:3e:ee:09:ce:
                    40:38:41:72:f5:34:c0:d0:1f:4c:1d:9a:51:d2:93:
                    79:26:3e:58:10:03:51:6e:12:5e:15:a0:89:90:d1:
                    a9:c8:a0:11:6d:b5:2b:3b:92:08:4d:31:18:ee:59:
                    45:1b:9c:56:c5:31:99:8c:3d:cd:d0:ef:a0:41:79:
                    ba:f2:0b:75:07:c1:d8:f2:ab:32:6c:10:6a:15:13:
                    be:2c:49:3b:44:05:79:d4:82:61:2f:f9:d8:88:55:
                    67:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C5:48:C7:0B:B8:30:60:59:B6:DF:28:80:82:AC:E4:76:07:B5:32
            X509v3 Authority Key Identifier:
                keyid:D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:71:5f:35:6c:53:76:9c:e6:e2:74:0d:99:18:93:35:3a:95:
         cc:f7:89:00:53:fd:5f:82:11:be:5d:69:88:90:00:0a:d2:25:
         bb:b5:b1:f1:9d:09:2a:da:3e:ed:56:74:f4:8f:97:d5:02:29:
         41:bd:1c:9d:5d:72:b7:f1:24:6f:f6:0c:90:ae:b0:cf:5b:56:
         e0:79:2e:41:d0:f9:f8:9e:7b:cf:4b:9a:94:3b:5f:7c:5a:cc:
         77:64:f6:69:21:42:69:c7:72:16:67:d7:71:59:0e:de:b1:eb:
         ba:01:4d:6a:25:1e:a4:9c:bf:03:8b:ae:9d:0c:97:ac:a0:f5:
         ab:e6:90:17:84:cb:f7:e7:6d:91:4d:61:5c:ac:39:57:b7:b9:
         b1:fa:09:0d:a2:2d:6b:26:97:9b:69:ed:5e:15:c4:31:ce:7c:
         5d:17:c3:5c:4d:2a:02:67:81:1d:ac:5f:bc:cf:a6:43:86:54:
         41:93:d5:c9:4a:8d:18:20:72:62:3a:43:76:22:ec:fc:7c:04:
         12:8e:70:e1:23:f3:b8:65:d8:2f:2c:29:bb:c9:2b:77:6f:d2:
         0d:87:28:76:49:8e:d1:15:79:1e:df:01:8f:8d:e2:20:c2:9a:
         50:b4:b2:f2:59:c7:00:38:dd:aa:8b:fe:5e:37:ee:46:82:ba:
         48:fe:e5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:28:29 2026 by rpki-client