Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
File:                     oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft (raw, json)
Hash identifier:          8NZaRwVZUjGWiFr2n1ggjNUpzLqbdKIVh8kncJWZ20I=
Subject key identifier:   78:EC:F8:38:3B:A0:BC:DD:36:9C:77:C7:8B:E6:21:E6:CA:B9:92:40
Authority key identifier: A0:E4:08:7F:E1:ED:DD:6F:D4:26:B1:9D:C2:A3:71:A8:76:28:29:77
Certificate issuer:       /CN=a0e4087fe1eddd6fd426b19dc2a371a876282977
Certificate serial:       019FF86C02B0138B492A1ADDD07D471E433B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
Manifest number:          01AD
Signing time:             Thu 13 Aug 2026 00:00:55 +0000
Manifest this update:     Thu 13 Aug 2026 00:00:55 +0000
Manifest next update:     Fri 14 Aug 2026 00:00:55 +0000
Files and hashes:         1: WyQBbpbR1AvAKhTsL71x6qgch7U.asa (hash: 043dlMMNEhoWphFwOdB6ptcTMcRQS915TTU2W0PNpeI=)
                          2: oOQIf-Ht3W_UJrGdwqNxqHYoKXc.crl (hash: shxH+cx3ex3A6BqvwXC/ROOKLMjhpW+GZUCcujVt8vI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 00:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f8:6c:02:b0:13:8b:49:2a:1a:dd:d0:7d:47:1e:43:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0e4087fe1eddd6fd426b19dc2a371a876282977
        Validity
            Not Before: Aug 13 00:00:55 2026 GMT
            Not After : Aug 14 00:00:55 2026 GMT
        Subject: CN=78ecf8383ba0bcdd369c77c78be621e6cab99240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:0f:22:3f:fe:ae:9b:9e:70:5d:30:37:c7:35:
                    0a:67:87:c7:9a:a7:50:ac:8b:f6:c5:8a:c0:05:d6:
                    17:62:55:d9:b6:32:fa:f5:5a:8d:0b:2e:48:93:4e:
                    38:ba:2c:02:e2:63:49:70:14:ae:60:58:66:e2:1e:
                    62:ca:8a:77:f1:13:e9:a0:27:21:d4:db:26:d4:f9:
                    e4:45:0d:6b:57:8f:46:23:e3:45:7a:f9:4a:04:fa:
                    6e:ba:ff:c9:84:b4:e5:d0:b8:9c:d3:7f:9d:3f:c1:
                    f9:31:00:c1:42:8e:91:78:44:6b:3f:01:f1:0a:62:
                    20:ae:d8:eb:10:35:ab:4f:1b:f7:c3:01:08:36:2d:
                    97:15:2b:77:95:1a:65:17:79:c0:08:f9:57:da:98:
                    8b:70:a6:22:fc:5b:16:4c:b7:9b:83:e3:ea:f7:5b:
                    9f:ac:41:af:5e:ed:4c:6e:8b:09:a3:d4:95:7f:95:
                    03:d1:0c:14:d1:f0:0e:34:01:5a:b4:70:74:6c:8b:
                    93:26:c7:56:d9:df:f2:5f:17:c8:f7:a3:98:8f:92:
                    4e:22:44:aa:6e:ba:a1:9f:3a:5a:86:8b:0c:57:29:
                    47:dc:48:81:de:85:1f:45:b7:b2:60:f4:55:38:b2:
                    83:f9:44:8e:f0:5f:d6:c5:a7:a0:86:55:16:3c:4e:
                    b5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:EC:F8:38:3B:A0:BC:DD:36:9C:77:C7:8B:E6:21:E6:CA:B9:92:40
            X509v3 Authority Key Identifier:
                keyid:A0:E4:08:7F:E1:ED:DD:6F:D4:26:B1:9D:C2:A3:71:A8:76:28:29:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:8e:bf:f2:9e:a4:31:3b:9c:b5:e4:c2:3c:bb:e4:d9:1e:ab:
         96:b3:14:24:65:70:0d:8b:db:c4:ae:6c:08:bd:df:d3:51:ae:
         08:cf:5d:bb:b1:7a:a3:47:1f:2f:d1:05:06:46:49:c7:d5:73:
         c8:c4:91:6a:57:66:53:65:fc:63:a3:88:4a:f3:13:a9:61:01:
         c8:52:6a:1c:d5:20:23:87:bf:b4:16:c7:91:03:fb:c9:47:51:
         ea:24:e6:6a:6f:90:de:26:c2:19:e7:bf:f1:52:3b:35:5c:04:
         f5:ee:bd:fe:82:bc:2a:b1:34:17:f1:39:82:6e:99:0f:86:e5:
         15:fd:68:a2:36:6d:35:62:57:b6:83:6d:a2:01:d2:50:cc:c7:
         8b:c4:e2:e9:72:3c:7c:26:f0:e5:2f:c6:a5:a4:7a:4b:d0:03:
         e8:86:7a:f3:bb:2b:f0:6a:55:8b:bd:70:cc:d2:68:a7:32:05:
         72:74:ee:40:60:9a:5b:1b:85:99:b2:95:1d:90:76:d1:bf:e5:
         59:e3:f0:e6:72:3a:f8:e6:b1:bf:e9:b5:6a:f5:09:a6:47:d3:
         83:7a:e0:04:af:81:29:e2:e9:08:34:ed:0f:bc:bb:2a:80:97:
         f5:b8:05:b8:84:99:42:8e:2d:5c:15:fc:e1:ed:6a:b0:50:db:
         f0:1b:e4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:04:30 2026 by rpki-client