Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8e09ab-6108-4421-b38c-4d071c7b5187/1/2OAupPOGx89uaQGRtZ4OGm97v1Y.mft
File:                     2OAupPOGx89uaQGRtZ4OGm97v1Y.mft (raw, json)
Hash identifier:          b3QvelXkhgQYCp+OnJ6WK4Dwo2RY54Po5+p2SiMY6os=
Subject key identifier:   2C:BF:D1:7B:FD:7F:9B:DD:9D:79:14:68:C8:02:EA:DF:7D:91:DF:C9
Authority key identifier: D8:E0:2E:A4:F3:86:C7:CF:6E:69:01:91:B5:9E:0E:1A:6F:7B:BF:56
Certificate issuer:       /CN=d8e02ea4f386c7cf6e690191b59e0e1a6f7bbf56
Certificate serial:       019FF835976381084B4287A0F94917A816C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2OAupPOGx89uaQGRtZ4OGm97v1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/8e09ab-6108-4421-b38c-4d071c7b5187/1/2OAupPOGx89uaQGRtZ4OGm97v1Y.mft
Manifest number:          09
Signing time:             Wed 12 Aug 2026 23:01:29 +0000
Manifest this update:     Wed 12 Aug 2026 23:01:29 +0000
Manifest next update:     Thu 13 Aug 2026 23:01:29 +0000
Files and hashes:         1: 2OAupPOGx89uaQGRtZ4OGm97v1Y.crl (hash: apDar9xNaIY1/G/oShLMmk9qbXonsARuuOzMsE6Pd3Q=)
                          2: bNScu7dR61hwpaTDOXZOWwG-6EE.asa (hash: 2C6ET7yMlGCIbV8T45ugaZqUKt+DjKLnrBt3RIW/YuE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/8e09ab-6108-4421-b38c-4d071c7b5187/1/2OAupPOGx89uaQGRtZ4OGm97v1Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/8e09ab-6108-4421-b38c-4d071c7b5187/1/2OAupPOGx89uaQGRtZ4OGm97v1Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2OAupPOGx89uaQGRtZ4OGm97v1Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 23:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f8:35:97:63:81:08:4b:42:87:a0:f9:49:17:a8:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8e02ea4f386c7cf6e690191b59e0e1a6f7bbf56
        Validity
            Not Before: Aug 12 23:01:29 2026 GMT
            Not After : Aug 13 23:01:29 2026 GMT
        Subject: CN=2cbfd17bfd7f9bdd9d791468c802eadf7d91dfc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b8:d4:88:30:ec:b0:c5:31:09:b1:fa:f1:7c:
                    b7:b3:8d:24:b9:ad:b2:27:6d:f9:7f:b1:5a:09:61:
                    b8:31:ba:c7:bc:fc:0d:d1:59:34:c4:84:c2:26:c9:
                    54:4e:40:25:05:3c:4a:56:2b:9c:4a:70:cd:83:81:
                    af:da:74:43:6a:6a:fc:84:92:0a:f8:c3:27:6b:cc:
                    fa:42:8a:8e:94:81:e0:32:1b:75:4b:7c:ef:4d:8c:
                    a7:ce:97:1e:54:b1:cc:93:12:e1:2e:2c:91:4e:9d:
                    48:d2:84:34:53:67:c4:bc:b2:1e:92:b6:58:d7:d2:
                    cb:53:42:57:41:4f:da:51:a6:26:cc:9d:e1:19:03:
                    9a:7a:20:67:4a:b4:f3:d8:0a:54:0d:cb:57:ed:1e:
                    13:96:09:cf:63:7a:2a:36:8d:ac:01:b5:fd:21:2e:
                    26:3a:00:6e:65:c8:ef:bb:69:27:0a:b7:8d:78:e8:
                    bb:39:10:32:4c:4f:ef:66:9a:01:1f:7c:59:e3:30:
                    fb:43:5f:5e:69:76:30:ac:54:ce:c7:11:43:be:ec:
                    08:68:c7:95:1f:59:db:dd:bb:c8:97:f9:26:7d:82:
                    b5:46:85:d0:9b:7f:c6:bd:aa:25:af:be:9f:89:c4:
                    a1:31:de:be:8b:a9:fd:d3:25:78:6f:e7:68:1f:22:
                    16:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BF:D1:7B:FD:7F:9B:DD:9D:79:14:68:C8:02:EA:DF:7D:91:DF:C9
            X509v3 Authority Key Identifier:
                keyid:D8:E0:2E:A4:F3:86:C7:CF:6E:69:01:91:B5:9E:0E:1A:6F:7B:BF:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2OAupPOGx89uaQGRtZ4OGm97v1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8e09ab-6108-4421-b38c-4d071c7b5187/1/2OAupPOGx89uaQGRtZ4OGm97v1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8e09ab-6108-4421-b38c-4d071c7b5187/1/2OAupPOGx89uaQGRtZ4OGm97v1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:58:36:aa:54:11:f0:63:bc:38:00:59:a5:c3:b3:59:58:d9:
         6c:5c:79:34:fb:0c:a8:32:e3:8f:39:77:c8:7c:b7:11:c4:e2:
         14:bc:de:bb:f3:98:98:d3:d5:e7:05:7f:71:74:7b:28:28:9d:
         96:3c:54:e0:37:90:bc:ef:f6:94:b0:da:f9:44:82:5e:20:18:
         a0:77:85:d4:9b:6c:68:58:b8:02:a8:7e:cb:0c:7b:0c:6f:44:
         87:a3:5c:75:55:7c:d4:8d:80:57:fa:19:14:1b:9e:ec:b6:7c:
         86:38:5b:38:36:21:67:13:f5:2e:d6:c5:0a:0a:88:d9:18:84:
         a9:6c:fd:5a:35:ea:6c:fc:d3:23:d0:6e:ff:e4:06:d1:65:30:
         39:79:d8:ac:cf:e8:8e:98:24:03:f9:ab:b2:1d:02:60:e5:86:
         6b:5c:e5:cb:d4:ed:0c:ce:21:1a:e4:75:c0:12:c4:6d:df:c6:
         ae:07:a8:89:d5:52:e4:cf:90:46:9d:9a:af:18:e5:44:0c:26:
         3e:7a:45:e1:ec:9f:ce:b6:3a:11:b6:3f:62:ea:c0:ba:b2:d7:
         41:c9:6a:33:ac:48:0a:8c:93:1f:70:4a:d4:49:f4:82:60:03:
         a6:61:32:13:84:04:37:65:83:6a:88:f9:42:52:b4:0e:51:45:
         2e:28:2b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 04:26:39 2026 by rpki-client