Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/798-8o6In9MNzxN-fPEkjyVeZxo.mft
File:                     798-8o6In9MNzxN-fPEkjyVeZxo.mft (raw, json)
Hash identifier:          F1cXyDmPlXg/WptJQ7ckWFHCmivI7bhfVLpiQlgbmo8=
Subject key identifier:   AD:D3:3D:56:FB:FD:E0:D0:69:79:C1:70:E7:FA:F1:20:82:1B:C3:4F
Authority key identifier: EF:DF:3E:F2:8E:88:9F:D3:0D:CF:13:7E:7C:F1:24:8F:25:5E:67:1A
Certificate issuer:       /CN=efdf3ef28e889fd30dcf137e7cf1248f255e671a
Certificate serial:       01A02621550CAEE68FF56B9DCE499B8549EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/798-8o6In9MNzxN-fPEkjyVeZxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/798-8o6In9MNzxN-fPEkjyVeZxo.mft
Manifest number:          8D
Signing time:             Fri 21 Aug 2026 21:01:53 +0000
Manifest this update:     Fri 21 Aug 2026 21:01:53 +0000
Manifest next update:     Sat 22 Aug 2026 21:01:53 +0000
Files and hashes:         1: 798-8o6In9MNzxN-fPEkjyVeZxo.crl (hash: ux4tcc5zOv7O4jxeKHJIjLffEWMi05t6WNs1MB5hh9E=)
                          2: uZCJ1ZlX7FZKbkYCZM2a8EPtRMI.roa (hash: gQPzOCK/RXUj7ECDDWVHnreCZ/IrlUfLQtw8hRWnAl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/798-8o6In9MNzxN-fPEkjyVeZxo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/798-8o6In9MNzxN-fPEkjyVeZxo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/798-8o6In9MNzxN-fPEkjyVeZxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:26:21:55:0c:ae:e6:8f:f5:6b:9d:ce:49:9b:85:49:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efdf3ef28e889fd30dcf137e7cf1248f255e671a
        Validity
            Not Before: Aug 21 21:01:53 2026 GMT
            Not After : Aug 22 21:01:53 2026 GMT
        Subject: CN=add33d56fbfde0d06979c170e7faf120821bc34f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e9:99:1e:53:4a:f9:57:fd:f5:b4:b8:83:c2:
                    91:f8:86:90:48:de:43:84:74:f6:ed:fc:8d:8f:43:
                    5e:e7:22:b2:c9:f3:70:d9:b9:70:13:e7:47:08:6a:
                    40:66:17:f4:bd:ae:3f:33:9f:57:34:bb:53:8f:ea:
                    21:f0:33:47:25:96:4e:91:e0:ef:cf:07:02:3e:e2:
                    0a:6b:ad:93:2c:a8:56:44:cb:97:7f:49:9e:4c:3d:
                    9b:7e:4f:4a:cb:8c:55:56:15:b3:a4:86:69:fd:e2:
                    11:b9:0b:e0:a5:4c:3e:db:c0:79:af:82:60:bc:be:
                    1c:fd:5f:3a:5a:e4:51:53:ea:59:2f:64:b6:b2:ea:
                    11:a0:2b:c7:b7:9c:04:7b:27:87:b9:2f:9c:b2:6e:
                    52:1c:c6:4c:bb:7a:39:fa:28:37:b5:6f:76:07:99:
                    85:84:72:8f:73:35:8b:a9:40:67:01:99:36:c8:f4:
                    a0:b5:88:5e:85:56:b8:54:03:ea:8f:18:d4:16:3a:
                    00:70:73:91:6e:cd:15:fa:58:97:c2:b1:38:ed:09:
                    73:eb:ea:9f:78:ff:83:fb:5b:fa:47:84:6d:ba:95:
                    28:18:29:8a:4a:96:1d:63:62:aa:81:b9:07:6e:2e:
                    89:5d:c3:dd:66:a2:10:5b:5b:37:6f:37:be:57:ff:
                    9a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D3:3D:56:FB:FD:E0:D0:69:79:C1:70:E7:FA:F1:20:82:1B:C3:4F
            X509v3 Authority Key Identifier:
                keyid:EF:DF:3E:F2:8E:88:9F:D3:0D:CF:13:7E:7C:F1:24:8F:25:5E:67:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/798-8o6In9MNzxN-fPEkjyVeZxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/798-8o6In9MNzxN-fPEkjyVeZxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/798-8o6In9MNzxN-fPEkjyVeZxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:fb:f4:e9:08:a4:12:6c:4e:ee:f5:86:53:34:25:d8:87:24:
         79:3d:d0:02:56:74:af:d3:99:95:42:3f:40:42:6e:3e:a3:2e:
         22:04:d7:80:b8:c9:39:38:66:cb:d4:fc:0c:a3:97:30:9c:45:
         49:b9:bb:c5:6d:2e:90:50:19:81:3d:82:4e:f8:96:3a:c0:70:
         2b:7b:94:78:6c:2a:a4:19:fc:b2:14:0e:1e:b3:ba:84:1f:60:
         9f:ea:22:cd:c8:c2:b4:47:3a:d7:57:96:97:e6:64:b1:61:58:
         8a:e1:f1:b1:88:6e:04:68:84:55:ab:8f:05:25:b0:13:72:99:
         1c:cc:18:22:eb:69:05:79:bb:85:93:1f:c8:72:5b:66:f5:1f:
         7f:8e:eb:f9:57:69:4d:f7:72:53:c0:d0:9c:52:09:da:90:95:
         7f:9c:65:f2:43:cb:e0:1f:41:77:9d:41:cd:4d:0d:77:a9:25:
         8c:c5:f9:a0:fe:ce:13:d1:3f:1c:7c:31:22:2b:a5:f3:b3:a8:
         a9:24:f6:22:4e:31:bf:59:44:74:4d:ef:9c:19:a8:65:58:d3:
         90:7c:2f:b1:a2:49:85:da:1a:1a:d2:9c:de:95:6e:2c:07:ad:
         f7:01:af:ba:36:c1:a0:ea:d3:09:f1:c3:01:68:1d:43:39:a6:
         d2:c2:25:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:03:28 2026 by rpki-client