Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft
File:                     oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft (raw, json)
Hash identifier:          dv8sgXimIhy3CJROTIfG95JkAz6rxnsxGJDzZC95c2c=
Subject key identifier:   34:C4:6B:E8:2A:1A:E3:BB:8E:42:6D:72:73:3A:E3:1B:87:C9:59:BC
Authority key identifier: A0:1F:05:7E:B2:E6:48:1C:55:F3:E8:8F:45:7E:D8:CD:A1:C8:AD:C3
Certificate issuer:       /CN=a01f057eb2e6481c55f3e88f457ed8cda1c8adc3
Certificate serial:       019FF9EC89F49DBDF977DE24262553BCC5C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oB8FfrLmSBxV8-iPRX7YzaHIrcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft
Manifest number:          011A
Signing time:             Thu 13 Aug 2026 07:00:56 +0000
Manifest this update:     Thu 13 Aug 2026 07:00:56 +0000
Manifest next update:     Fri 14 Aug 2026 07:00:56 +0000
Files and hashes:         1: aPHgHDs8wZHtsWjj-BGNDzZUqVw.asa (hash: xCblPYPS0g+4wFl3k4nN7Rdc1pcGx5xLzvzdxGTb7kU=)
                          2: oB8FfrLmSBxV8-iPRX7YzaHIrcM.crl (hash: 2KI+Qu1OVP/gOOZy2XGkBiKTWiN+dShxorkpvK6mB04=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oB8FfrLmSBxV8-iPRX7YzaHIrcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f9:ec:89:f4:9d:bd:f9:77:de:24:26:25:53:bc:c5:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a01f057eb2e6481c55f3e88f457ed8cda1c8adc3
        Validity
            Not Before: Aug 13 07:00:56 2026 GMT
            Not After : Aug 14 07:00:56 2026 GMT
        Subject: CN=34c46be82a1ae3bb8e426d72733ae31b87c959bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c9:b3:9a:35:cb:41:e2:80:ff:bd:4c:ce:36:
                    90:fd:6d:ea:eb:f3:f8:74:75:8b:0b:34:6c:70:cf:
                    78:6a:63:fb:01:f7:28:8b:e2:dc:6b:0d:e1:8c:07:
                    62:6d:95:41:22:c1:52:0d:5f:49:72:1a:36:99:be:
                    57:4d:ea:9a:da:3f:b3:78:39:fc:85:5e:12:38:b5:
                    fe:e3:49:97:7c:41:24:d3:73:7a:63:71:f3:e7:31:
                    36:cf:f7:4b:fc:1e:04:08:bf:19:4c:8f:82:c2:c6:
                    b6:84:d0:69:2f:ea:e4:0e:ca:9e:73:6e:c5:ce:0f:
                    2c:60:ba:c4:58:43:75:2a:8b:b5:76:1d:81:a1:2d:
                    9a:ca:cc:ce:b5:f9:3c:51:94:70:f2:e1:87:05:f4:
                    97:e5:bf:79:6f:90:4f:0e:4d:cf:cd:9e:7a:46:47:
                    35:ce:72:8a:08:fa:6e:d5:ad:d4:17:14:79:f2:14:
                    b4:37:86:f6:08:55:56:65:94:bb:71:6d:b9:5e:94:
                    a4:18:c8:72:39:5b:80:cc:78:79:87:ce:eb:4f:61:
                    40:41:7e:22:77:84:b3:93:4d:4b:63:89:eb:00:00:
                    e9:0e:1e:d1:ed:b8:8e:78:e4:aa:fd:ed:a5:ea:49:
                    34:64:df:01:82:c3:55:cb:8e:22:61:4c:ae:65:92:
                    66:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C4:6B:E8:2A:1A:E3:BB:8E:42:6D:72:73:3A:E3:1B:87:C9:59:BC
            X509v3 Authority Key Identifier:
                keyid:A0:1F:05:7E:B2:E6:48:1C:55:F3:E8:8F:45:7E:D8:CD:A1:C8:AD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oB8FfrLmSBxV8-iPRX7YzaHIrcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:69:ce:26:31:c0:2a:26:7f:bd:98:07:6a:6a:ae:4d:4a:27:
         8b:7a:c6:7a:ed:e3:42:bf:60:9d:e7:3d:0e:46:d6:37:42:bd:
         d0:fd:59:67:55:7a:94:8a:68:8d:f7:7e:90:02:77:c0:97:02:
         65:5c:54:b3:3a:17:62:3c:2e:b6:e4:fe:68:75:6a:d3:89:dd:
         9f:d6:56:c1:9f:b3:19:7e:72:7b:23:07:97:06:2e:fe:a8:2f:
         c5:6a:f2:81:2e:8f:5b:a0:60:f6:c8:9c:7d:d3:39:c9:06:08:
         be:d7:be:d7:d9:e7:ce:cc:e4:db:e2:2e:75:0d:5e:ca:5e:f7:
         ed:72:5b:d8:fd:d0:c1:ab:a0:ee:c4:33:3a:d9:ea:4f:28:b6:
         21:dd:6a:e6:90:40:08:01:2e:35:b4:62:05:69:07:85:3e:35:
         ce:03:20:48:0c:08:4f:78:af:05:ba:f7:21:17:47:cb:21:65:
         5b:41:87:56:08:57:d8:0c:e6:aa:51:21:e0:b1:95:50:f0:19:
         bb:88:51:61:95:db:10:49:4d:3b:87:e8:17:a0:2e:fe:1b:56:
         ce:56:cf:01:02:da:eb:c2:5b:bc:f7:78:c7:69:7f:7a:4d:4a:
         1e:1d:6d:db:0e:1e:fe:29:ac:ff:9a:5c:56:bb:8e:68:3e:f5:
         7c:0d:79:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:03:12 2026 by rpki-client