Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
File:                     2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft (raw, json)
Hash identifier:          dPVzdAshRUkQOhWe6mkcqRb5IGsoGSMxteHAZscgiGw=
Subject key identifier:   03:C8:06:F9:29:46:62:CD:2B:57:BA:46:00:D1:A1:91:CD:EC:DC:74
Authority key identifier: DA:F0:A3:9C:FA:DF:91:0F:6B:13:2A:D2:28:E6:06:56:18:87:A0:6C
Certificate issuer:       /CN=daf0a39cfadf910f6b132ad228e606561887a06c
Certificate serial:       01A002B8981E58F02DF49D427584CFE0BD05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
Manifest number:          1A08
Signing time:             Sat 15 Aug 2026 00:00:47 +0000
Manifest this update:     Sat 15 Aug 2026 00:00:47 +0000
Manifest next update:     Sun 16 Aug 2026 00:00:47 +0000
Files and hashes:         1: 2vCjnPrfkQ9rEyrSKOYGVhiHoGw.crl (hash: KDXx4vSP3p2KDpMwIxJ+gT694WABU6zEMjfQ8EyqUHw=)
                          2: kX0ln8n5R4ckT5blpr2Q8T6dxyw.roa (hash: m+DqRW/7H7lJLeLV4xP2QSBsOS0wlhVWEX4nGDQ/zJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:b8:98:1e:58:f0:2d:f4:9d:42:75:84:cf:e0:bd:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daf0a39cfadf910f6b132ad228e606561887a06c
        Validity
            Not Before: Aug 15 00:00:47 2026 GMT
            Not After : Aug 16 00:00:47 2026 GMT
        Subject: CN=03c806f9294662cd2b57ba4600d1a191cdecdc74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3e:bd:6a:df:20:53:98:d6:c4:50:c3:d2:8c:
                    53:11:c6:e6:26:d5:40:80:aa:b3:80:93:65:ce:bc:
                    57:0a:58:43:28:ed:d3:90:77:58:f7:b2:3a:37:89:
                    60:6b:5f:06:d7:5b:38:ee:f2:e9:1c:a9:34:5f:03:
                    5a:d8:9e:3a:fe:ce:37:15:97:27:0b:22:ca:47:4b:
                    54:60:f9:b9:26:92:f8:53:1c:bb:af:2a:6d:dd:aa:
                    44:3f:69:61:bb:09:67:32:e4:fe:1d:01:67:da:a5:
                    56:a7:9d:d7:d6:05:df:6b:81:80:64:58:4b:cb:50:
                    02:2e:58:1e:98:de:ec:aa:48:ec:31:e3:78:df:e1:
                    13:31:f1:41:5d:9b:fd:95:4e:42:e0:cb:b6:7d:e3:
                    1d:81:f0:28:47:21:98:08:9a:19:ba:0a:c2:81:b9:
                    8c:b9:3f:74:84:36:7d:5e:68:a4:94:88:08:72:33:
                    76:52:50:6f:cd:08:e2:6a:43:2c:c5:5a:cf:b9:fb:
                    b9:ab:d4:51:08:d2:91:4f:2e:5d:f3:62:81:c3:2b:
                    c6:b8:5a:7e:88:cd:ca:b7:d7:ef:6f:af:31:5e:81:
                    5d:fe:fa:a8:76:7b:99:d2:c4:82:64:79:6f:a9:95:
                    90:b5:3e:42:5f:6f:19:26:e6:db:12:1f:58:31:2c:
                    67:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C8:06:F9:29:46:62:CD:2B:57:BA:46:00:D1:A1:91:CD:EC:DC:74
            X509v3 Authority Key Identifier:
                keyid:DA:F0:A3:9C:FA:DF:91:0F:6B:13:2A:D2:28:E6:06:56:18:87:A0:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:ae:82:ac:1c:03:82:c4:30:54:06:4d:75:8f:fb:30:c4:32:
         64:d5:97:4e:5b:c7:5b:76:22:bb:4e:a6:7f:76:62:37:10:a1:
         73:da:44:fe:53:3d:13:d3:1d:32:21:00:ae:ce:bc:a6:81:22:
         c7:43:47:2e:21:09:53:91:75:4a:72:f7:e9:02:74:40:2e:0d:
         7c:b6:27:5f:bd:c1:96:fc:95:5a:8f:68:c0:02:cf:e0:d7:27:
         c6:34:ec:8c:8e:fc:c3:cc:83:68:72:6a:72:b1:59:03:f4:9d:
         04:54:44:ed:3d:1d:71:59:19:3d:1b:ad:d4:26:b8:a1:a5:96:
         ef:5c:6a:2f:b4:15:04:0d:bc:34:01:d9:84:41:d6:95:aa:08:
         f3:6e:f1:2e:60:1a:00:91:80:eb:c9:63:3b:d5:bd:fa:06:bb:
         0d:40:c5:d1:da:a9:49:bf:ca:dc:16:b2:f7:0e:9e:dc:5e:91:
         4c:69:04:4b:33:29:05:5f:36:81:f4:7c:05:cf:ed:d2:82:f1:
         73:2a:d8:0d:1c:36:ab:b6:37:f7:6c:fc:01:5c:50:85:3a:5a:
         bd:6a:8f:ed:f8:b8:77:7d:55:fc:13:9f:2e:66:a9:62:19:85:
         25:cc:28:ff:17:3a:f1:45:56:1b:56:6d:fc:5f:87:71:4a:c0:
         90:0e:74:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:07:23 2026 by rpki-client