Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
File:                     8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft (raw, json)
Hash identifier:          C1gKl2060NZAqGCFGn209qxesdh7Mq6/+LJoeLtG96w=
Subject key identifier:   C4:28:46:2A:70:09:CC:5C:9E:17:6E:44:41:FB:9B:4D:65:52:DC:30
Authority key identifier: F0:97:60:CF:11:EF:2B:86:21:87:B0:5E:5D:75:1C:73:4C:63:4B:45
Certificate issuer:       /CN=f09760cf11ef2b862187b05e5d751c734c634b45
Certificate serial:       01A001A5ECFF9093FD7E87A6739582933A07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
Manifest number:          106D
Signing time:             Fri 14 Aug 2026 19:00:46 +0000
Manifest this update:     Fri 14 Aug 2026 19:00:46 +0000
Manifest next update:     Sat 15 Aug 2026 19:00:46 +0000
Files and hashes:         1: 8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl (hash: ZIwOP6/jqsWQPKgSQcLdnhQescfGK9F2X4/YgdlhOYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a5:ec:ff:90:93:fd:7e:87:a6:73:95:82:93:3a:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f09760cf11ef2b862187b05e5d751c734c634b45
        Validity
            Not Before: Aug 14 19:00:46 2026 GMT
            Not After : Aug 15 19:00:46 2026 GMT
        Subject: CN=c428462a7009cc5c9e176e4441fb9b4d6552dc30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d9:8a:aa:e3:63:00:1d:59:e2:4c:4c:82:c2:
                    ad:5d:b5:f3:e6:cf:90:fe:47:69:6b:eb:f5:1b:5c:
                    36:b7:f9:08:9b:d6:18:d3:1b:62:16:5d:85:91:88:
                    eb:21:1d:3a:b9:d7:ff:75:5d:39:ab:d8:f1:ee:e4:
                    b7:f1:ec:83:32:fd:ff:91:ef:42:f5:de:72:94:36:
                    31:0e:0a:15:cb:bf:a6:53:a0:41:db:ae:4d:57:a1:
                    73:7b:e1:1a:b8:82:5f:26:73:4f:5a:9b:91:2c:82:
                    4d:7e:eb:6b:c3:4a:56:4a:50:51:64:21:e0:ac:b3:
                    29:b6:82:5c:d4:31:a3:c6:ad:0d:44:9c:e2:3b:74:
                    fb:36:21:ad:e7:56:78:16:7f:38:17:61:89:b6:ee:
                    f5:da:aa:d4:12:41:b5:bd:d2:37:fc:67:07:25:02:
                    89:43:0e:aa:0b:e9:52:85:0c:66:18:a6:db:c2:fc:
                    15:9f:8b:f7:ff:d9:22:14:d6:7f:2b:d9:4f:25:4f:
                    2d:29:5e:54:91:85:62:69:d5:6c:16:07:e9:4f:fb:
                    70:c2:ca:b5:fb:29:09:f2:52:90:09:6a:e9:47:e1:
                    c6:a6:3d:39:98:a1:79:53:31:cc:86:31:b3:d5:65:
                    21:cb:7e:1b:fb:f9:43:88:76:5a:85:f8:43:a9:f8:
                    5f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:28:46:2A:70:09:CC:5C:9E:17:6E:44:41:FB:9B:4D:65:52:DC:30
            X509v3 Authority Key Identifier:
                keyid:F0:97:60:CF:11:EF:2B:86:21:87:B0:5E:5D:75:1C:73:4C:63:4B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:69:47:4d:87:9d:2e:92:c2:37:91:39:15:f6:0d:81:4a:56:
         bc:f8:ca:90:e2:7f:23:3b:a5:19:f6:3b:81:2e:f3:85:cf:92:
         6e:f4:9e:40:9b:91:80:42:d2:38:19:1d:05:71:64:bd:47:9a:
         57:f7:f8:79:f4:61:8b:93:f4:62:3d:2c:91:6a:45:82:c7:9f:
         35:67:67:e2:3c:68:2e:8d:5e:c7:29:5f:25:aa:41:4e:e0:7a:
         cd:10:57:da:29:57:f8:60:80:ac:e8:4c:e4:ff:9d:68:96:d2:
         5b:fa:12:25:79:67:1c:77:85:59:8c:60:d0:2f:40:f0:09:45:
         3e:ee:ee:2a:4c:9b:ef:4e:0f:ac:6a:c6:c2:dd:3e:fe:ab:4e:
         9b:4c:b2:e2:72:a6:af:93:b0:24:cb:6a:de:34:78:12:25:77:
         20:32:5b:90:a9:46:ac:71:96:65:03:43:a9:ae:92:8d:c9:8b:
         52:94:c6:16:21:87:89:3f:fa:e9:b0:c8:9f:28:92:c6:91:10:
         e8:f9:a6:78:99:cc:16:10:36:e3:01:03:8e:1d:00:a4:c8:b3:
         66:2f:04:db:de:9f:c4:8f:ef:20:b1:a7:0a:c4:72:2c:51:3d:
         3a:a3:c1:ff:54:2f:6f:30:25:77:c4:a7:9e:43:ac:3c:ff:8d:
         cb:8a:01:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:49 2026 by rpki-client