Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft
File:                     8PsSySmy8FuZ1Jf68VUdvF2AflE.mft (raw, json)
Hash identifier:          ZslEz1NXmohxDmJIMIFXghm0FMOJdzPrxMG1K51Hl/c=
Subject key identifier:   CF:BA:FC:78:8F:05:49:F6:4F:3E:81:3F:4A:23:1E:D6:BD:10:69:A9
Authority key identifier: F0:FB:12:C9:29:B2:F0:5B:99:D4:97:FA:F1:55:1D:BC:5D:80:7E:51
Certificate issuer:       /CN=f0fb12c929b2f05b99d497faf1551dbc5d807e51
Certificate serial:       01A00101259DE7067331FA472AF60893C40C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8PsSySmy8FuZ1Jf68VUdvF2AflE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft
Manifest number:          0F94
Signing time:             Fri 14 Aug 2026 16:00:47 +0000
Manifest this update:     Fri 14 Aug 2026 16:00:47 +0000
Manifest next update:     Sat 15 Aug 2026 16:00:47 +0000
Files and hashes:         1: 8PsSySmy8FuZ1Jf68VUdvF2AflE.crl (hash: FLCnkl+hFK8HKdv/9ft8jRllm89l+d0K6+Im2M98XMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8PsSySmy8FuZ1Jf68VUdvF2AflE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:25:9d:e7:06:73:31:fa:47:2a:f6:08:93:c4:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0fb12c929b2f05b99d497faf1551dbc5d807e51
        Validity
            Not Before: Aug 14 16:00:47 2026 GMT
            Not After : Aug 15 16:00:47 2026 GMT
        Subject: CN=cfbafc788f0549f64f3e813f4a231ed6bd1069a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5c:62:51:e1:5a:d4:b0:17:d9:d4:8d:bf:03:
                    77:37:13:bc:ff:b7:39:8c:f3:20:47:15:17:96:d9:
                    6d:68:ba:cc:c0:5f:90:48:b3:e1:43:87:70:5a:84:
                    21:b0:29:c3:5c:1a:df:b6:31:fe:90:49:62:20:c0:
                    0a:d5:07:f0:14:d5:6e:ed:1a:41:b2:6c:6b:f1:cc:
                    20:29:3c:d4:4c:8a:a7:7d:53:6f:a7:7e:32:71:79:
                    a7:26:7a:17:a4:5d:02:fe:6d:8e:50:d5:9b:fe:23:
                    4e:30:49:c8:0e:41:32:31:74:b6:12:df:93:f7:dc:
                    41:e3:d2:b6:42:b7:df:62:28:eb:8c:c1:72:6b:0f:
                    4a:46:46:ea:cc:c4:1a:b5:59:00:bd:70:21:c5:2e:
                    3d:1c:55:d0:1c:00:ca:d7:e8:8c:0b:59:9d:62:48:
                    77:d2:e9:29:5c:1e:ca:fc:92:05:36:7a:5f:e6:f9:
                    70:eb:2a:e0:08:23:df:ef:3f:66:ce:41:f5:f5:3d:
                    eb:b1:b3:41:cd:3e:75:24:d8:69:09:3c:07:07:6c:
                    91:8e:6e:52:99:9b:6c:80:c5:f2:42:e2:fe:55:7e:
                    77:bd:48:b8:3e:ed:0c:6f:9a:13:d5:c7:a5:61:77:
                    fb:3d:94:df:30:01:73:fe:ba:bf:f9:1d:03:2d:12:
                    2d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:BA:FC:78:8F:05:49:F6:4F:3E:81:3F:4A:23:1E:D6:BD:10:69:A9
            X509v3 Authority Key Identifier:
                keyid:F0:FB:12:C9:29:B2:F0:5B:99:D4:97:FA:F1:55:1D:BC:5D:80:7E:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PsSySmy8FuZ1Jf68VUdvF2AflE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:a7:c7:5c:0c:09:ea:1a:f4:bd:20:03:30:b7:4e:ea:dc:6a:
         15:05:b6:3b:22:24:56:35:2e:9f:dd:49:83:4b:73:cb:94:01:
         b7:14:34:12:84:ff:6f:00:56:e8:69:82:b1:dd:a7:52:ea:a3:
         5e:b6:6c:5f:c1:78:ea:76:bf:41:5a:f8:c6:19:ff:d3:4f:12:
         2b:ec:39:31:0f:95:44:ff:18:e2:52:f4:63:74:21:c1:f5:2f:
         81:fc:5e:78:0e:fe:6e:a3:23:94:7f:1d:59:e3:9f:7b:dd:8f:
         4a:a4:52:58:4a:cd:56:ad:a8:15:b5:b1:52:e1:f1:b1:f6:64:
         78:2a:f2:07:e5:fc:cd:3a:8a:3d:ba:cd:3d:4a:f1:a0:51:84:
         d3:99:04:96:c9:9c:20:43:3c:39:57:c6:58:41:74:ea:17:95:
         ee:53:45:b7:f2:ef:94:1d:52:6d:e7:50:6e:76:93:92:72:da:
         b1:8b:46:43:46:2c:a9:d5:76:7b:f0:0e:f3:2c:58:66:94:13:
         2e:3a:95:d0:2c:27:f2:20:44:f0:b2:ad:67:05:19:95:96:d5:
         a1:6d:f3:80:4a:99:7d:99:fc:3c:83:ad:03:6b:48:dd:b9:3b:
         de:1b:0a:22:fe:86:7f:c8:a7:0e:a1:b4:a9:52:79:e7:f8:4d:
         65:21:30:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:11:14 2026 by rpki-client