Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft
File:                     98Dr2f99xugfjDVIx8LozceWfW8.mft (raw, json)
Hash identifier:          apZs3Vm7jbZ3x47s+/HwdamoUca8i3X0AaAszXyW/Ok=
Subject key identifier:   C4:63:CB:18:C7:0D:6E:EB:17:A3:A9:E3:0E:A0:71:B9:F2:99:9D:C6
Authority key identifier: F7:C0:EB:D9:FF:7D:C6:E8:1F:8C:35:48:C7:C2:E8:CD:C7:96:7D:6F
Certificate issuer:       /CN=f7c0ebd9ff7dc6e81f8c3548c7c2e8cdc7967d6f
Certificate serial:       01A001019D8AF3D3FBBE2E19D18702BBD64A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/98Dr2f99xugfjDVIx8LozceWfW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft
Manifest number:          11D6
Signing time:             Fri 14 Aug 2026 16:01:18 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:18 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:18 +0000
Files and hashes:         1: 98Dr2f99xugfjDVIx8LozceWfW8.crl (hash: 4Q+8+ELu2z+/dF8tmirs2RcJj0w64CGIrr1ayzRp3VQ=)
                          2: PhYlTTJSDAG5ZShmlzAGSwIOBLM.roa (hash: v304FWDl/pr5++u+nRKS1u+LXVotGD3ulsE5/EGGhSg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/98Dr2f99xugfjDVIx8LozceWfW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:9d:8a:f3:d3:fb:be:2e:19:d1:87:02:bb:d6:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7c0ebd9ff7dc6e81f8c3548c7c2e8cdc7967d6f
        Validity
            Not Before: Aug 14 16:01:18 2026 GMT
            Not After : Aug 15 16:01:18 2026 GMT
        Subject: CN=c463cb18c70d6eeb17a3a9e30ea071b9f2999dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a6:36:44:29:06:b8:5b:ce:74:ed:b7:fa:06:
                    f6:99:e9:48:78:4e:d0:fe:30:22:96:49:98:77:59:
                    0f:97:d4:da:25:75:a6:b0:23:73:a3:75:fe:c8:ef:
                    9c:d5:f3:01:41:4e:6e:5b:4c:b9:53:83:7c:2e:0b:
                    d1:e8:6e:6f:29:a6:8c:1e:8c:d8:ba:84:1c:e2:03:
                    ad:07:97:94:c1:9d:21:d2:5e:5d:aa:e8:19:86:ba:
                    b2:40:6d:74:f4:e7:4f:4c:1d:11:61:41:cc:77:02:
                    9d:6b:e9:17:39:43:f0:d8:0f:2b:d3:62:4f:8d:e7:
                    6a:c3:af:b7:66:c0:eb:b2:92:ea:a5:a4:29:84:6d:
                    a1:ca:98:f5:31:51:fb:10:38:c3:bc:08:5b:39:13:
                    69:81:f9:c3:e1:cc:0f:c7:28:5c:aa:fc:d7:b6:7f:
                    64:c6:6f:a8:5e:a2:e0:81:58:c5:da:f4:7f:82:c7:
                    0d:1b:23:17:04:51:91:cf:59:01:fc:92:30:6c:74:
                    eb:c7:0b:aa:95:da:b4:43:66:23:16:c4:c7:2e:96:
                    51:ca:53:51:6e:b2:d4:2a:0f:ca:88:5b:d9:52:e5:
                    80:91:12:73:2c:61:e9:f7:da:db:d4:f8:bb:20:08:
                    f7:7c:41:7b:47:65:f0:01:a6:43:cf:e2:3b:77:c9:
                    ba:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:63:CB:18:C7:0D:6E:EB:17:A3:A9:E3:0E:A0:71:B9:F2:99:9D:C6
            X509v3 Authority Key Identifier:
                keyid:F7:C0:EB:D9:FF:7D:C6:E8:1F:8C:35:48:C7:C2:E8:CD:C7:96:7D:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98Dr2f99xugfjDVIx8LozceWfW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:55:23:b1:c8:63:52:8f:24:7d:ed:f0:c9:0a:2e:6b:64:ee:
         2d:a3:28:4d:f4:0f:a2:fe:a9:a0:a6:3f:f8:29:ba:a5:66:a2:
         b3:a1:3c:3d:3e:2d:8b:fb:cd:3b:92:a2:b3:a1:8a:a8:a8:c7:
         1d:a8:c3:4d:79:8b:55:37:36:59:f4:13:b4:a6:93:c1:9e:d7:
         38:90:de:d3:68:9f:79:a0:3e:7b:83:e4:db:08:33:bf:24:df:
         53:31:d5:d2:6e:c2:05:6f:d1:3e:5b:fa:b1:c4:b9:d4:01:2e:
         b7:e0:2a:72:be:ac:71:e1:f4:67:47:46:64:f5:83:8d:14:a6:
         31:cf:29:e9:08:57:fb:06:c1:45:17:6b:59:b6:30:f0:38:ff:
         6d:29:5a:48:c1:42:97:cd:3d:7e:70:8a:dd:a9:af:c3:e4:cb:
         84:f8:f4:c5:95:de:67:e9:38:3d:95:d5:a0:59:62:5f:03:e4:
         f9:09:ad:ad:28:09:dc:a5:ad:03:e5:26:75:aa:33:b7:94:d1:
         75:d8:f7:d0:45:04:b1:73:53:87:c1:e1:d7:48:3d:43:2f:d5:
         f2:e1:d4:5d:a9:5d:1e:9c:e5:77:14:92:fe:94:7f:23:5d:6a:
         2f:96:1f:2b:04:6e:e6:72:29:45:f3:ce:24:ca:4d:9d:ab:32:
         49:a0:0e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:59 2026 by rpki-client