Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.mft
File:                     8zXtZqwB15F1zk149nKh_kcgN4A.mft (raw, json)
Hash identifier:          zpWjf1nj1cUghChJIWz1scod/3lfaj9BKuKS7QNn8kw=
Subject key identifier:   6E:45:93:9D:B0:50:47:AA:26:B7:DF:7E:B1:13:44:EB:44:C9:A5:C4
Authority key identifier: F3:35:ED:66:AC:01:D7:91:75:CE:4D:78:F6:72:A1:FE:47:20:37:80
Certificate issuer:       /CN=f335ed66ac01d79175ce4d78f672a1fe47203780
Certificate serial:       01A040858459649DD395CB7FD0CC73241E85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8zXtZqwB15F1zk149nKh_kcgN4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.mft
Manifest number:          03E6
Signing time:             Thu 27 Aug 2026 00:01:26 +0000
Manifest this update:     Thu 27 Aug 2026 00:01:26 +0000
Manifest next update:     Fri 28 Aug 2026 00:01:26 +0000
Files and hashes:         1: 8zXtZqwB15F1zk149nKh_kcgN4A.crl (hash: UrHtUxENE9LhTVfKGfDucY06E1F1LiyMPIpr5zjBsI0=)
                          2: VpiFwK0hsjfTbGKdlZz4M450A4o.roa (hash: 7nG4whDnBMU971FoyHXyhGJf7PxhrWgEoIfy9EmmD2A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8zXtZqwB15F1zk149nKh_kcgN4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:85:84:59:64:9d:d3:95:cb:7f:d0:cc:73:24:1e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f335ed66ac01d79175ce4d78f672a1fe47203780
        Validity
            Not Before: Aug 27 00:01:26 2026 GMT
            Not After : Aug 28 00:01:26 2026 GMT
        Subject: CN=6e45939db05047aa26b7df7eb11344eb44c9a5c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:34:94:6b:ff:0b:cd:b9:e2:39:ab:b2:36:35:
                    e8:13:34:5b:0a:06:49:3b:7f:77:5a:86:af:f5:5c:
                    2b:10:48:79:60:64:2b:f1:03:07:24:85:08:e6:22:
                    6e:e5:09:d8:e2:31:68:bc:63:0d:4f:87:84:14:3a:
                    6a:1e:4f:92:be:ac:70:08:8d:37:72:23:d5:26:ac:
                    72:b5:cb:ea:1c:52:c0:89:59:6a:fe:6d:29:d0:3e:
                    7b:8d:3a:3c:4a:90:ab:93:d1:05:9c:ab:75:36:3a:
                    99:25:42:c1:d0:58:72:45:07:52:54:4a:22:7b:73:
                    25:00:40:6e:19:c6:01:e0:82:b2:31:5a:81:da:51:
                    32:72:5d:63:9b:c4:c6:6e:76:d1:66:73:db:0b:43:
                    81:57:a5:93:36:35:97:2a:6d:dd:d4:b0:92:64:ea:
                    b5:4a:d4:f1:86:87:1f:bf:f5:00:98:f9:f6:07:1c:
                    9f:4f:1e:72:f1:50:e6:e5:f7:df:50:dc:2c:18:2b:
                    8b:6d:11:93:0f:c8:b6:aa:9d:28:82:90:e8:ac:c0:
                    7f:f4:47:f7:b0:c5:5e:bd:f3:a9:ed:ac:cf:85:bd:
                    30:2e:2f:3f:6a:4b:7a:7f:89:12:06:54:2c:28:c2:
                    fd:ec:87:01:7b:3f:56:91:ff:b2:50:51:4f:11:e2:
                    51:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:45:93:9D:B0:50:47:AA:26:B7:DF:7E:B1:13:44:EB:44:C9:A5:C4
            X509v3 Authority Key Identifier:
                keyid:F3:35:ED:66:AC:01:D7:91:75:CE:4D:78:F6:72:A1:FE:47:20:37:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zXtZqwB15F1zk149nKh_kcgN4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:3e:38:be:ee:e4:42:11:36:5a:0a:48:8e:c8:a6:f6:35:2d:
         5a:ab:91:d6:6a:a0:30:19:6a:38:0c:33:8a:2e:5f:ae:92:9a:
         7b:d2:28:a8:ca:df:19:73:42:42:db:7c:4c:69:75:94:2d:1f:
         db:38:31:fa:fe:d2:86:a7:69:7d:a3:d3:17:9f:f7:a4:dc:26:
         75:2a:92:f6:3d:26:ef:e3:8e:fb:68:a1:a9:ad:28:d1:26:d4:
         44:b4:ed:52:ba:95:dd:9b:c4:0f:f4:de:22:52:18:a9:7c:93:
         80:9d:e5:cc:ef:14:13:24:a6:8c:1c:23:8c:ce:77:c3:17:42:
         44:af:ca:95:e8:2b:ec:97:73:2e:9c:4e:60:4a:d8:78:db:5b:
         3e:88:6f:6d:5d:c3:16:59:58:1a:34:76:91:76:fd:2e:5f:13:
         9d:7a:8a:45:07:53:d4:1f:25:7e:60:86:b6:b8:fd:75:4e:a8:
         5e:42:96:ab:97:53:fc:7b:a8:81:b4:3d:50:c5:43:79:77:28:
         93:6f:07:f7:1f:3e:bd:12:02:e2:bb:ba:9f:7c:54:d9:28:73:
         2a:fe:37:95:26:0b:f0:f2:46:92:b5:d8:f2:d0:e0:a0:1f:a2:
         23:f1:6b:1d:d7:59:b4:23:f7:b9:12:ba:95:42:47:34:0e:36:
         f5:cb:d8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:26:00 2026 by rpki-client