Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
File:                     0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft (raw, json)
Hash identifier:          NBPulFGuq7Gb73aCAnDQ6H66mHlj+zp/AhRaOmtebH4=
Subject key identifier:   E2:86:C0:E3:F8:E0:98:A9:97:59:A8:4C:DC:17:4F:73:8A:72:30:FE
Authority key identifier: D1:91:15:10:A0:99:79:E5:4E:7A:14:91:8C:0B:82:8B:82:37:F8:76
Certificate issuer:       /CN=d1911510a09979e54e7a14918c0b828b8237f876
Certificate serial:       01A000CA0DCE0987C02D7D5028E6C1DEFA96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
Manifest number:          0FFC
Signing time:             Fri 14 Aug 2026 15:00:36 +0000
Manifest this update:     Fri 14 Aug 2026 15:00:36 +0000
Manifest next update:     Sat 15 Aug 2026 15:00:36 +0000
Files and hashes:         1: 0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl (hash: gDzLokL87D4zVzQepEwbV759m9ADhO6Iqc1FVma5k+Y=)
                          2: lnfrhHR0jynfR2q7TVFHy_A4Fqo.roa (hash: WwqXm5S9kqC02dQFsZ5mFoZfT2ZEKlRHGYMQ2u0hdl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:0d:ce:09:87:c0:2d:7d:50:28:e6:c1:de:fa:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1911510a09979e54e7a14918c0b828b8237f876
        Validity
            Not Before: Aug 14 15:00:36 2026 GMT
            Not After : Aug 15 15:00:36 2026 GMT
        Subject: CN=e286c0e3f8e098a99759a84cdc174f738a7230fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7c:81:5a:29:6e:59:a2:f9:f6:d8:9d:73:69:
                    f3:e2:8a:f7:91:c2:0a:3b:cd:52:0c:ce:20:f9:db:
                    3e:9d:80:94:71:b9:a3:7f:ff:1d:8a:59:4b:5f:a3:
                    2b:4a:cb:fa:f3:50:a9:a9:37:c8:91:b5:81:a5:a3:
                    af:c8:e5:d7:74:40:4a:8c:5d:86:81:69:e1:e1:17:
                    e7:00:a6:a3:2d:db:77:89:aa:de:84:49:f3:12:f5:
                    b2:02:49:dc:a7:59:07:a2:1e:d3:ba:c0:08:07:02:
                    3e:e5:09:55:d9:01:e2:0f:fc:93:ae:6c:31:d3:ea:
                    ac:a0:d6:2d:f0:96:e3:56:29:d3:0f:06:83:16:ed:
                    f5:7d:40:9b:3f:ad:60:7d:ed:0f:df:08:11:58:33:
                    ae:90:f8:a5:53:d4:2a:86:44:f3:02:f4:de:70:f1:
                    4e:ae:65:3a:02:d4:bc:cf:f2:8c:4e:15:de:63:28:
                    04:c7:69:ed:b2:54:88:c8:f3:74:2c:88:2e:33:d5:
                    e8:15:13:9b:62:75:56:99:da:08:e9:06:fb:e6:11:
                    76:22:22:96:34:47:4d:85:ff:b8:0d:18:8e:64:4c:
                    7f:f2:da:0b:87:37:ac:65:ec:e2:dd:2a:4d:db:e9:
                    39:58:d5:54:c7:4c:71:ae:b7:97:68:b6:e3:0d:bc:
                    47:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:86:C0:E3:F8:E0:98:A9:97:59:A8:4C:DC:17:4F:73:8A:72:30:FE
            X509v3 Authority Key Identifier:
                keyid:D1:91:15:10:A0:99:79:E5:4E:7A:14:91:8C:0B:82:8B:82:37:F8:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:76:b9:04:99:f7:f1:c2:79:db:95:54:48:c6:0e:1d:74:b1:
         1c:27:ba:50:20:8c:31:8a:02:88:90:68:ef:55:71:82:50:d7:
         e1:11:2b:5d:61:c3:8c:ba:22:31:8a:e2:bc:18:90:73:6a:af:
         68:1d:cd:3f:07:b9:a1:d1:3c:26:0e:ad:d2:3a:41:07:b4:9d:
         09:cb:65:81:3b:7b:dd:7d:6d:e4:45:b6:b0:8d:01:1d:d8:93:
         e3:c3:a7:53:63:20:02:6b:50:15:96:9d:ba:e3:05:c7:5d:4b:
         3a:5b:70:79:3f:c3:c2:e9:df:98:03:7b:53:6a:c8:48:fd:4e:
         22:f7:f7:41:96:34:70:b7:a8:52:d5:57:61:bd:b6:cd:17:1e:
         1a:df:d1:7c:1f:0f:d2:78:66:86:65:4c:69:97:8c:7a:1b:ad:
         2c:35:5b:d0:bb:73:aa:b7:2a:86:85:46:46:a4:59:1d:8e:ce:
         5e:00:f4:c4:28:05:55:f7:63:53:3e:2f:0b:14:ea:7a:05:3a:
         ad:85:77:30:a2:e7:ca:ce:59:04:d1:59:3f:10:6d:b1:52:70:
         9a:a3:ba:be:43:ff:8f:04:45:6e:77:41:d2:0f:84:27:38:79:
         d4:ba:bb:50:a1:d4:da:5c:1a:04:1b:67:e7:c6:94:45:d4:ce:
         33:eb:b8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:11:58 2026 by rpki-client