Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
File:                     b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft (raw, json)
Hash identifier:          Z8jsilohC2Ck5RPkgYStXN6YmLFxFFDVyU4KroIgfF4=
Subject key identifier:   67:C2:09:EF:8D:87:7C:C1:FE:98:7A:9C:53:4B:EA:5B:55:8B:8D:36
Authority key identifier: 6F:C3:33:DE:2D:8E:70:37:13:42:54:C2:7C:E1:C4:2B:F4:75:A2:8B
Certificate issuer:       /CN=6fc333de2d8e7037134254c27ce1c42bf475a28b
Certificate serial:       019FF67E23EF7CF33F7876E72371699E9F51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b8Mz3i2OcDcTQlTCfOHEK_R1oos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
Manifest number:          01EB
Signing time:             Wed 12 Aug 2026 15:01:29 +0000
Manifest this update:     Wed 12 Aug 2026 15:01:29 +0000
Manifest next update:     Thu 13 Aug 2026 15:01:29 +0000
Files and hashes:         1: 4wo1dq-Efi_1fpQmUUaWK8oTx3E.asa (hash: bvw71MHh0GCvQdivbbAJLSQJYxAa+8FLArPZcPrCVAE=)
                          2: b8Mz3i2OcDcTQlTCfOHEK_R1oos.crl (hash: 70nbWncsKiiieXxW8XgtLQltDQ5GG5mqz65stIzfHfo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b8Mz3i2OcDcTQlTCfOHEK_R1oos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 15:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f6:7e:23:ef:7c:f3:3f:78:76:e7:23:71:69:9e:9f:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fc333de2d8e7037134254c27ce1c42bf475a28b
        Validity
            Not Before: Aug 12 15:01:29 2026 GMT
            Not After : Aug 13 15:01:29 2026 GMT
        Subject: CN=67c209ef8d877cc1fe987a9c534bea5b558b8d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:19:fe:7f:2e:4a:26:57:17:26:0a:af:c8:0a:
                    47:01:d1:7b:27:c2:88:c8:06:08:7f:e1:d5:25:06:
                    8f:5e:10:e4:73:65:68:47:17:14:8c:47:ab:40:50:
                    ef:60:84:34:56:00:33:1c:f0:96:e4:ff:78:36:00:
                    91:1c:08:14:d2:b9:a3:45:4e:4d:91:7f:94:03:10:
                    63:fa:f8:ec:cf:91:2d:ca:24:eb:a7:e7:56:6c:b5:
                    f0:11:50:0f:67:34:d9:29:a5:51:6c:f9:a6:f6:b0:
                    02:14:9b:1a:9f:e6:89:54:e4:30:dd:3c:c7:a7:88:
                    3d:72:86:c7:8a:8a:61:7a:fa:89:4f:ba:f0:66:65:
                    ec:01:ff:c0:10:b8:ae:f6:55:7a:80:42:f4:e2:34:
                    51:11:35:97:88:04:9f:ed:05:6d:78:09:3c:ab:3d:
                    a6:30:cd:fb:e2:c0:b7:6e:be:70:53:9b:56:15:41:
                    76:63:67:07:9d:c6:b2:d3:8f:f2:74:a6:c6:e6:9c:
                    bd:bf:e1:38:b4:12:e0:fb:6f:79:d0:1c:0a:36:27:
                    ea:eb:82:6c:fb:6c:56:65:bc:12:cd:12:ca:ec:91:
                    bd:8c:d5:6f:83:ee:d6:f0:2d:2f:58:19:7a:0b:87:
                    f2:26:43:c8:d5:26:17:fb:66:1c:b5:b9:13:70:fb:
                    06:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C2:09:EF:8D:87:7C:C1:FE:98:7A:9C:53:4B:EA:5B:55:8B:8D:36
            X509v3 Authority Key Identifier:
                keyid:6F:C3:33:DE:2D:8E:70:37:13:42:54:C2:7C:E1:C4:2B:F4:75:A2:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8Mz3i2OcDcTQlTCfOHEK_R1oos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:4e:9c:c1:54:d6:e2:74:c6:f6:ca:ae:14:dc:b0:ee:6b:7c:
         72:41:10:76:6a:6f:b7:45:7f:22:a3:83:52:a5:02:44:eb:53:
         46:d8:9a:78:74:4a:bc:77:4d:f3:b3:30:8a:d4:28:4c:b2:6a:
         11:39:31:65:23:6f:1e:c8:b4:e5:99:69:a7:04:70:6b:aa:a5:
         2f:91:b9:dd:9e:45:73:ef:b7:b2:aa:7d:12:86:71:29:fc:50:
         4d:fc:5f:4f:02:55:59:7e:d6:68:aa:1c:1b:db:94:a6:54:d7:
         50:29:25:fc:29:16:19:02:f9:71:e0:3d:b5:26:22:69:fc:d6:
         e4:e0:50:37:1c:be:12:86:54:61:da:54:20:e0:9b:35:62:da:
         8e:c1:15:e7:e7:c7:0b:3a:a6:88:e8:11:a1:8a:d2:cc:57:3d:
         56:82:6d:36:fa:62:4c:af:42:f9:bf:82:1f:91:26:c3:d4:31:
         4f:13:75:cd:a5:b2:ea:de:68:44:6f:42:ab:7e:ea:ef:74:b5:
         fa:3b:58:a8:ae:5b:22:a6:fb:90:8e:e6:5c:62:42:6c:d1:aa:
         1f:54:ce:c3:83:bf:d8:e5:0d:63:3f:b5:ca:d6:84:19:7e:e3:
         c3:a7:23:53:5d:b8:fa:09:8a:53:3c:85:27:42:3d:87:ff:49:
         8c:29:7f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 20:28:47 2026 by rpki-client