Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft
File:                     6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft (raw, json)
Hash identifier:          obqugjnJ64J7TDo2r3xLUYTDAEsTif0JqwY0iamePCg=
Subject key identifier:   FA:E0:0F:28:87:86:F0:67:5E:DF:9D:EF:99:5E:0D:26:25:B0:85:66
Authority key identifier: E8:BB:C1:E5:37:E2:F3:D1:E4:DA:B2:83:2A:E6:24:B5:D6:37:9E:ED
Certificate issuer:       /CN=e8bbc1e537e2f3d1e4dab2832ae624b5d6379eed
Certificate serial:       01A0404EA047291C9D7761A1C14C787ACE2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LvB5Tfi89Hk2rKDKuYktdY3nu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft
Manifest number:          02B3
Signing time:             Wed 26 Aug 2026 23:01:29 +0000
Manifest this update:     Wed 26 Aug 2026 23:01:29 +0000
Manifest next update:     Thu 27 Aug 2026 23:01:29 +0000
Files and hashes:         1: 6LvB5Tfi89Hk2rKDKuYktdY3nu0.crl (hash: VUuvA/sCXzXzgzI8+Ug9wS4OY1JlSquzKnYYf+U4IyQ=)
                          2: H34_SM699ZKERT6hxcJhZ4iWFhA.asa (hash: LcP5vILTWhpM9U0pUBj8DZKaMz5evKsVfP9lC5BGBCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6LvB5Tfi89Hk2rKDKuYktdY3nu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:4e:a0:47:29:1c:9d:77:61:a1:c1:4c:78:7a:ce:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8bbc1e537e2f3d1e4dab2832ae624b5d6379eed
        Validity
            Not Before: Aug 26 23:01:29 2026 GMT
            Not After : Aug 27 23:01:29 2026 GMT
        Subject: CN=fae00f288786f0675edf9def995e0d2625b08566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:02:c3:56:99:ea:aa:2f:67:71:d4:69:48:bd:
                    74:e5:1a:eb:b6:27:0c:ea:7e:75:f9:04:78:8c:85:
                    fc:69:88:b5:3c:e1:0a:2b:31:9d:f7:f0:57:2b:a3:
                    96:a0:cc:29:49:cd:4d:cd:07:f3:1a:8c:f5:82:bb:
                    cb:e4:15:79:c9:fe:27:2f:74:e4:b6:6d:44:ec:fc:
                    c3:21:bc:5e:ab:98:59:74:7e:b8:29:d2:c4:f1:f8:
                    27:ca:a7:77:40:65:7e:20:1a:d8:d4:57:ce:ac:52:
                    1a:76:c8:0b:17:c8:a3:b7:72:5d:d4:32:cb:ac:3d:
                    d6:2c:f9:d1:f6:d9:7d:ad:71:8f:b3:3e:9c:4e:bc:
                    4f:6d:6b:06:1e:ff:08:19:06:4a:a7:da:83:3a:90:
                    f0:d5:21:ba:02:7d:97:b4:46:63:5f:73:e6:cf:42:
                    de:52:6c:46:72:a8:10:27:1b:a3:26:6b:17:51:13:
                    52:8b:18:41:96:34:1c:6f:c5:a1:a1:35:0f:40:c9:
                    b3:09:33:28:a5:22:97:e3:33:84:4f:ac:f4:41:ad:
                    83:ee:1c:4b:5f:f3:92:65:3a:f1:67:0f:ae:3d:5f:
                    01:e9:2a:b9:6e:d3:b6:18:42:d3:3d:47:6e:74:32:
                    a9:a4:41:f0:47:99:54:c9:82:2b:f3:cf:59:9b:7c:
                    a0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E0:0F:28:87:86:F0:67:5E:DF:9D:EF:99:5E:0D:26:25:B0:85:66
            X509v3 Authority Key Identifier:
                keyid:E8:BB:C1:E5:37:E2:F3:D1:E4:DA:B2:83:2A:E6:24:B5:D6:37:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LvB5Tfi89Hk2rKDKuYktdY3nu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:3b:b8:15:6f:e5:3b:0c:d6:05:e4:3b:c6:32:fb:88:de:ce:
         c0:cb:42:11:bc:d9:58:bd:40:e8:2e:37:d1:17:ed:53:fc:c9:
         27:78:d2:d4:aa:26:bc:70:d4:73:a4:f0:0c:a8:fd:73:f6:c3:
         7b:21:c0:3c:42:b2:7b:27:08:a6:4b:56:b3:27:31:06:fc:57:
         35:b8:c8:90:8c:db:8f:6c:d1:72:e5:29:a7:e7:1f:61:b0:59:
         08:3b:42:ce:06:e0:dd:17:1a:ef:70:cb:ff:fa:ab:a4:ca:36:
         82:38:01:08:79:6c:7b:97:54:6f:b6:23:eb:86:6b:f3:eb:40:
         a0:52:a6:eb:fb:24:5d:fc:9f:b6:0c:10:24:c9:32:cd:a0:41:
         c4:8e:1a:fc:a9:6e:bf:a6:dd:ec:c1:4e:07:a7:ce:68:e4:fd:
         c7:ab:55:f2:7c:83:15:e6:99:ef:45:00:f2:f3:d4:a0:16:e1:
         3a:80:00:33:0c:a7:56:6d:d1:9b:4c:0f:21:90:ef:33:65:b3:
         c6:79:8c:26:39:02:f1:3c:e2:d2:28:c1:14:80:97:f2:6c:57:
         ab:fc:33:d3:62:bf:f8:96:bd:28:02:ad:cd:8b:42:54:ff:1f:
         48:f2:0c:f0:20:6a:b8:5c:39:af:d0:bb:43:b0:5a:df:be:e8:
         1f:98:0c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:53:10 2026 by rpki-client