Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
File:                     3F-syhTeCBdO9clskfHngl9C0Hs.mft (raw, json)
Hash identifier:          7oigbdxyjZxwp+ow+JmksPdKvIJnLptiT8Gp0eASXUw=
Subject key identifier:   8B:E9:A1:A3:59:5E:BE:C7:B9:27:FC:1F:B2:4F:45:A3:C8:C2:BE:F0
Authority key identifier: DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B
Certificate issuer:       /CN=dc5facca14de08174ef5c96c91f1e7825f42d07b
Certificate serial:       01A00025BE26395BC6C7209C2468C97EB98D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
Manifest number:          16F2
Signing time:             Fri 14 Aug 2026 12:01:08 +0000
Manifest this update:     Fri 14 Aug 2026 12:01:08 +0000
Manifest next update:     Sat 15 Aug 2026 12:01:08 +0000
Files and hashes:         1: 3F-syhTeCBdO9clskfHngl9C0Hs.crl (hash: tfWelQ0DueeVIbdLspmxPhLyEuyCOMunW28JTU4zlxk=)
                          2: 8cfj4AnF2yhGPptSyF2jUpxr_S0.roa (hash: DzmUzilMBBgQsPSM2fLdsvW1h+o9QZQZ1zF5bMN9CFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 12:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:25:be:26:39:5b:c6:c7:20:9c:24:68:c9:7e:b9:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc5facca14de08174ef5c96c91f1e7825f42d07b
        Validity
            Not Before: Aug 14 12:01:08 2026 GMT
            Not After : Aug 15 12:01:08 2026 GMT
        Subject: CN=8be9a1a3595ebec7b927fc1fb24f45a3c8c2bef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:17:c9:92:5c:70:12:f9:58:f3:3a:75:fe:13:
                    cf:be:c4:28:90:bf:84:46:31:d3:2d:f6:4f:4a:fa:
                    46:b7:75:df:05:34:53:d9:3c:6b:37:33:58:f8:57:
                    bb:85:f4:d4:37:67:47:2b:38:74:b5:fd:39:ae:4c:
                    b3:71:a4:46:75:f8:85:71:26:32:90:92:fb:37:c1:
                    cf:4e:67:e9:e2:2d:d6:90:bf:22:0d:91:b5:6b:00:
                    14:2e:fa:9a:11:e9:a7:52:8d:72:e0:15:80:c4:ac:
                    ea:7c:8b:63:69:5c:ea:45:5b:5e:ff:cb:4b:b8:b8:
                    84:5c:bb:2c:e7:3c:aa:a5:3b:98:a4:75:f3:c5:16:
                    2a:d2:2c:2d:01:13:56:1d:52:d2:a4:52:b0:24:ac:
                    70:4d:c0:b1:a7:f3:5b:02:a1:42:82:66:43:df:9b:
                    da:bb:4d:33:bf:ab:4b:8f:3d:f1:6d:5a:ba:ea:d5:
                    e0:73:07:02:88:61:b7:b3:f2:01:12:4b:1c:45:02:
                    5a:a6:f2:6f:ca:44:57:a8:1c:b7:c7:e3:b8:84:5e:
                    06:96:47:cf:89:21:46:1f:8d:27:76:d5:80:aa:e2:
                    81:49:54:ea:a8:55:57:07:53:c9:74:d6:9f:30:54:
                    50:2e:b2:4d:bd:8d:60:a8:41:38:a5:d9:43:0d:6d:
                    64:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E9:A1:A3:59:5E:BE:C7:B9:27:FC:1F:B2:4F:45:A3:C8:C2:BE:F0
            X509v3 Authority Key Identifier:
                keyid:DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:9b:44:4d:ca:2a:5e:dc:5a:a1:17:89:56:b0:7c:ad:cb:8b:
         c0:f9:c5:a4:16:56:00:6d:95:fe:85:0d:62:80:18:46:82:a9:
         57:cf:1b:ed:45:f9:42:bb:bb:94:f5:cd:54:21:14:71:57:1e:
         6a:a6:d8:79:8a:50:2c:5d:ce:2f:8c:99:9c:72:d7:50:b7:52:
         d1:10:b5:f5:2c:ba:f1:4e:f1:16:9b:27:ba:b0:20:79:fe:5c:
         2d:ba:19:8c:15:bd:0d:5f:93:15:88:f0:47:bc:01:ea:f9:25:
         1b:81:73:9c:ee:dd:f3:8a:ed:41:9a:5d:17:b4:d5:29:fa:79:
         12:91:a3:05:9b:43:7d:aa:f8:2e:82:76:d4:a6:20:b7:ca:b6:
         9f:1f:94:13:a7:23:8d:2c:84:29:93:4b:06:14:6d:58:f9:22:
         c8:dc:52:57:5f:0f:ec:ff:9b:b3:68:c9:af:2c:7a:35:4e:14:
         57:d6:67:b6:41:e2:ce:88:9c:4d:a5:1d:03:9b:44:b6:c9:41:
         20:47:75:ba:e1:f4:c7:f6:f3:e6:13:8e:12:80:30:c8:a1:dd:
         95:84:67:17:51:72:a2:33:39:a0:c9:aa:46:58:d7:35:8d:97:
         66:37:32:e8:bd:87:06:30:ae:45:33:ba:ec:9a:b7:a6:a8:4c:
         9a:d6:13:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:10 2026 by rpki-client