Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
File:                     8bv5vuUx897i0Du_Tmnvgu7bma8.mft (raw, json)
Hash identifier:          zDm6tj5nC+qwnuTD5JCRqphDa5ZBUe+31MDDcO7e/1w=
Subject key identifier:   8E:EA:71:BB:52:38:68:FC:A0:A3:56:E9:CC:9E:E4:DB:63:F0:C8:E6
Authority key identifier: F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF
Certificate issuer:       /CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
Certificate serial:       01A001DCABD3FE7122D7AE3119C041BEDEE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
Manifest number:          15AB
Signing time:             Fri 14 Aug 2026 20:00:34 +0000
Manifest this update:     Fri 14 Aug 2026 20:00:34 +0000
Manifest next update:     Sat 15 Aug 2026 20:00:34 +0000
Files and hashes:         1: 8bv5vuUx897i0Du_Tmnvgu7bma8.crl (hash: 0Qhowj+hSbiQqla6nIK8qnJw2SGavCblBOy50isFJ10=)
                          2: OYgre_-TZIfJxOW5CqDrgpwgkMo.roa (hash: OBphoVWe1wpCXSnuX5Vie+bHC5Q80K+aLt8j/e5pkXQ=)
                          3: PQaM9i-ZFvgM-odibb8AZoCwaLw.roa (hash: 6qm8ZSVZvMA/kQTFFqEROzq6H8nPq+g1vFjlYN9Vl3Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dc:ab:d3:fe:71:22:d7:ae:31:19:c0:41:be:de:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
        Validity
            Not Before: Aug 14 20:00:34 2026 GMT
            Not After : Aug 15 20:00:34 2026 GMT
        Subject: CN=8eea71bb523868fca0a356e9cc9ee4db63f0c8e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c6:ee:6e:92:40:3b:0b:48:d7:83:58:ee:fa:
                    3e:3a:8d:33:70:9d:ae:79:a5:87:80:81:78:0a:21:
                    ae:03:2a:0c:7b:85:be:e9:d6:77:e9:59:0b:0c:03:
                    a5:0e:a8:de:95:0f:77:b0:48:4c:5b:88:77:35:22:
                    92:dc:8a:82:ff:b4:8a:da:d1:d0:06:eb:7f:18:39:
                    2f:c1:6b:e9:ac:97:db:e5:96:b9:5f:f6:72:b1:f1:
                    ec:4b:25:82:55:32:9a:a3:16:7d:e1:8f:e2:6c:ec:
                    1d:16:15:2f:7d:09:11:6a:67:eb:11:95:33:4a:b3:
                    49:cb:28:db:88:4b:b5:bf:0b:21:f4:91:95:a0:1e:
                    7c:73:da:ef:e6:8c:17:8a:19:42:11:33:50:de:b3:
                    2d:18:df:72:ea:55:e5:8a:22:64:86:ac:9d:28:64:
                    df:1f:1e:03:44:6e:95:9f:53:e5:8f:02:51:e3:02:
                    d5:66:43:38:63:e1:5e:35:f8:71:e1:31:47:d4:58:
                    bd:8d:46:d8:07:3c:13:e7:1a:10:24:ab:27:1f:f2:
                    04:a6:92:4e:a2:93:e1:8a:8f:a3:ed:53:32:1c:9f:
                    75:44:14:aa:f0:e6:78:6a:d2:c2:38:bc:32:d8:81:
                    db:ee:8f:c9:38:cc:e9:7d:e6:88:44:52:3a:03:72:
                    de:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:EA:71:BB:52:38:68:FC:A0:A3:56:E9:CC:9E:E4:DB:63:F0:C8:E6
            X509v3 Authority Key Identifier:
                keyid:F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:76:9b:28:8c:68:8d:bf:79:fc:15:6d:42:2d:ab:6b:c9:38:
         75:77:90:29:f8:5b:de:e0:54:87:aa:c7:84:a2:4e:f7:8c:8f:
         12:5d:48:c5:2c:27:f4:6f:70:49:a7:12:8a:99:5a:ad:fc:23:
         3b:76:eb:04:53:9e:c9:3e:a7:fa:1f:21:c6:ea:93:da:8b:5f:
         5c:7d:98:cf:65:91:1d:80:af:96:a5:d0:9f:24:f1:96:4d:1d:
         a0:3c:55:ce:18:17:96:7a:ed:60:c5:8f:0d:c1:fe:d3:ee:a2:
         64:cd:c0:7f:a0:25:39:96:7a:7c:72:ed:49:33:21:df:08:0c:
         e4:bb:1e:ba:60:8e:89:4c:b4:d8:4f:56:de:7b:75:bc:76:46:
         9f:4f:8d:b4:8c:09:9f:d5:d8:c4:95:46:ec:ea:87:01:8e:47:
         4a:07:49:29:d3:99:a7:78:5c:04:ed:26:51:d4:87:66:6e:c7:
         36:45:d0:b3:34:c8:ad:1a:ea:34:58:f1:90:68:f2:e6:75:76:
         f2:20:c5:ea:75:85:cc:d4:b5:8a:f7:eb:40:83:2d:d8:aa:59:
         69:d1:b8:8c:44:f3:b0:55:f2:44:95:f8:2d:23:c1:5b:10:17:
         ef:72:8e:fa:6d:7d:d3:47:5f:bb:84:94:38:0b:ab:66:ab:3d:
         2b:4e:a9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:30:42 2026 by rpki-client