Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
File:                     D4jGhrHhIvzcFlwCN6D149mQvwE.mft (raw, json)
Hash identifier:          HpTnOaDx5MLJFnkgSgdTNv8BUkMQFU1QAsUB2XNzhJg=
Subject key identifier:   FF:C7:97:BE:CF:F1:4B:45:8C:02:3D:E9:3B:2D:65:5F:E0:BF:9D:13
Authority key identifier: 0F:88:C6:86:B1:E1:22:FC:DC:16:5C:02:37:A0:F5:E3:D9:90:BF:01
Certificate issuer:       /CN=0f88c686b1e122fcdc165c0237a0f5e3d990bf01
Certificate serial:       01A001010A4C7AB5476E4B19EB9A3EC73FD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D4jGhrHhIvzcFlwCN6D149mQvwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
Manifest number:          0FAD
Signing time:             Fri 14 Aug 2026 16:00:40 +0000
Manifest this update:     Fri 14 Aug 2026 16:00:40 +0000
Manifest next update:     Sat 15 Aug 2026 16:00:40 +0000
Files and hashes:         1: D4jGhrHhIvzcFlwCN6D149mQvwE.crl (hash: orFjfOVTu6QEMhf4ZyQXjHmWMqfZnIPKu29x9ScjdEg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D4jGhrHhIvzcFlwCN6D149mQvwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:0a:4c:7a:b5:47:6e:4b:19:eb:9a:3e:c7:3f:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f88c686b1e122fcdc165c0237a0f5e3d990bf01
        Validity
            Not Before: Aug 14 16:00:40 2026 GMT
            Not After : Aug 15 16:00:40 2026 GMT
        Subject: CN=ffc797becff14b458c023de93b2d655fe0bf9d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:db:4c:01:6e:73:8e:50:3f:ce:69:b5:61:00:
                    c6:0a:5b:6b:38:62:d7:4b:eb:e3:9a:b7:8e:6e:cd:
                    d5:06:3d:c2:5a:1b:dd:bd:35:28:85:e0:1d:b0:d7:
                    fd:a5:b8:f7:54:26:90:64:85:72:aa:52:66:29:9d:
                    7b:19:e0:c5:7e:00:c2:e9:90:0a:ca:a7:cd:7d:df:
                    9a:a0:33:e6:f3:49:89:d6:10:2e:eb:e1:6c:f3:2d:
                    ce:b4:f5:8a:15:52:d8:5d:a8:0a:1a:ff:6a:d7:c6:
                    dd:ed:09:ae:66:30:d1:59:61:85:12:b1:95:b4:ea:
                    54:e3:c1:a8:84:a6:b5:03:92:0e:8e:5d:c4:7b:9d:
                    fc:0e:11:a3:75:5e:f5:58:63:e3:4d:4a:95:70:42:
                    68:8a:0f:93:27:f4:24:9f:d7:19:fd:8c:3f:24:7e:
                    d1:b4:a4:c8:d4:a8:b2:10:a5:0d:63:c7:78:1a:67:
                    a0:fa:f2:e5:b0:66:30:39:5f:2c:a1:b0:4d:85:1c:
                    83:61:2d:36:4e:fe:10:5f:41:c9:1d:c3:5d:94:16:
                    03:fc:14:98:2c:c5:7f:d3:1c:fb:17:79:36:a2:07:
                    e3:4b:3c:a6:3c:29:dc:a3:7b:23:f6:e5:ad:8a:f2:
                    09:9b:bf:ab:6f:33:58:8f:9c:bc:68:bf:a2:75:e1:
                    07:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C7:97:BE:CF:F1:4B:45:8C:02:3D:E9:3B:2D:65:5F:E0:BF:9D:13
            X509v3 Authority Key Identifier:
                keyid:0F:88:C6:86:B1:E1:22:FC:DC:16:5C:02:37:A0:F5:E3:D9:90:BF:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4jGhrHhIvzcFlwCN6D149mQvwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:00:27:ca:d0:0c:35:75:fe:7a:09:f7:4e:91:b6:1d:2e:91:
         13:02:9c:64:97:b7:86:22:2b:e8:a5:1f:1b:84:b1:79:80:e6:
         e8:00:f7:16:f2:c1:66:0a:85:a0:c1:91:69:b3:7f:ae:69:35:
         29:db:e3:c3:90:0c:20:2e:d7:e9:9f:65:ed:83:2a:37:d3:e8:
         df:e4:64:a9:21:ae:29:e5:b0:b7:57:fa:4e:62:f6:05:88:28:
         4e:63:63:e1:2a:91:48:45:0e:f3:88:cd:8d:de:e6:73:f0:df:
         fd:08:cb:ab:b3:71:85:f5:63:6d:95:41:26:13:4b:4d:3d:ad:
         e0:d4:d6:7c:ef:74:3a:88:2b:e4:5f:be:f9:6d:33:26:8b:dd:
         d2:ef:cb:c8:85:6a:32:1e:1c:98:05:02:7d:b0:31:ba:09:6a:
         b0:5f:b5:2e:8b:de:cd:9c:eb:a8:1c:02:45:bc:a8:fe:51:6e:
         0a:58:d5:63:c3:62:8c:64:4b:31:34:b9:14:a4:d1:99:ce:0e:
         d3:54:9c:dc:47:e4:50:d3:77:fb:0c:90:37:77:29:1a:93:f8:
         7e:ea:49:1e:cd:54:c3:f3:bb:73:64:6e:05:11:94:5e:91:bd:
         dd:1b:ae:99:ee:fe:54:77:f0:e0:75:9f:b4:3a:f1:60:f1:01:
         12:83:0d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:32:10 2026 by rpki-client