Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft
File:                     8hVRewsgMJ6RZAW54e0hoEaaaJU.mft (raw, json)
Hash identifier:          /UY6CiIV8t3UgiHMlEPhSMiBAq+ZmonoHhlW+dZJ6nI=
Subject key identifier:   D5:79:CC:D1:83:E6:46:4D:A3:FD:BD:4D:E0:CC:3B:73:09:DE:32:8E
Authority key identifier: F2:15:51:7B:0B:20:30:9E:91:64:05:B9:E1:ED:21:A0:46:9A:68:95
Certificate issuer:       /CN=f215517b0b20309e916405b9e1ed21a0469a6895
Certificate serial:       01A001A644B83B69F16B99AA2EFFD29043AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft
Manifest number:          062F
Signing time:             Fri 14 Aug 2026 19:01:08 +0000
Manifest this update:     Fri 14 Aug 2026 19:01:08 +0000
Manifest next update:     Sat 15 Aug 2026 19:01:08 +0000
Files and hashes:         1: 8hVRewsgMJ6RZAW54e0hoEaaaJU.crl (hash: GsSULB0oG0jB/FzBJuMxYMuK6jMP2wnA1RuiD6j5S+o=)
                          2: Ldw7iPn1SUZR0o_Mw2A1SwKSf3o.roa (hash: qx+pYfWPpYvuMywyJs0SwN08g9+w1RyFT1RhBFHmVnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a6:44:b8:3b:69:f1:6b:99:aa:2e:ff:d2:90:43:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f215517b0b20309e916405b9e1ed21a0469a6895
        Validity
            Not Before: Aug 14 19:01:08 2026 GMT
            Not After : Aug 15 19:01:08 2026 GMT
        Subject: CN=d579ccd183e6464da3fdbd4de0cc3b7309de328e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:35:81:01:f7:57:98:f5:b5:42:5a:a7:d3:73:
                    70:15:cd:d4:c0:1a:ba:e0:81:37:97:50:41:d1:6c:
                    5a:83:42:7b:3b:17:be:cd:fd:d7:7f:d5:d1:35:91:
                    95:53:95:a0:ed:fe:6e:5b:23:e0:e1:36:68:32:02:
                    8e:34:3e:2e:ad:99:c5:53:4e:99:39:81:b3:a4:05:
                    a4:5d:d8:bb:c4:b1:a4:28:d3:7b:8e:af:eb:a7:31:
                    96:11:07:f1:42:5f:fa:4c:93:a3:18:7b:15:73:b1:
                    6b:b3:9e:d1:fe:28:85:b6:1e:fd:12:9b:0b:4f:3e:
                    86:d7:b0:fd:48:de:82:a1:c8:60:be:71:47:df:b3:
                    54:33:09:14:39:3a:c8:aa:45:9d:50:9f:e8:52:16:
                    50:ee:2f:ea:93:18:0b:43:c5:63:33:70:9c:bb:54:
                    9a:bd:6a:89:8e:fd:79:a5:f8:81:16:a4:da:b2:12:
                    48:32:aa:40:e4:ea:a2:89:2e:80:1f:1c:51:f2:9a:
                    f0:31:79:48:ca:32:17:63:af:c0:27:d5:c9:b2:ea:
                    8e:5f:d2:a1:1d:39:d3:01:e7:e8:cf:86:98:2d:05:
                    55:4a:3b:58:fc:be:14:48:a9:7e:4b:7b:86:c4:5e:
                    24:56:5e:ea:19:24:c1:ba:ac:0b:42:c5:6a:ea:2e:
                    30:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:79:CC:D1:83:E6:46:4D:A3:FD:BD:4D:E0:CC:3B:73:09:DE:32:8E
            X509v3 Authority Key Identifier:
                keyid:F2:15:51:7B:0B:20:30:9E:91:64:05:B9:E1:ED:21:A0:46:9A:68:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:62:e6:d5:21:7c:7e:ad:2c:34:c3:47:7a:e4:3a:8b:32:88:
         a5:7c:e2:0b:12:ac:43:17:46:35:77:68:39:bf:26:73:cf:be:
         e1:92:55:69:87:10:12:20:48:68:d9:e3:b3:13:81:6e:2e:b8:
         07:95:f9:30:9b:c7:19:3a:f4:a6:f9:db:b7:3b:1d:6f:05:77:
         08:8d:46:b7:bc:f4:fa:67:3c:95:d1:bc:29:d6:c3:55:c1:9d:
         c4:df:84:23:9f:cd:f2:a4:6e:2f:a9:cc:3c:af:a9:bc:46:d8:
         61:af:7b:84:23:d0:20:c1:a9:33:69:09:ce:06:a6:41:13:c2:
         9d:92:2f:fa:9d:a7:a3:c1:a7:68:5a:3e:b2:7c:e6:de:63:71:
         3b:cd:9a:cd:ae:e7:98:de:02:26:d7:16:11:2a:86:82:9a:ad:
         23:5c:28:76:f7:06:2b:d0:38:2d:21:61:1e:22:24:f8:ac:ab:
         b8:7f:3e:aa:27:c5:ae:20:75:81:2f:8b:40:9f:ce:42:19:f8:
         78:8b:6c:dc:79:84:1b:28:0a:42:82:46:b3:19:7a:1f:d4:8d:
         c7:72:26:f6:62:a3:2e:ad:3c:fa:48:40:25:8b:8e:4f:52:25:
         2c:e2:22:9c:95:dd:5f:5c:c7:14:4b:da:f1:ec:de:5e:f1:67:
         0f:8f:24:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:29:32 2026 by rpki-client