Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
File:                     61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft (raw, json)
Hash identifier:          Wm1UjIPm0nTHyL/Z7sBYUHwinHbdYpKOrrVbLZ8Vw48=
Subject key identifier:   FC:36:80:1B:B3:55:85:FF:D0:5D:0E:49:47:0E:D8:27:EE:51:FD:E7
Authority key identifier: EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B
Certificate issuer:       /CN=eb50b439d488e1b1a69e3586098621956c0edc7b
Certificate serial:       01A001013353001DC3F4833E54CBB85C6E6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
Manifest number:          0FFA
Signing time:             Fri 14 Aug 2026 16:00:50 +0000
Manifest this update:     Fri 14 Aug 2026 16:00:50 +0000
Manifest next update:     Sat 15 Aug 2026 16:00:50 +0000
Files and hashes:         1: 61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl (hash: 9zDsq25M2eQyJ5/60wJVAekYwTKWEwD4+3bo6fTLsAw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:33:53:00:1d:c3:f4:83:3e:54:cb:b8:5c:6e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb50b439d488e1b1a69e3586098621956c0edc7b
        Validity
            Not Before: Aug 14 16:00:50 2026 GMT
            Not After : Aug 15 16:00:50 2026 GMT
        Subject: CN=fc36801bb35585ffd05d0e49470ed827ee51fde7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bb:12:54:ce:bd:82:d4:cc:7f:e4:6a:31:cd:
                    8a:56:d7:42:06:5a:85:22:d7:37:3c:49:f9:39:3d:
                    31:29:ee:35:ee:74:d7:55:24:45:f6:c5:7c:be:57:
                    ac:8f:61:d7:ea:b1:63:46:71:43:41:4b:f9:67:19:
                    96:9f:f0:3e:34:65:bb:01:55:19:1a:e8:80:eb:6c:
                    af:60:df:dd:e4:b1:60:99:32:b7:94:a0:c1:d3:27:
                    21:6f:09:bd:cd:02:83:1f:0a:54:3c:47:11:63:29:
                    81:0e:9b:2f:27:fc:9b:97:ba:de:0f:97:70:98:04:
                    2c:34:44:7d:13:ab:cf:09:39:18:ef:3b:74:84:b0:
                    04:2a:2b:de:bf:42:cf:63:27:98:7c:4f:fa:ec:b7:
                    76:26:61:35:16:bc:b7:5f:fd:5b:2e:fd:6f:4f:35:
                    f2:48:f5:15:60:a9:14:5a:c3:cd:7d:93:21:d6:cd:
                    cf:22:68:57:31:93:86:06:67:2e:4b:29:68:cb:fd:
                    c8:9e:78:b7:7a:cb:6d:4a:a0:36:03:70:1f:2c:73:
                    d9:60:f7:c5:2b:d2:82:94:d1:a6:53:ca:b7:b8:73:
                    c9:02:cb:ee:12:e9:92:a6:8f:00:2b:30:1c:31:4c:
                    1c:d6:14:5e:3d:fa:09:33:42:89:02:21:b8:f9:87:
                    18:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:36:80:1B:B3:55:85:FF:D0:5D:0E:49:47:0E:D8:27:EE:51:FD:E7
            X509v3 Authority Key Identifier:
                keyid:EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:bb:e2:b7:4d:e4:bf:5a:75:5d:65:1c:75:0d:be:a2:4b:3a:
         6b:d6:54:0c:9c:b4:85:42:c9:b2:8f:b6:d3:58:bd:a8:fa:87:
         b5:0c:c8:cd:6a:9e:39:ae:f3:66:15:3c:e2:d2:07:ed:e8:62:
         9e:8b:50:06:0a:65:89:41:0b:e6:26:1a:86:d1:b7:bd:ed:3d:
         01:70:1d:17:30:33:5b:34:da:25:55:22:ab:7c:24:ee:ca:d7:
         ef:02:1c:e6:a2:f8:63:12:c4:4c:75:09:e0:27:29:1b:01:26:
         67:37:c5:ed:95:1d:e8:64:00:40:a5:44:a6:29:61:f9:a2:91:
         00:d6:6d:8c:e5:a8:be:ca:6e:66:72:f1:b7:8e:a4:56:a2:3a:
         08:43:b4:4e:74:5c:47:94:62:98:99:19:bb:62:c4:e8:95:1c:
         11:5f:ef:36:94:cc:41:bf:b1:ca:08:a7:c0:d8:86:60:ef:28:
         49:1b:6f:ea:80:dc:1c:e7:3d:d1:ce:ef:0d:1c:9b:00:f1:27:
         3c:0b:3e:a8:d6:4e:fe:e4:08:4c:35:3b:b5:40:23:9e:a4:07:
         19:f5:4d:f6:ff:46:f7:d0:df:2b:d3:a2:78:1a:7c:f6:1a:40:
         d9:fe:52:b8:c0:c8:ce:4a:c9:34:0e:0e:8d:8b:16:55:a5:e9:
         9d:62:17:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:35 2026 by rpki-client