Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
File:                     EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft (raw, json)
Hash identifier:          v8seFgll47cwB1JEixTHkXeGZH2Jh7OeERlHGou3Zlo=
Subject key identifier:   5B:36:E0:11:8B:FC:41:F2:C7:FE:D2:E6:97:77:AD:47:C3:95:EC:12
Authority key identifier: 11:55:B1:6F:A9:DB:7B:CE:EC:CB:89:D1:FE:25:26:32:C0:97:25:14
Certificate issuer:       /CN=1155b16fa9db7bceeccb89d1fe252632c0972514
Certificate serial:       01A0016FD4267A7C3742A736E92F819B2B46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
Manifest number:          13F8
Signing time:             Fri 14 Aug 2026 18:01:40 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:40 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:40 +0000
Files and hashes:         1: EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl (hash: ARzZtEPMzP5haG/2U45jOYNnS2WSNoSj5zmDIFypUxs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:d4:26:7a:7c:37:42:a7:36:e9:2f:81:9b:2b:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1155b16fa9db7bceeccb89d1fe252632c0972514
        Validity
            Not Before: Aug 14 18:01:40 2026 GMT
            Not After : Aug 15 18:01:40 2026 GMT
        Subject: CN=5b36e0118bfc41f2c7fed2e69777ad47c395ec12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:39:96:56:97:71:f1:7a:00:de:86:98:b7:d2:
                    e3:98:3d:98:69:fe:a5:03:d8:f3:c8:f5:56:a3:07:
                    68:37:32:a1:72:8f:3e:f5:b3:14:f3:78:e5:bb:2f:
                    b2:33:95:34:ea:2a:06:79:7a:c7:5a:35:11:bd:fe:
                    8d:3c:c2:48:ab:c9:ef:74:e9:72:61:06:0e:61:b4:
                    2c:4b:9b:db:80:0b:1c:fb:21:50:83:d3:41:7f:b2:
                    a7:8f:4e:e8:93:94:fb:e0:1a:af:34:2a:31:1e:d6:
                    fb:66:4f:3b:bf:8d:7e:aa:bc:53:3f:49:d9:9b:ee:
                    9b:9d:98:e2:ce:29:da:6e:87:39:fd:7b:ce:b7:4e:
                    cf:3a:f3:aa:19:21:e6:1f:ef:13:a2:e3:48:eb:50:
                    15:73:a4:99:e8:c8:98:c3:2b:59:e8:20:ce:f9:1a:
                    8e:86:9e:2a:91:1c:e9:99:d5:26:d3:59:a7:2b:83:
                    2e:d7:e7:a7:27:d5:33:55:35:83:77:d1:ed:98:78:
                    94:df:3d:49:c2:d3:83:e5:b3:20:9f:63:cc:1f:73:
                    95:fc:39:93:ff:e1:9c:93:46:59:a3:e7:27:5b:2d:
                    b1:24:34:13:8d:d8:50:22:a4:53:7c:69:f1:77:f7:
                    28:f3:bb:28:11:b7:62:45:89:c6:8b:62:b4:1d:c0:
                    1e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:36:E0:11:8B:FC:41:F2:C7:FE:D2:E6:97:77:AD:47:C3:95:EC:12
            X509v3 Authority Key Identifier:
                keyid:11:55:B1:6F:A9:DB:7B:CE:EC:CB:89:D1:FE:25:26:32:C0:97:25:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:1b:80:7e:ac:8d:3e:30:f7:34:03:a1:fa:ef:a3:9b:cf:a7:
         4a:74:96:c0:28:a7:b1:88:51:b9:9c:57:a7:f4:7a:ea:7b:4b:
         f9:4d:3b:1b:3e:3f:93:3a:35:cf:d9:12:21:f0:a8:0c:23:a8:
         f8:71:79:89:01:03:23:25:d8:b9:3e:91:c3:c6:c7:07:52:f3:
         12:53:c8:ca:58:9a:03:99:84:32:4d:eb:85:c7:50:b2:e1:d2:
         c7:09:c3:09:b3:a5:c7:1d:3a:f9:86:a4:4d:92:f0:e3:6b:68:
         c2:de:ef:bc:ab:5a:7c:c3:3c:db:95:47:43:f0:e0:ed:8b:7c:
         44:b9:48:e9:9e:57:b6:1b:9f:ab:24:10:5a:55:7b:d2:dd:d4:
         8c:5a:ee:c7:b9:dc:19:a6:da:38:da:fb:ba:f2:5a:b0:ba:79:
         ea:5e:ca:2b:e5:11:6a:ac:3e:4b:6d:34:c9:b3:d8:76:0e:51:
         8c:5c:26:e7:c3:78:ea:d1:e0:4e:51:0d:ca:f2:af:66:63:a9:
         8b:5d:ae:b0:c5:36:1c:97:57:89:de:ad:45:ff:c9:2d:65:76:
         54:46:60:26:4d:34:8f:62:30:de:41:be:8b:ba:32:ba:39:3e:
         00:f3:e3:8e:82:1c:b2:5f:1e:4d:88:1f:bc:88:8f:46:6d:d8:
         52:b3:4d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:29:29 2026 by rpki-client