Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
File:                     8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft (raw, json)
Hash identifier:          YM6Nqo1GH4cnXWyzJeogXZAvwrFvRVZP5lTWXwBaYFg=
Subject key identifier:   5D:5C:63:02:17:87:06:7C:66:B0:FF:39:F5:F4:F6:AE:F4:18:34:7F
Authority key identifier: F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4
Certificate issuer:       /CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4
Certificate serial:       01A001011AD0760BE021DE891FF9F62A2E00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
Manifest number:          1184
Signing time:             Fri 14 Aug 2026 16:00:44 +0000
Manifest this update:     Fri 14 Aug 2026 16:00:44 +0000
Manifest next update:     Sat 15 Aug 2026 16:00:44 +0000
Files and hashes:         1: 1-2N7o3rXa2kEXEc9L-KyAvOeqf0.roa (hash: yUMOwLX6anzQEJQZ/ZLwqV3uE8drjI2D4SrjYJX1k20=)
                          2: 8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl (hash: S1kRjbg3pyKHZ1XoiEvpWlFtC1Q1nYi9qWMKMmli3bc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:1a:d0:76:0b:e0:21:de:89:1f:f9:f6:2a:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4
        Validity
            Not Before: Aug 14 16:00:44 2026 GMT
            Not After : Aug 15 16:00:44 2026 GMT
        Subject: CN=5d5c63021787067c66b0ff39f5f4f6aef418347f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6a:48:87:a8:63:d6:3c:1e:38:8d:e1:e8:e0:
                    3c:00:c9:4c:36:6e:91:ab:df:88:00:a9:11:0d:c2:
                    6d:1d:d1:c5:c2:69:24:72:96:64:d1:d7:0e:13:b3:
                    f2:ac:f9:e2:cc:22:8f:27:c5:74:89:87:30:0d:b8:
                    18:fc:fc:33:ca:75:6e:ef:60:3d:ff:b0:ba:4a:25:
                    3e:82:91:22:04:01:d6:ba:70:f4:16:1d:5a:e2:f4:
                    e2:89:8d:5a:0b:93:92:d8:7e:7a:52:42:19:4d:b6:
                    25:9a:5a:c6:e9:0d:2d:e4:64:9d:49:e2:87:4d:ff:
                    f3:7e:f1:43:f4:4e:d1:57:38:9a:58:bf:99:e0:62:
                    90:4e:d6:50:59:46:04:dd:82:58:f9:a4:35:81:0e:
                    94:74:e3:17:fa:b5:20:36:d0:a4:fa:92:18:cc:9c:
                    ff:e2:b4:d4:9c:2b:10:1c:86:d8:e2:28:46:66:9b:
                    b3:ee:ce:75:d0:1c:c3:fe:8f:d3:83:a6:71:fb:fd:
                    e6:0e:3d:de:c0:00:8e:d4:a1:04:c2:3f:bc:cb:6f:
                    d1:4e:12:ac:91:71:06:75:b0:64:0c:3b:96:94:0a:
                    df:79:98:63:79:c8:40:3e:5a:b2:95:f6:88:71:bf:
                    f0:6c:c2:eb:a5:19:bf:5d:25:c3:61:a4:5e:23:05:
                    cd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:5C:63:02:17:87:06:7C:66:B0:FF:39:F5:F4:F6:AE:F4:18:34:7F
            X509v3 Authority Key Identifier:
                keyid:F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:7a:14:b4:0d:fd:45:32:4c:28:3a:c1:2f:15:41:2e:89:53:
         22:b0:d0:94:97:94:47:c9:c8:9b:e0:93:6a:ef:05:08:8c:e2:
         42:5b:22:5f:34:c1:dc:62:5a:1b:46:7b:73:7b:ed:ec:4b:32:
         8c:7b:35:ad:a9:e9:9c:cd:3a:24:a4:02:d0:1a:62:08:f1:01:
         cd:79:6f:0d:de:5d:c9:d7:c1:76:37:e7:43:90:8e:40:a6:9b:
         ff:54:60:62:f7:e4:24:d4:9c:63:e9:53:51:33:49:1b:d9:cd:
         81:62:5f:1e:e9:95:b5:36:e6:b7:d4:51:32:08:d1:ca:fa:96:
         16:c1:c0:20:3e:99:e5:f0:33:14:83:8b:0d:a7:03:21:4c:ac:
         3c:3f:2b:5c:70:b9:04:7f:b2:75:2f:48:70:9b:9d:be:8e:b1:
         40:90:09:0a:37:14:c0:48:5f:33:12:59:48:39:af:31:2c:e4:
         31:13:db:e5:b4:1a:4c:ee:cd:7c:70:49:37:a7:99:88:f9:d1:
         06:0b:99:c1:62:26:90:68:e9:4b:6d:d3:ef:ad:e3:47:73:7f:
         a2:7f:01:e9:cb:7d:22:bd:9a:88:b4:73:db:99:37:28:4c:22:
         e5:92:b2:1d:15:32:b1:39:d5:65:50:3e:21:fd:ad:07:87:61:
         11:6f:e6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:34:45 2026 by rpki-client