Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
File:                     0YIiY6hwfHbz2ztr5xIiacgnrlU.mft (raw, json)
Hash identifier:          +arf3S2pDE1LWyWnpal7kBEenvsSVvp6pOocYKVtMfw=
Subject key identifier:   8C:5B:23:29:86:B3:BF:54:9F:18:EB:15:8C:6D:64:04:FE:72:06:D3
Authority key identifier: D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55
Certificate issuer:       /CN=d1822263a8707c76f3db3b6be7122269c827ae55
Certificate serial:       01A00100E4A33B0555B8C9A7D8E2A5AA118F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
Manifest number:          0F84
Signing time:             Fri 14 Aug 2026 16:00:30 +0000
Manifest this update:     Fri 14 Aug 2026 16:00:30 +0000
Manifest next update:     Sat 15 Aug 2026 16:00:30 +0000
Files and hashes:         1: 0YIiY6hwfHbz2ztr5xIiacgnrlU.crl (hash: VN7bUonplUuuUSlGl19NoKksfaT3956a7FhcbTPOEfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:00:e4:a3:3b:05:55:b8:c9:a7:d8:e2:a5:aa:11:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1822263a8707c76f3db3b6be7122269c827ae55
        Validity
            Not Before: Aug 14 16:00:30 2026 GMT
            Not After : Aug 15 16:00:30 2026 GMT
        Subject: CN=8c5b232986b3bf549f18eb158c6d6404fe7206d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3e:cb:6a:aa:45:51:9e:2d:9c:de:91:11:77:
                    87:95:f3:6b:bf:5f:99:30:01:f6:64:c8:02:3b:72:
                    a3:04:79:1c:ea:ff:b9:df:2e:57:2d:9c:60:95:a9:
                    af:74:25:84:f1:62:6e:13:bf:91:7b:de:01:7d:83:
                    53:d4:47:cf:c0:50:6a:60:47:f1:0a:e7:40:62:8c:
                    f7:a4:ff:63:9b:a8:87:99:ea:30:68:59:63:dc:4c:
                    be:92:8f:a1:e7:8d:3a:df:83:56:69:69:a9:8b:a2:
                    14:34:b5:b9:13:bd:c0:fe:90:0b:06:1f:54:20:16:
                    47:36:f6:8b:aa:ba:6e:eb:a1:3a:d1:7a:c0:91:8e:
                    b4:4f:1f:24:6e:7b:1d:24:de:f6:63:ac:b7:d2:b6:
                    ef:1f:dd:4e:b2:68:41:05:f6:5b:5e:89:d9:9d:3f:
                    7f:86:0c:ae:38:a2:49:b9:eb:a4:9c:28:43:aa:6a:
                    ec:29:7a:1f:b9:15:f3:0f:f3:d5:69:73:fb:e7:bd:
                    20:31:00:61:2a:4b:03:a5:0f:87:88:da:39:8e:cc:
                    00:fa:91:c2:86:a0:a6:23:4c:8f:de:b0:4d:f3:35:
                    e7:2b:0e:73:b6:b8:39:03:db:29:c8:9e:f2:5e:a9:
                    cd:1f:fa:de:3e:f1:6e:5b:4b:55:32:7d:81:1f:ce:
                    0c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:5B:23:29:86:B3:BF:54:9F:18:EB:15:8C:6D:64:04:FE:72:06:D3
            X509v3 Authority Key Identifier:
                keyid:D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:af:60:a2:c1:87:e9:01:50:2a:14:2a:42:80:23:14:bc:af:
         d3:2e:55:25:eb:ab:78:ff:a8:72:5b:5e:bd:7c:69:b8:17:b0:
         9d:54:1f:fd:1c:f2:7c:4c:91:13:82:fc:99:2a:eb:41:fc:34:
         0e:9f:e8:0d:8e:36:9e:c2:bd:7d:96:2c:ef:bf:81:50:d6:ae:
         38:61:1b:4d:7e:f5:b8:1e:03:4f:87:82:43:bc:29:ef:2b:84:
         46:ca:2a:66:92:75:0b:67:97:dd:5f:8d:0f:ad:7b:ba:f6:c6:
         f7:69:dd:60:88:65:ae:23:2e:79:4d:9f:d0:82:b9:d8:95:a3:
         d7:28:ec:a9:21:1d:f8:d2:57:aa:9e:4d:ac:8b:4f:e7:1a:4c:
         8d:29:1d:85:12:a5:56:07:54:70:12:55:25:6a:ee:0b:4e:86:
         62:73:e0:24:1d:ae:0c:07:2d:fe:a3:72:3b:1a:48:71:69:9f:
         31:b6:38:64:99:be:46:cc:03:2c:f1:fb:fa:6d:19:86:67:ac:
         be:f5:a7:84:c3:0b:a2:95:6f:c3:16:03:b8:12:92:8b:5f:07:
         5b:63:23:57:ab:e7:ee:3d:8f:58:6c:57:83:1a:3b:3f:76:10:
         55:ac:4f:83:8f:17:d7:25:0b:61:9a:93:f9:c5:3b:9c:8f:1e:
         ca:59:a0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:27:07 2026 by rpki-client