Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
File:                     1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft (raw, json)
Hash identifier:          CxOjn8A9uPeP87FFnLIdzRlbo8gBZcTJPhxhypdQdP8=
Subject key identifier:   B8:B7:49:B8:0C:90:CD:C0:C0:31:D6:45:64:FF:5A:9F:35:42:62:31
Authority key identifier: F8:BA:41:B6:AD:6E:63:78:0E:C3:F1:21:60:E7:C4:ED:0F:74:69:AC
Certificate issuer:       /CN=f8ba41b6ad6e63780ec3f12160e7c4ed0f7469ac
Certificate serial:       01A03FE058DADD6218D5C635E9754927A5AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
Manifest number:          0381
Signing time:             Wed 26 Aug 2026 21:01:02 +0000
Manifest this update:     Wed 26 Aug 2026 21:01:02 +0000
Manifest next update:     Thu 27 Aug 2026 21:01:02 +0000
Files and hashes:         1: 1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl (hash: 7+gNHiVsrmX7zj8UsxBb2BOxQdb95XEVU12R9Ja8J64=)
                          2: S91SpqjKHj-9za4dXEoQ07MOmwY.roa (hash: mrZK89V5wHR4TTBGwZBPy+vU+mPnk1QYo7P0So8JmRM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3f:e0:58:da:dd:62:18:d5:c6:35:e9:75:49:27:a5:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ba41b6ad6e63780ec3f12160e7c4ed0f7469ac
        Validity
            Not Before: Aug 26 21:01:02 2026 GMT
            Not After : Aug 27 21:01:02 2026 GMT
        Subject: CN=b8b749b80c90cdc0c031d64564ff5a9f35426231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:88:63:6d:94:a1:62:e6:36:e1:78:bf:3f:ac:
                    21:f0:15:9f:6f:ac:66:42:b8:92:cf:f5:a3:d5:34:
                    4b:0d:e1:fa:7e:6e:81:af:19:a4:93:07:44:8d:11:
                    fe:4f:a0:f9:f9:8c:0d:3d:b5:19:75:a0:5f:b0:68:
                    f1:b1:9b:5f:c8:73:5c:e7:bf:9e:7d:78:4d:e2:1c:
                    63:22:c4:79:0c:ea:55:68:2d:78:10:a8:e5:e4:f7:
                    34:7b:0b:e6:6e:e9:03:3c:41:e1:ce:89:ed:d0:77:
                    35:a2:86:bc:31:3d:ad:50:2f:bb:92:5f:8b:79:1c:
                    da:b1:33:b3:7f:54:62:9b:95:d9:95:71:32:ae:cc:
                    54:2b:53:23:8c:7c:b3:61:09:79:65:3b:81:1f:b4:
                    58:8c:2c:1a:02:44:4f:9e:bf:26:68:54:ab:53:76:
                    05:fd:6e:9e:51:a0:1e:dc:4a:0e:4c:8d:4b:e3:3b:
                    c3:53:fa:3f:ec:75:7b:b8:1d:fd:d9:a5:a2:69:10:
                    bd:3b:a3:76:2c:1c:b2:b2:2c:14:71:c8:37:47:d6:
                    8a:04:17:fc:81:0b:df:f7:be:b7:16:73:d1:9a:41:
                    3c:53:e0:c4:3f:4d:6a:ed:58:19:70:6f:3f:e8:7f:
                    6a:26:57:ab:db:e9:35:cb:d0:d7:6f:16:03:8f:8d:
                    48:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B7:49:B8:0C:90:CD:C0:C0:31:D6:45:64:FF:5A:9F:35:42:62:31
            X509v3 Authority Key Identifier:
                keyid:F8:BA:41:B6:AD:6E:63:78:0E:C3:F1:21:60:E7:C4:ED:0F:74:69:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:02:ab:03:2f:48:c8:58:42:cf:33:d2:d1:9b:ff:a5:db:4e:
         12:a7:d2:e4:c4:c8:8b:cd:99:25:51:bd:73:f1:a3:16:70:8a:
         b1:21:7b:12:a9:bd:5e:29:ae:d7:23:98:5e:33:ca:c5:9d:c4:
         a4:0f:63:da:8a:56:8d:b7:04:89:2b:6a:6d:ba:8e:72:36:b6:
         2b:c7:65:7f:be:26:9f:81:74:b4:79:85:9b:37:75:c2:05:a9:
         f1:4b:d6:b7:85:94:28:6f:96:b0:ae:65:ba:ed:7f:15:17:2d:
         12:84:a9:d4:e5:98:f2:50:82:05:d2:e4:22:b0:8c:b1:4c:2d:
         15:f0:44:6f:b6:a6:66:ec:c5:0e:f2:ae:13:bc:a0:61:5b:1e:
         64:48:d0:d7:ea:d0:36:e6:af:8d:e3:9b:1f:1a:e0:ca:d0:89:
         b9:1c:b0:8b:84:ce:0d:0d:c9:c0:8e:ee:a1:54:19:04:71:61:
         a8:0d:bb:22:32:b1:ae:71:04:f5:90:85:01:5d:62:93:ce:4c:
         08:74:2e:5b:5e:58:43:e7:b7:29:a7:0c:a7:7e:a0:2a:1c:b8:
         25:77:e3:0a:1e:2a:75:21:41:fb:57:69:42:c6:78:4b:86:d2:
         5f:5a:49:70:30:c4:5d:24:2c:56:0b:5f:8c:f7:0c:04:d3:87:
         49:21:fc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:52:45 2026 by rpki-client