Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
File:                     xWwoao20vSFr9kx1szhRsARaF18.mft (raw, json)
Hash identifier:          952rbhQWB4NZVw2L2wjcwKg355WJ+sJpu23JBjLJ/74=
Subject key identifier:   8E:56:27:EA:6F:E1:B9:E6:D2:C6:FA:5E:05:06:E1:77:74:46:E6:5E
Authority key identifier: C5:6C:28:6A:8D:B4:BD:21:6B:F6:4C:75:B3:38:51:B0:04:5A:17:5F
Certificate issuer:       /CN=c56c286a8db4bd216bf64c75b33851b0045a175f
Certificate serial:       01A04318D0DA900967105A7E4DC1E6E5DC13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
Manifest number:          0E86
Signing time:             Thu 27 Aug 2026 12:01:34 +0000
Manifest this update:     Thu 27 Aug 2026 12:01:34 +0000
Manifest next update:     Fri 28 Aug 2026 12:01:34 +0000
Files and hashes:         1: fzBvwE7sX01y4kB6SSgdE7n9ysI.roa (hash: qCcHE+EY0A9msSwDHW5P3s9hKxDDBKeiCJ6eljce7Pg=)
                          2: xWwoao20vSFr9kx1szhRsARaF18.crl (hash: M5sOapXp7hdY78YGkbon5ua4BsqVKtx/dpX05OTJW7g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 28 Aug 2026 08:49:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:43:18:d0:da:90:09:67:10:5a:7e:4d:c1:e6:e5:dc:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c56c286a8db4bd216bf64c75b33851b0045a175f
        Validity
            Not Before: Aug 27 12:01:34 2026 GMT
            Not After : Aug 28 12:01:34 2026 GMT
        Subject: CN=8e5627ea6fe1b9e6d2c6fa5e0506e1777446e65e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:75:a6:8e:5a:7b:47:00:4f:8a:15:2c:6a:df:
                    2d:c5:cd:c4:87:04:5e:c1:02:db:15:b9:45:06:80:
                    71:36:64:f4:d0:9e:c7:3b:36:1b:41:51:14:7d:6a:
                    1b:5b:81:7b:46:25:60:3d:57:a8:da:fb:17:ed:7a:
                    44:fc:bc:f0:79:33:8a:e5:2e:4d:3e:d7:bf:13:28:
                    3d:5d:55:2c:35:b9:41:90:e9:b4:8f:a6:c4:e4:64:
                    c5:0b:5c:2b:e8:f6:7a:f0:74:07:cc:81:81:5c:78:
                    88:cb:3a:c2:9e:78:16:e6:aa:38:4f:63:75:63:ec:
                    6b:6f:6e:b5:5d:e0:29:66:98:f7:b6:f5:1a:b6:ec:
                    84:ca:b0:66:fb:7e:40:86:d8:b6:02:98:37:08:26:
                    30:42:8c:5b:93:9c:e6:23:d9:72:de:b4:ec:45:0d:
                    4d:8a:84:88:eb:65:39:0e:ad:00:96:2b:5d:33:db:
                    e9:53:dd:f8:6a:70:6d:72:c1:ef:c8:c1:0e:63:c3:
                    85:31:c1:67:0b:78:f5:57:01:35:35:2c:e1:11:15:
                    e5:d1:c4:01:c3:ea:0f:c5:c5:69:b8:99:13:43:eb:
                    18:21:d9:46:d3:c4:70:02:82:cf:51:b9:f8:02:1f:
                    6b:49:7c:8c:c2:75:03:a4:55:a8:d7:86:e8:8d:cf:
                    62:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:56:27:EA:6F:E1:B9:E6:D2:C6:FA:5E:05:06:E1:77:74:46:E6:5E
            X509v3 Authority Key Identifier:
                keyid:C5:6C:28:6A:8D:B4:BD:21:6B:F6:4C:75:B3:38:51:B0:04:5A:17:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:74:bb:a1:f2:01:9a:e4:d3:08:28:29:46:9c:63:be:03:95:
         f0:8b:b3:19:6d:fd:67:df:83:f9:b3:13:42:6a:69:59:9b:c4:
         21:6d:9e:5e:79:0c:32:81:e3:f9:f8:fd:38:45:0e:86:b9:f3:
         b7:a9:48:11:a3:c6:61:b5:7a:75:31:9c:cf:a3:9b:4f:0f:e9:
         91:a3:41:b1:fc:56:17:64:22:7e:83:64:31:56:c5:94:43:5a:
         69:c8:8d:74:0e:4d:d0:d2:37:10:64:a7:9b:39:23:37:60:85:
         30:2c:50:c7:29:cf:8f:3d:96:3c:87:b1:16:5d:21:be:c8:aa:
         2e:a8:77:55:76:dd:63:c8:57:f4:67:89:08:e7:2a:b0:55:c2:
         7f:1b:76:6c:02:aa:d7:67:a2:3b:ab:55:7c:aa:36:7c:75:b4:
         68:e2:72:cb:84:35:bd:0c:46:0f:09:b3:48:51:99:47:3d:70:
         9a:28:06:14:47:11:95:04:8f:b4:94:c7:2c:63:2e:6a:e2:c4:
         c5:9b:47:38:bd:06:1d:7f:78:66:67:5a:86:81:bd:a3:92:d3:
         e8:41:b8:89:e3:9b:71:a2:8d:cd:f4:3a:08:02:81:b4:b1:0b:
         63:f1:f5:62:16:a9:90:32:79:03:64:a4:67:9b:94:cc:b6:e4:
         91:82:e2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 14:15:50 2026 by rpki-client