Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
File:                     Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft (raw, json)
Hash identifier:          3XNWiLHGqIVjtk7m3RBY5qsr2ZLWlaWmM5n/LhbKd3o=
Subject key identifier:   B5:12:A4:DA:19:B3:4F:0E:CF:34:7D:6A:48:BD:7C:A4:6C:A9:72:BC
Authority key identifier: 02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F
Certificate issuer:       /CN=028fdf719d47a10033451a83384a6db68dbd5b0f
Certificate serial:       019FDD62A0C535F3088B3D4C78EE7E5CA0A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
Manifest number:          0FF6
Signing time:             Fri 07 Aug 2026 18:00:56 +0000
Manifest this update:     Fri 07 Aug 2026 18:00:56 +0000
Manifest next update:     Sat 08 Aug 2026 18:00:56 +0000
Files and hashes:         1: Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl (hash: poh/P2Kohq/TXruH3nF2tLm3coatvkpbmdubPG3jpfM=)
                          2: wx4jf3r0v_RD4WGbwjNb9_66YeA.roa (hash: Yg61lLQnPGGlaDhOZEVebkyWouHjvzVXcfasCV97MNE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Aug 2026 16:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:dd:62:a0:c5:35:f3:08:8b:3d:4c:78:ee:7e:5c:a0:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=028fdf719d47a10033451a83384a6db68dbd5b0f
        Validity
            Not Before: Aug  7 18:00:56 2026 GMT
            Not After : Aug  8 18:00:56 2026 GMT
        Subject: CN=b512a4da19b34f0ecf347d6a48bd7ca46ca972bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a0:4b:91:6f:17:57:f1:84:ae:2f:e9:3e:53:
                    88:a6:e0:06:db:c4:91:46:0a:f4:fb:68:75:91:19:
                    63:d3:49:17:ba:64:39:91:65:74:f8:1a:72:0f:f7:
                    e6:06:6b:25:0b:e5:ea:48:4c:13:b3:52:99:95:18:
                    47:6b:d2:9b:9c:3e:b1:64:0b:90:a8:53:9f:55:3b:
                    fd:bf:5d:75:30:78:7f:c0:19:d8:6b:29:51:64:43:
                    d8:b5:c7:c8:e3:69:ed:d3:a0:0a:f6:fc:a0:93:8a:
                    c4:c8:5d:10:9b:83:96:ea:b6:90:25:3e:b4:17:bf:
                    e4:92:2b:a4:50:6a:a8:81:5a:20:d6:c9:a5:f0:21:
                    33:fd:0a:a6:ce:07:9b:d9:46:64:2f:80:5a:3c:e3:
                    c8:73:d8:71:c2:8a:e0:77:35:32:a8:d9:d5:56:8d:
                    d5:07:80:73:a8:66:c9:5c:3c:fe:53:11:67:d9:7b:
                    b7:04:6a:37:21:0f:0a:b2:ff:69:43:43:b2:01:4a:
                    d8:72:68:b8:5a:58:62:26:c1:00:cf:fa:42:dd:e5:
                    5e:39:3a:16:97:3e:f5:45:0f:8e:98:b4:c9:ed:dc:
                    33:95:61:02:d6:f0:1e:30:3f:73:f5:02:ff:c2:21:
                    49:a6:33:25:62:ea:68:9b:88:f5:0c:9d:d9:d1:8b:
                    ce:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:12:A4:DA:19:B3:4F:0E:CF:34:7D:6A:48:BD:7C:A4:6C:A9:72:BC
            X509v3 Authority Key Identifier:
                keyid:02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:48:ec:01:b9:a6:0e:7a:6a:74:ec:08:43:da:16:ef:c9:e4:
         61:f8:5e:ea:8b:6a:cc:c2:a1:60:ce:fd:0c:18:13:13:77:e7:
         3b:30:9f:4a:35:b7:38:c2:9d:47:1c:1d:39:6b:d2:a8:f6:5a:
         b6:fa:71:87:fe:9d:19:5b:ca:ff:99:94:ee:cc:3c:03:e2:26:
         c8:e9:68:ea:29:40:10:ae:45:9d:4d:2c:2e:44:2b:27:ea:a6:
         47:08:ca:c1:5a:b1:8c:3c:2a:c9:d4:23:e0:6f:26:72:07:24:
         f3:68:0f:46:eb:8b:ab:0a:01:17:55:9a:ed:b2:87:32:44:2d:
         e8:d0:94:dc:da:c0:f3:74:50:62:69:9a:c5:23:02:64:ad:10:
         76:cf:8d:9e:09:67:cd:6c:91:e6:24:b4:74:44:44:57:02:1e:
         fb:62:f7:6e:c1:a3:c0:19:33:fc:cd:81:78:d3:98:a6:5f:32:
         d8:c9:6f:17:0c:b2:53:67:99:99:e8:16:65:ec:85:c1:83:ae:
         d3:fd:72:7c:7c:ba:ba:44:4c:d4:1f:2f:7e:ff:97:9e:34:4c:
         4e:30:cb:ee:0e:84:47:97:68:db:02:ad:de:68:e4:04:57:e0:
         8a:ea:9f:3e:50:58:cc:4c:73:11:35:b7:7d:72:69:03:f5:08:
         af:cb:e7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 01:48:31 2026 by rpki-client