Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
File:                     0mF9FdtY_jBi0brb4E0wwZSd1f8.mft (raw, json)
Hash identifier:          k9+jyWFB1/22RInJHJXol0UwQRZ1uwypbjI/CQi2POA=
Subject key identifier:   8B:A4:FC:34:67:F1:2D:C8:AC:92:07:D4:C9:F1:33:8D:4C:9D:B4:FB
Authority key identifier: D2:61:7D:15:DB:58:FE:30:62:D1:BA:DB:E0:4D:30:C1:94:9D:D5:FF
Certificate issuer:       /CN=d2617d15db58fe3062d1badbe04d30c1949dd5ff
Certificate serial:       01A0010203FC604702A570CF7CAA661FE532
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
Manifest number:          19FC
Signing time:             Fri 14 Aug 2026 16:01:44 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:44 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:44 +0000
Files and hashes:         1: 0mF9FdtY_jBi0brb4E0wwZSd1f8.crl (hash: Fkac9fBcf5tgU3GdZ7Xu6LVC6PFlUKO8EO7e3VskB8Y=)
                          2: SoEs2uq-Lqa7VWg8JFQCPgrt2eI.roa (hash: NiDI43uxk76Y1iaXH3S9JcI5gdDit0xy1S3yktJNiKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:02:03:fc:60:47:02:a5:70:cf:7c:aa:66:1f:e5:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2617d15db58fe3062d1badbe04d30c1949dd5ff
        Validity
            Not Before: Aug 14 16:01:44 2026 GMT
            Not After : Aug 15 16:01:44 2026 GMT
        Subject: CN=8ba4fc3467f12dc8ac9207d4c9f1338d4c9db4fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6e:13:29:64:21:0d:c3:09:6b:85:eb:69:b9:
                    9a:1b:55:c6:bb:39:91:b9:24:db:94:8b:52:a2:7d:
                    3e:92:2c:80:d4:99:5b:2b:37:b1:35:91:13:95:eb:
                    de:42:bc:1b:aa:a6:18:86:07:e8:07:e6:e6:62:9b:
                    6b:1f:35:b3:34:2b:0c:ab:39:a9:0f:46:f3:4a:36:
                    a2:1d:b3:88:fa:6a:f4:49:2a:0a:7c:26:b0:5c:c2:
                    33:f3:f5:9a:06:8a:3a:11:2a:c7:fd:61:2f:bb:7d:
                    9c:be:75:0c:31:dc:76:f7:7b:46:d2:fa:ae:3f:bc:
                    0a:8e:be:09:4d:07:f0:a2:3b:59:40:c8:77:c6:10:
                    33:a8:2d:29:a5:53:f7:f7:5d:c7:c1:f4:37:89:df:
                    8f:5d:3d:09:cd:7c:dc:77:d9:b1:04:2e:27:e1:f6:
                    17:df:f7:f0:f8:10:6d:a6:51:b1:1d:15:25:54:f7:
                    cc:be:c5:14:f1:63:d0:40:0a:da:68:f7:ee:12:a5:
                    26:c3:31:67:b7:45:a3:62:d4:aa:78:ee:b3:2b:b0:
                    5d:a3:ba:4e:2e:3c:16:f6:99:22:b3:5e:24:09:5c:
                    f7:12:76:73:e8:ae:59:79:5b:15:9c:88:5f:38:b9:
                    f1:59:06:28:35:fd:48:f5:6b:77:75:7b:f3:4b:f0:
                    32:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A4:FC:34:67:F1:2D:C8:AC:92:07:D4:C9:F1:33:8D:4C:9D:B4:FB
            X509v3 Authority Key Identifier:
                keyid:D2:61:7D:15:DB:58:FE:30:62:D1:BA:DB:E0:4D:30:C1:94:9D:D5:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f8:b8:47:d2:ad:c0:51:c4:71:02:07:ab:9a:50:2c:22:27:3e:
         28:1e:cb:d0:08:40:c0:68:2d:44:c0:71:a9:e9:18:a6:f0:a5:
         02:cb:01:30:da:55:09:87:56:1a:a1:33:3c:ad:07:b7:0f:d4:
         94:d2:5c:10:6e:44:d1:90:93:12:5c:bd:ee:13:7b:41:d8:75:
         c1:bd:31:50:2a:6b:c4:e6:c8:9c:f6:fc:ec:61:63:34:3d:4e:
         2f:8d:41:f7:a5:5d:d5:e7:13:35:2c:80:c2:5e:69:94:52:f2:
         f8:32:00:04:74:02:d4:d3:c3:85:72:78:fa:29:b3:b5:eb:97:
         14:cf:4b:94:dd:38:65:10:c6:d9:85:04:b1:6f:84:3d:b4:34:
         1d:32:40:e2:34:ae:c8:4d:a2:d6:b5:90:f1:14:8d:1c:7a:5e:
         06:37:00:d5:64:3b:c3:a2:3b:f5:61:1a:76:ec:d9:9e:c8:88:
         9c:a1:db:ce:15:4b:92:23:8e:23:18:6c:62:14:49:a3:c6:d0:
         a2:73:6d:c3:27:0a:a6:9c:16:97:08:cb:f5:05:80:ae:bf:87:
         23:7f:10:b0:35:36:34:6c:30:36:b6:57:c9:24:85:67:55:4d:
         da:a4:7a:8b:70:a8:ba:21:70:87:80:2e:36:44:f9:1d:4f:f0:
         e6:72:2a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:04 2026 by rpki-client