Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
File:                     8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft (raw, json)
Hash identifier:          +QAAVuJlJ6Mr/RCf7zdC7WGvv31QwR3VDvGR/aM+I64=
Subject key identifier:   6C:63:36:0E:E0:79:F2:F0:87:D2:3C:95:D8:8A:96:15:B1:7B:A5:68
Authority key identifier: F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
Certificate issuer:       /CN=f32220b696e2e766516c05743d137dbbc17fd261
Certificate serial:       01A00101F8DBE9D1F5EF8B13F5EE25148CFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
Manifest number:          19FD
Signing time:             Fri 14 Aug 2026 16:01:41 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:41 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:41 +0000
Files and hashes:         1: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl (hash: cCQ5koUQ7EJfajomJk5cKwyEDWAE8AwiKt1P/MwkqRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:f8:db:e9:d1:f5:ef:8b:13:f5:ee:25:14:8c:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f32220b696e2e766516c05743d137dbbc17fd261
        Validity
            Not Before: Aug 14 16:01:41 2026 GMT
            Not After : Aug 15 16:01:41 2026 GMT
        Subject: CN=6c63360ee079f2f087d23c95d88a9615b17ba568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:55:4b:78:53:dc:c1:b3:25:dd:d9:e2:cc:b3:
                    2b:fd:70:4e:83:89:41:51:28:dc:dd:76:48:f5:4b:
                    bf:a9:32:ba:52:89:97:ac:d8:3d:a9:b3:7d:22:37:
                    23:d6:d0:5b:80:b2:7f:ae:ed:08:b8:d9:76:37:a5:
                    39:e8:3a:46:20:52:fe:e2:46:0b:e8:0f:17:83:c6:
                    e7:4f:c4:d0:d7:91:7c:e3:cb:81:a4:34:74:57:bc:
                    ba:3d:2f:09:cc:b3:e2:15:26:6a:88:1e:4d:9a:2d:
                    61:c2:ca:84:33:ce:a6:51:44:d9:12:ef:29:c4:fa:
                    5e:e8:82:04:64:9b:6b:9c:a1:77:b3:f1:25:bb:ed:
                    9b:67:64:ed:9d:43:d7:5a:b2:6d:2a:2d:26:47:ff:
                    25:c5:c3:92:c9:18:2a:38:33:79:71:a0:f2:5a:07:
                    95:a2:73:78:0c:e8:76:34:3b:3f:c0:f1:75:5e:8b:
                    ff:5e:c5:27:8e:23:ae:89:3a:68:e6:1b:05:e7:ef:
                    76:3f:2e:70:cc:f9:40:15:b4:75:91:c0:06:52:84:
                    9d:ee:59:0a:c5:2a:f0:d8:ec:3c:e0:ee:f9:40:ff:
                    04:3b:06:90:62:f9:6c:4a:2c:75:47:8d:61:3a:9b:
                    76:fa:17:1d:88:54:06:06:b3:c1:14:5c:7e:b9:29:
                    25:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:63:36:0E:E0:79:F2:F0:87:D2:3C:95:D8:8A:96:15:B1:7B:A5:68
            X509v3 Authority Key Identifier:
                keyid:F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:4c:56:f9:53:60:ab:f5:0c:de:9c:fe:13:49:24:d7:ee:f7:
         32:b0:24:a6:2c:5b:f7:60:b3:45:c0:c2:9b:28:e6:73:e9:75:
         3a:2c:23:0e:4c:63:1d:ee:80:8d:5b:ce:14:6c:f8:2c:60:c7:
         85:d1:ec:95:7f:57:02:d3:1c:44:61:f8:bc:84:c8:53:41:14:
         bd:88:82:ba:00:65:41:0a:2b:fa:90:60:25:69:8a:56:65:b9:
         12:b7:3a:28:a6:86:34:a2:d2:76:ca:0d:d0:7a:9e:61:a7:ec:
         88:81:f3:ae:b7:5e:a5:3d:f1:e3:99:fd:0e:79:bc:a6:a0:f1:
         00:dc:47:ca:c4:33:a5:2b:5f:a7:ea:1a:78:01:09:02:ed:b2:
         f8:3a:90:cc:94:d7:7c:7b:2b:87:82:4e:43:ee:50:38:0a:12:
         72:62:30:57:78:24:53:ef:07:76:fb:2d:68:14:c0:e1:08:74:
         0a:4d:78:95:a5:50:c2:bc:b0:84:21:5d:34:13:58:7a:6f:6e:
         91:36:40:e1:5a:a6:b3:99:a5:33:a2:b8:4f:11:4a:be:d0:99:
         35:c1:4a:91:b8:ff:ea:25:03:07:34:ec:84:ed:d2:20:a6:32:
         96:54:6d:e6:20:5a:a3:14:a1:2d:94:c1:0e:71:e8:03:20:bf:
         64:e4:49:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:58 2026 by rpki-client