Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
File:                     8runwtAt4Uiqno-gmhx6K3cKGdw.mft (raw, json)
Hash identifier:          gkijyky6FjII9QxP46Uj8xM2VE+IpVqcsg/gc9ebXzc=
Subject key identifier:   89:52:70:56:8D:5E:EF:23:8B:72:84:44:EA:E9:32:84:8D:E7:54:25
Authority key identifier: F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
Certificate issuer:       /CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Certificate serial:       01A00101FC795CCBD5EE715962ED82855544
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
Manifest number:          19FE
Signing time:             Fri 14 Aug 2026 16:01:42 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:42 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:42 +0000
Files and hashes:         1: 8runwtAt4Uiqno-gmhx6K3cKGdw.crl (hash: Psi1ehDH4q+7fyZbW+EsKaY97gewTXCYtPQOh6zj/lc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:fc:79:5c:cb:d5:ee:71:59:62:ed:82:85:55:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
        Validity
            Not Before: Aug 14 16:01:42 2026 GMT
            Not After : Aug 15 16:01:42 2026 GMT
        Subject: CN=895270568d5eef238b728444eae932848de75425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:da:15:62:48:5f:d3:eb:ff:66:16:f8:bf:bb:
                    89:53:88:e5:c9:be:4c:fb:31:58:fd:35:f0:0b:98:
                    0b:42:79:91:b0:5d:10:e6:39:3a:aa:27:37:22:36:
                    e2:fe:75:cc:85:e9:b2:00:93:19:d6:60:e4:ba:53:
                    78:e9:88:96:88:5d:07:de:c1:8a:32:02:8a:84:be:
                    93:fa:99:85:bb:9f:b3:51:80:bc:58:8e:94:0c:83:
                    c2:25:c8:e4:29:fb:4d:dc:8c:8c:60:39:e3:36:52:
                    ce:a8:84:86:a9:1c:9a:af:45:2b:f7:0a:23:0b:de:
                    7d:6a:28:f2:a3:78:e4:e0:aa:0d:c2:21:ea:6e:60:
                    18:18:56:d4:6c:ac:65:13:13:96:6b:f6:45:6a:ab:
                    04:5c:53:5b:27:92:4d:fc:20:ae:c0:3e:53:08:ca:
                    03:44:d4:8e:1d:cd:8d:f8:58:bc:cc:67:77:38:97:
                    66:81:84:75:8c:fe:57:6f:23:bb:df:ed:46:c2:a4:
                    d9:6c:b2:59:96:bd:88:79:cd:22:a2:b8:fe:83:71:
                    7f:63:3d:b5:f6:ad:ff:c2:e4:fc:f2:81:92:8e:72:
                    a7:b7:15:12:02:bd:0f:86:09:aa:1e:70:90:23:ef:
                    58:df:81:b3:ea:fc:1b:9b:48:c0:f1:85:5b:5d:01:
                    91:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:52:70:56:8D:5E:EF:23:8B:72:84:44:EA:E9:32:84:8D:E7:54:25
            X509v3 Authority Key Identifier:
                keyid:F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:55:6c:b3:19:24:50:0f:04:58:86:87:30:a1:74:3f:09:56:
         bf:55:70:bc:e4:0d:26:e6:9c:fc:44:47:db:e8:27:25:48:40:
         99:b6:aa:d4:51:ad:be:83:fb:b0:3b:6d:97:4e:f3:2b:a2:93:
         07:9f:fa:c9:ad:2f:63:81:5f:0f:f4:9b:9b:67:16:8e:d6:bf:
         31:04:a6:91:62:26:26:c1:c5:fd:72:b6:24:ee:81:50:f2:d5:
         f5:4c:8b:71:0c:ba:c2:5a:d4:f3:73:26:37:f1:64:52:f5:cb:
         15:a5:e1:53:5c:04:6d:74:09:e3:e1:0b:b7:40:e9:27:d4:1b:
         04:bb:29:7b:a3:6b:99:ba:6c:6b:5b:0f:45:0e:4b:05:de:69:
         1c:6f:d2:1f:00:08:a8:f4:44:84:25:5f:ef:bd:af:a0:1e:87:
         ce:8b:61:96:a6:37:34:7d:ba:31:31:7d:9e:6f:88:a5:cf:ba:
         60:bd:dd:99:14:be:8b:87:18:8a:47:dd:99:a7:6d:f8:0c:3e:
         5a:d5:89:7d:fe:42:da:29:20:02:80:86:dc:10:51:28:f2:2c:
         7a:c8:41:f5:f2:51:1a:c5:81:3c:5c:f4:d1:39:c5:25:c0:86:
         f5:56:24:74:5c:c9:73:aa:03:65:08:86:ba:34:18:d2:20:90:
         98:a8:a6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:40:07 2026 by rpki-client