Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
File:                     14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft (raw, json)
Hash identifier:          v96PNXma3n5RVi5RTzTOJZyyUaHZaofKJXVyUu8NTS8=
Subject key identifier:   16:2D:1F:FA:3B:06:C9:B8:3D:F4:D7:5B:40:A5:78:CB:89:60:FE:46
Authority key identifier: D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69
Certificate issuer:       /CN=d788851981cfb3c15624b6e97f60a3d991d6d969
Certificate serial:       01A00100EFA2876CC460C5A6315F2952BABE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
Manifest number:          08D6
Signing time:             Fri 14 Aug 2026 16:00:33 +0000
Manifest this update:     Fri 14 Aug 2026 16:00:33 +0000
Manifest next update:     Sat 15 Aug 2026 16:00:33 +0000
Files and hashes:         1: 14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl (hash: 5NU43WTJdF19c0asAXXOnGBmFeCWu/xKGO0RZ11x/Kc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:00:ef:a2:87:6c:c4:60:c5:a6:31:5f:29:52:ba:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d788851981cfb3c15624b6e97f60a3d991d6d969
        Validity
            Not Before: Aug 14 16:00:33 2026 GMT
            Not After : Aug 15 16:00:33 2026 GMT
        Subject: CN=162d1ffa3b06c9b83df4d75b40a578cb8960fe46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f1:6e:5c:a1:ec:5e:2d:d0:c0:5a:da:2d:3c:
                    a6:40:23:14:52:f7:f1:f0:5a:55:22:4d:4f:a5:a4:
                    d7:11:cb:a0:99:d7:cf:c9:2d:bf:b4:a1:69:f9:93:
                    4a:82:d4:ea:e2:10:0f:25:71:36:5f:5f:c7:11:8d:
                    0e:b9:c7:44:00:0f:4b:d3:b0:85:d6:7c:7f:64:c0:
                    20:a9:e4:bb:1d:77:9f:28:63:99:b2:25:61:bf:4b:
                    3d:a4:0f:b7:62:9f:8d:d4:48:8c:5d:3f:77:67:8a:
                    eb:40:c1:65:f6:20:18:81:79:0e:9c:62:a9:7b:9c:
                    3a:14:cd:f5:6a:14:42:5f:e6:8c:ef:98:eb:9e:d6:
                    b6:b2:9c:2f:b3:17:af:25:2a:a7:b3:0d:4e:ef:ba:
                    45:3a:2f:a5:fb:f9:76:b4:f0:1b:fe:0a:8b:5a:40:
                    6a:93:f3:fb:6d:56:99:4d:b0:9a:fd:23:c6:79:6c:
                    11:ca:26:bc:89:23:60:68:c9:e5:05:06:91:de:f6:
                    16:1d:14:b6:f5:ff:3e:2b:b8:e2:a3:f2:23:35:c2:
                    8d:7a:1b:34:2d:b6:21:48:f8:8f:0f:10:4a:8e:46:
                    a7:d5:3e:88:f4:33:34:ba:02:55:18:5f:66:36:ca:
                    26:66:ad:45:a0:74:b6:26:64:c9:01:64:5b:84:69:
                    4f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2D:1F:FA:3B:06:C9:B8:3D:F4:D7:5B:40:A5:78:CB:89:60:FE:46
            X509v3 Authority Key Identifier:
                keyid:D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:da:61:f7:6c:fe:e2:6d:09:66:25:af:2a:79:af:bc:1d:fb:
         fc:da:f4:99:cf:0c:c4:a0:19:0d:bf:14:54:a3:7d:5c:4a:61:
         4c:15:e1:af:c9:1d:8c:1a:72:6a:7b:40:c6:ef:11:98:df:02:
         e6:2d:b6:23:54:7d:20:d1:35:95:89:92:4f:85:88:c0:9b:d3:
         5c:7a:e1:2c:0e:2f:ee:f5:c5:a3:4d:a9:dd:a5:fd:de:44:be:
         40:fc:c1:a0:10:f0:2d:a9:3a:f6:f7:93:a8:c8:72:88:5e:e2:
         8a:7b:31:47:be:9e:00:dd:c3:b9:ec:4e:bc:23:0f:95:a4:3c:
         25:0f:fe:1c:57:1a:15:e0:42:92:86:8f:07:6c:e7:04:54:ac:
         89:ea:99:dc:6f:52:a9:65:65:e6:c8:43:e5:77:99:e5:94:fe:
         c8:d2:d0:e1:58:b8:3d:d3:d9:54:b0:85:15:69:c3:62:66:01:
         8a:8b:0f:d1:43:5a:3d:98:e1:13:bb:bf:11:ef:8b:22:f2:23:
         7f:ed:41:1a:23:22:d6:af:b7:b9:40:fe:1e:10:3b:33:d2:6e:
         01:75:07:8c:18:80:46:d9:97:69:7f:3d:57:54:9c:c0:7d:18:
         f2:8d:5f:50:63:e3:4b:9c:84:e0:89:3b:f1:e6:88:63:2e:1c:
         ed:76:e0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:36:00 2026 by rpki-client