Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
File:                     8M0rO57YMSbUXboSAD1sbjWms4A.mft (raw, json)
Hash identifier:          mNvCuFIw29h4oRE8adPV08uAukydCOzBWVxJ2pMm6RA=
Subject key identifier:   CC:9B:90:6C:60:A9:D2:F7:43:1C:2C:C5:3A:73:61:16:8F:BF:9E:A3
Authority key identifier: F0:CD:2B:3B:9E:D8:31:26:D4:5D:BA:12:00:3D:6C:6E:35:A6:B3:80
Certificate issuer:       /CN=f0cd2b3b9ed83126d45dba12003d6c6e35a6b380
Certificate serial:       01A001DD87EEDB189FF60C353547DD0A7C38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
Manifest number:          1727
Signing time:             Fri 14 Aug 2026 20:01:30 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:30 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:30 +0000
Files and hashes:         1: 8M0rO57YMSbUXboSAD1sbjWms4A.crl (hash: IeVZVDtHMojNX5RdR0PqvwGWslYy0k/DC6Mp4PR5T80=)
                          2: ddIfNiRppOj1v3M6aJwVqmijL0I.roa (hash: EfC5UqZXOZKbq7DWkiDFRsm66HUflEVOFO98FL8DAwE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:87:ee:db:18:9f:f6:0c:35:35:47:dd:0a:7c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cd2b3b9ed83126d45dba12003d6c6e35a6b380
        Validity
            Not Before: Aug 14 20:01:30 2026 GMT
            Not After : Aug 15 20:01:30 2026 GMT
        Subject: CN=cc9b906c60a9d2f7431c2cc53a7361168fbf9ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:85:f3:ed:c8:76:88:2c:5d:87:f3:96:eb:b4:
                    3b:21:1b:33:ad:67:85:e4:99:15:3c:b3:99:83:42:
                    75:79:9d:d4:1f:3e:de:5b:23:8b:cb:32:3f:cc:11:
                    22:e1:d5:9b:a9:de:d5:a3:14:94:6e:d9:b7:c8:ec:
                    71:88:52:54:8c:27:76:e2:50:96:62:b0:05:9c:d0:
                    bb:6a:cd:37:85:ff:60:d5:b6:48:92:fe:2c:78:7e:
                    c7:d0:33:83:46:d2:ac:20:20:05:79:e7:85:94:7f:
                    28:6a:d7:c6:5c:38:b8:46:aa:c9:29:1e:bd:37:54:
                    1c:e7:55:f1:08:09:e9:a8:c4:14:e2:d9:6c:34:48:
                    00:ba:cf:85:a1:a8:64:ea:d9:bd:2f:b7:24:2b:19:
                    4e:26:33:e7:9e:eb:18:9d:37:93:1d:b6:e7:98:64:
                    99:3a:1e:b7:f1:0b:9b:e6:09:98:be:aa:e7:6a:b0:
                    c4:d0:4c:c4:8b:e0:04:09:ca:2e:38:aa:1d:28:ad:
                    f6:b2:57:b8:79:05:03:74:4c:47:38:ce:db:a2:22:
                    96:86:07:e7:3c:4a:19:46:f0:e4:78:c1:fb:2f:76:
                    65:cf:d3:5d:98:fb:49:01:3f:be:3d:d0:b1:87:c2:
                    0d:27:31:93:24:7b:14:1e:f4:08:6d:f3:9a:1b:38:
                    63:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:9B:90:6C:60:A9:D2:F7:43:1C:2C:C5:3A:73:61:16:8F:BF:9E:A3
            X509v3 Authority Key Identifier:
                keyid:F0:CD:2B:3B:9E:D8:31:26:D4:5D:BA:12:00:3D:6C:6E:35:A6:B3:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:9c:52:eb:9d:6b:a7:a2:a2:39:54:5d:22:38:ca:e6:4d:8b:
         2d:7b:e8:71:b4:6c:be:1d:cd:5b:e0:da:f3:47:25:67:e2:31:
         95:58:4a:13:82:a7:cb:c3:57:4e:2a:2e:60:af:d5:95:7f:34:
         c9:b9:c0:d6:2c:21:df:7a:df:24:00:ea:38:87:29:08:88:bd:
         e6:1a:45:6b:62:54:36:d1:26:fa:b1:c4:cd:d5:00:c5:4e:ce:
         74:66:42:bf:7b:92:07:a9:47:7c:3b:d1:43:6c:70:e9:6b:d1:
         d6:ed:9d:b7:75:46:be:eb:78:e8:db:77:87:d3:db:ff:dd:b9:
         09:05:29:2e:ad:f2:b4:a1:5a:d2:42:97:20:0a:cb:14:4c:5f:
         42:af:3a:fa:97:57:36:49:19:f6:be:ea:3e:49:e5:40:ee:70:
         dc:96:92:32:cd:a9:ee:37:0c:f9:b7:94:21:46:2e:7a:11:48:
         f8:3e:fa:20:13:7c:a3:10:92:a9:6b:57:e7:31:d8:39:8c:85:
         1b:d5:b3:1a:83:fb:71:fb:d0:18:5b:1f:18:88:d7:20:b5:e8:
         52:dc:46:fa:34:6a:df:79:44:c0:b4:34:32:f5:7b:84:90:7e:
         d6:dd:e9:07:1f:4a:32:3f:a9:dd:5b:1e:76:2a:a0:7f:b7:ec:
         49:62:1b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:20:16 2026 by rpki-client