Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
File:                     D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft (raw, json)
Hash identifier:          ZvO3PskC9p/qDVo9YIvW0Wqyt8w2dNd9UYPOf+koDsU=
Subject key identifier:   B0:29:7C:CE:77:17:91:A3:06:2B:A5:DC:C5:36:3A:6C:A4:7A:9D:23
Authority key identifier: 0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
Certificate issuer:       /CN=0f516df64b3941b046743411ed86ea6030d72fba
Certificate serial:       01A001381D413A55004F2795FEFEED1EEFDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
Manifest number:          1824
Signing time:             Fri 14 Aug 2026 17:00:49 +0000
Manifest this update:     Fri 14 Aug 2026 17:00:49 +0000
Manifest next update:     Sat 15 Aug 2026 17:00:49 +0000
Files and hashes:         1: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl (hash: jw66HNYteSbmjSBGP1rx5TUUnSZIkaONcKQt2RLYTE0=)
                          2: UcXFjwyhaWT6jJkzoQqS8tFWKQc.roa (hash: slGaHxdN7Oqozliq50gNi9OxqgfS+8LclDE77QIbzI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:38:1d:41:3a:55:00:4f:27:95:fe:fe:ed:1e:ef:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f516df64b3941b046743411ed86ea6030d72fba
        Validity
            Not Before: Aug 14 17:00:49 2026 GMT
            Not After : Aug 15 17:00:49 2026 GMT
        Subject: CN=b0297cce771791a3062ba5dcc5363a6ca47a9d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:64:0f:04:f8:9a:39:74:79:dd:82:62:f7:2e:
                    f7:7b:bc:4a:a6:8b:62:38:f0:42:c9:87:1f:ef:52:
                    b2:a6:5a:54:01:57:77:bf:f1:b0:4c:9b:1c:e2:12:
                    c8:f1:02:98:a3:84:1e:b1:11:a3:b3:e7:2d:19:29:
                    36:f2:fb:0d:1b:2e:c6:e1:b8:d4:bb:f1:8d:57:1a:
                    ab:bc:f8:d5:fb:92:62:13:53:48:e0:8d:66:5b:19:
                    aa:4f:b7:2f:ba:70:7c:2a:e5:ac:ee:b4:6c:dc:83:
                    76:0c:3f:ba:39:3b:6e:4e:b6:70:6f:2f:71:eb:8a:
                    94:0c:a1:87:8b:f4:8a:d9:cc:c2:46:74:72:db:d4:
                    8f:2b:d9:c0:5e:dc:1d:2a:59:ff:e3:dd:4e:73:db:
                    7b:bd:c3:83:08:d7:11:2f:e5:39:13:4e:f0:c6:10:
                    44:d5:c6:bf:45:66:02:d1:f7:31:bc:71:e0:17:19:
                    f0:8c:80:9a:fc:c0:17:78:af:60:ab:da:00:d7:75:
                    13:ea:01:dd:44:0c:8d:54:f3:3e:05:d0:d8:1c:ec:
                    b1:e8:24:4f:74:5c:54:6e:be:e5:a2:7a:6e:cc:f4:
                    cc:f2:a4:5f:a9:a0:5a:09:4e:ff:d5:cc:18:e8:18:
                    dd:ef:52:c4:10:19:69:e2:09:57:b8:e3:3a:60:3d:
                    b7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:29:7C:CE:77:17:91:A3:06:2B:A5:DC:C5:36:3A:6C:A4:7A:9D:23
            X509v3 Authority Key Identifier:
                keyid:0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:31:e7:0e:d0:be:96:72:dd:eb:87:0f:f4:c3:c2:8c:d6:28:
         ff:4d:c1:df:4d:66:b4:cb:8c:11:24:c0:ac:2b:84:f7:6b:91:
         8e:0a:ba:fe:12:2a:91:89:6c:78:0a:d0:b1:83:9d:47:f0:48:
         0b:05:25:1b:14:75:1b:be:86:a0:c1:90:88:9a:51:71:60:d8:
         9a:40:23:aa:64:b6:b9:e5:7b:05:60:1a:86:2e:54:1e:45:f6:
         21:7f:df:8b:9f:c2:51:5b:93:78:f5:5d:06:7a:82:29:01:cf:
         29:10:1b:cf:6f:e3:fe:eb:88:3b:eb:be:67:86:cf:0e:d3:f5:
         8d:c5:0e:18:03:e3:59:cb:ef:18:00:4a:51:6b:4d:79:b3:3c:
         99:68:2f:f8:8a:88:44:e3:79:31:31:22:a2:61:a2:2e:0d:97:
         6f:c6:19:f1:e3:43:84:3b:4c:27:e1:36:49:2f:d9:6d:f5:08:
         f1:d8:35:58:07:3b:99:ef:e2:2e:97:e5:21:11:60:85:bd:97:
         fa:5c:ec:74:2a:e6:d5:ff:ea:0a:a1:9d:4a:b2:e5:64:02:30:
         f7:03:33:dc:3d:af:5c:e8:92:01:5f:e2:c3:54:be:ef:9e:0c:
         7f:9c:4c:88:1e:73:80:f4:5e:45:54:10:51:d5:52:20:33:00:
         32:c2:62:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:55 2026 by rpki-client