Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/4762c6-5eaf-4e7c-a824-f70adf1dc0fe/1/2BHdIvfq8nK8S_PrsVLTZLtNl1M.mft
File:                     2BHdIvfq8nK8S_PrsVLTZLtNl1M.mft (raw, json)
Hash identifier:          lmzCEbsIdhpcx8Hn9+2pim9PEQ2DvMNNJDxbg+kd/8Y=
Subject key identifier:   1F:4C:E7:61:54:57:ED:9D:5D:0C:B7:59:9B:51:7C:DB:00:9F:1E:61
Authority key identifier: D8:11:DD:22:F7:EA:F2:72:BC:4B:F3:EB:B1:52:D3:64:BB:4D:97:53
Certificate issuer:       /CN=d811dd22f7eaf272bc4bf3ebb152d364bb4d9753
Certificate serial:       01A0005CB8BB378C151A3CE2482302060B5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2BHdIvfq8nK8S_PrsVLTZLtNl1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/4762c6-5eaf-4e7c-a824-f70adf1dc0fe/1/2BHdIvfq8nK8S_PrsVLTZLtNl1M.mft
Manifest number:          080A
Signing time:             Fri 14 Aug 2026 13:01:11 +0000
Manifest this update:     Fri 14 Aug 2026 13:01:11 +0000
Manifest next update:     Sat 15 Aug 2026 13:01:11 +0000
Files and hashes:         1: 2BHdIvfq8nK8S_PrsVLTZLtNl1M.crl (hash: wTG+ujZlpkTi1rgrAQs9kz58Qcq+qQEOyRtNuve/Um4=)
                          2: TCpyx_sVvP5JGxVQQH4mzcKulrU.asa (hash: rOUVgrvkKatP5Bi9OoZO4FGXksJVZPYhgmSbWckcqFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/4762c6-5eaf-4e7c-a824-f70adf1dc0fe/1/2BHdIvfq8nK8S_PrsVLTZLtNl1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/4762c6-5eaf-4e7c-a824-f70adf1dc0fe/1/2BHdIvfq8nK8S_PrsVLTZLtNl1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2BHdIvfq8nK8S_PrsVLTZLtNl1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5c:b8:bb:37:8c:15:1a:3c:e2:48:23:02:06:0b:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d811dd22f7eaf272bc4bf3ebb152d364bb4d9753
        Validity
            Not Before: Aug 14 13:01:11 2026 GMT
            Not After : Aug 15 13:01:11 2026 GMT
        Subject: CN=1f4ce7615457ed9d5d0cb7599b517cdb009f1e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:82:2e:8f:ba:10:b1:cd:ec:18:31:1d:81:a3:
                    41:59:ea:bd:41:11:ad:b1:f4:5c:b0:57:3b:47:26:
                    09:82:03:91:f0:78:10:0f:77:f3:fd:33:4a:3d:d2:
                    dd:66:c8:69:44:60:6b:59:5c:ff:34:08:53:19:96:
                    54:3f:ae:6d:a1:f2:5d:47:f3:d4:32:ff:bd:12:0d:
                    d3:9e:b3:83:71:4d:62:9e:43:b0:00:30:aa:9d:d5:
                    92:dc:09:8b:92:ab:44:21:f9:59:1e:00:3f:63:73:
                    59:6a:5d:d3:17:05:1a:19:b2:3e:8e:4b:32:d4:60:
                    8e:92:54:01:41:35:98:c0:35:a8:e4:33:f3:6d:19:
                    3d:fa:2f:0d:8f:9f:c9:fe:cc:c2:6c:36:50:47:6c:
                    e4:0a:f9:49:21:8b:e8:64:73:f3:1c:35:f6:e9:03:
                    b1:b4:db:b2:be:dd:35:f3:24:bf:63:eb:01:e8:ad:
                    1c:eb:12:2a:3d:a3:d5:2a:8f:b3:3f:b2:8a:ef:b2:
                    c2:d9:1e:99:a3:62:25:72:89:12:6a:c9:d0:fb:9d:
                    19:e2:f2:68:b9:9e:74:ef:9b:ef:64:db:2b:40:69:
                    84:b2:5c:7e:4a:21:d6:ff:7f:77:5a:73:70:3e:2b:
                    39:9c:1d:c2:56:90:8e:15:96:65:cd:c9:42:92:a0:
                    65:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4C:E7:61:54:57:ED:9D:5D:0C:B7:59:9B:51:7C:DB:00:9F:1E:61
            X509v3 Authority Key Identifier:
                keyid:D8:11:DD:22:F7:EA:F2:72:BC:4B:F3:EB:B1:52:D3:64:BB:4D:97:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BHdIvfq8nK8S_PrsVLTZLtNl1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4762c6-5eaf-4e7c-a824-f70adf1dc0fe/1/2BHdIvfq8nK8S_PrsVLTZLtNl1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4762c6-5eaf-4e7c-a824-f70adf1dc0fe/1/2BHdIvfq8nK8S_PrsVLTZLtNl1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:af:53:f5:f4:61:ba:ea:a7:50:2e:d9:19:f5:30:7d:bf:7c:
         15:aa:9c:bb:47:94:fd:10:e4:c4:b1:e0:a7:ca:d7:26:8d:14:
         f6:7a:a3:89:c7:f3:3b:77:0b:27:45:6a:ff:4b:dc:5d:81:6c:
         7d:e6:e6:9f:45:5f:6e:43:ff:5c:c0:6e:93:62:cc:90:5c:b2:
         b7:67:c4:14:eb:95:d3:72:a9:1c:b6:99:83:2d:23:95:4d:e5:
         8e:7c:4a:d8:30:d1:76:4b:4f:24:b7:57:19:5e:40:bf:42:fb:
         ec:b1:0c:1e:d9:1f:3b:ed:05:33:89:89:c2:4b:20:cf:69:4c:
         f1:7f:f2:24:34:bd:05:b1:bb:28:8b:24:a6:16:ba:2b:1e:04:
         8f:a4:6d:9a:0e:d2:4b:95:d8:ce:9a:39:20:f1:f9:61:fe:c8:
         91:b5:8f:e3:32:94:a5:45:d5:1c:b0:85:0a:12:8e:76:ba:d3:
         dd:87:89:77:76:9d:58:09:8d:0b:c3:1f:59:6f:53:2b:34:3e:
         fa:2d:03:09:e7:06:5c:0b:ab:84:91:b7:b2:e2:ee:39:c6:34:
         11:5f:7f:e9:2d:6e:82:bd:4c:d3:e4:62:27:56:7e:a1:ec:81:
         2a:f6:2e:c7:9c:da:53:4d:08:48:45:df:19:78:2f:31:74:59:
         5a:59:34:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:27 2026 by rpki-client