Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.mft
File:                     C1D8sK0jatqJ5lvWKlHRhKaHu_w.mft (raw, json)
Hash identifier:          yIXHIRBO1mkkT0OsEGWZBBbH9Iq6qDQq9MvBQL8X0o8=
Subject key identifier:   1E:D6:6E:FD:7A:09:9E:18:E7:B1:35:29:70:83:97:6A:5D:DC:37:87
Authority key identifier: 0B:50:FC:B0:AD:23:6A:DA:89:E6:5B:D6:2A:51:D1:84:A6:87:BB:FC
Certificate issuer:       /CN=0b50fcb0ad236ada89e65bd62a51d184a687bbfc
Certificate serial:       01A040F313949F376EA816B419245982BC2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1D8sK0jatqJ5lvWKlHRhKaHu_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.mft
Manifest number:          0345
Signing time:             Thu 27 Aug 2026 02:01:07 +0000
Manifest this update:     Thu 27 Aug 2026 02:01:07 +0000
Manifest next update:     Fri 28 Aug 2026 02:01:07 +0000
Files and hashes:         1: C1D8sK0jatqJ5lvWKlHRhKaHu_w.crl (hash: EOPsHOw2cvVcILgpVvKxWX+oCMKvf2Y1YQo6fI13vtA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1D8sK0jatqJ5lvWKlHRhKaHu_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:f3:13:94:9f:37:6e:a8:16:b4:19:24:59:82:bc:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b50fcb0ad236ada89e65bd62a51d184a687bbfc
        Validity
            Not Before: Aug 27 02:01:07 2026 GMT
            Not After : Aug 28 02:01:07 2026 GMT
        Subject: CN=1ed66efd7a099e18e7b135297083976a5ddc3787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:42:57:f9:43:69:ea:88:91:46:32:fe:9e:23:
                    31:ff:a9:d6:64:9f:c2:b5:2c:4f:fc:16:c8:bd:2e:
                    05:26:e7:34:32:25:40:ac:7b:fe:c3:4f:86:22:2f:
                    3a:d9:6b:24:6e:8f:94:3a:81:4b:e4:36:e5:9f:eb:
                    ef:0f:a8:b4:08:37:ce:d6:4a:d5:86:20:47:74:d2:
                    98:b7:b4:02:00:5a:b8:0b:be:f3:0c:8a:cd:c8:56:
                    f0:b8:a3:f8:48:57:6f:bd:63:6b:20:52:1f:66:7f:
                    5f:15:84:ed:ab:85:23:fc:49:42:1b:b3:da:7b:18:
                    79:6f:1f:67:6b:c2:7d:fb:23:75:e6:1f:ca:cd:af:
                    8e:68:30:f3:d4:05:f3:71:5c:74:04:43:d8:a5:9e:
                    ce:08:69:f3:a6:37:26:7f:e9:76:38:b2:75:d7:a3:
                    65:2a:9b:e5:dd:79:d3:20:62:8d:90:d9:5e:7f:c4:
                    b4:08:1e:0e:f8:89:66:c0:15:7d:42:ef:a2:83:84:
                    98:0f:e4:46:af:73:2b:de:5e:b1:9e:61:b3:c7:ff:
                    d1:8e:f9:e1:3d:e3:59:5a:24:f5:86:c5:2b:a9:4a:
                    cc:c4:80:2b:c8:d3:26:24:ef:9c:00:b8:6e:e6:21:
                    8c:84:a2:0f:c3:37:ac:ca:20:de:7e:c6:16:55:58:
                    ed:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D6:6E:FD:7A:09:9E:18:E7:B1:35:29:70:83:97:6A:5D:DC:37:87
            X509v3 Authority Key Identifier:
                keyid:0B:50:FC:B0:AD:23:6A:DA:89:E6:5B:D6:2A:51:D1:84:A6:87:BB:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1D8sK0jatqJ5lvWKlHRhKaHu_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:83:8e:49:8e:4c:af:17:fc:a3:64:b5:49:71:47:03:f7:04:
         66:6b:b2:69:f4:32:d1:f9:81:c4:84:b9:8b:dc:f3:92:3c:df:
         db:83:2e:80:28:83:45:a7:18:88:3d:82:f5:a1:6b:0e:05:25:
         eb:49:18:b4:aa:58:14:15:43:6f:6f:11:55:31:00:0c:98:6c:
         9b:57:5e:6a:04:b1:13:68:d5:5e:d0:95:9b:9e:9a:b1:91:6f:
         8e:dc:7c:92:65:17:9a:b9:ad:b0:bd:3d:57:c6:7e:15:cf:16:
         a7:34:ef:e5:4f:11:e4:60:c6:5c:7b:fc:23:56:6b:44:9f:b8:
         67:88:ef:8f:54:04:e0:4d:bd:a8:0d:04:85:66:a9:c1:c1:5e:
         e1:c2:62:51:46:28:d3:af:e2:85:29:52:bb:53:a0:bb:7e:ad:
         1f:80:a9:c6:51:b5:9d:d5:0f:d4:7c:fa:de:72:d7:2f:98:03:
         c5:d0:db:b5:86:67:45:c0:06:75:b8:11:0a:23:07:83:83:9a:
         fd:71:a0:49:ce:69:84:31:80:41:c9:4d:84:a5:2d:b4:21:97:
         52:72:ae:48:95:9d:4f:80:64:34:67:e6:24:af:cf:ba:20:f7:
         29:25:66:bd:ea:4f:98:40:9b:96:43:ec:f5:07:99:a5:4b:14:
         00:5d:a8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:54:01 2026 by rpki-client