Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
File:                     8NREvH1TNNoU3oBRcrJiXpgwdj8.mft (raw, json)
Hash identifier:          DAZKIJH2NOUO6Fq3sypOofeRz3trVn7n0N2ltF2nDg0=
Subject key identifier:   B6:09:96:00:DC:CE:75:BD:31:69:BB:BC:B3:8B:D4:01:6A:B4:1C:FE
Authority key identifier: F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
Certificate issuer:       /CN=f0d444bc7d5334da14de805172b2625e9830763f
Certificate serial:       01A000CA5AD009B92861A55E9BE2939E9132
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
Manifest number:          0981
Signing time:             Fri 14 Aug 2026 15:00:56 +0000
Manifest this update:     Fri 14 Aug 2026 15:00:56 +0000
Manifest next update:     Sat 15 Aug 2026 15:00:56 +0000
Files and hashes:         1: 8NREvH1TNNoU3oBRcrJiXpgwdj8.crl (hash: 70CbshSE/C/be7wSfpL9FgC+II2c7y+3xyDxTVI+KiQ=)
                          2: wF_q_VT2vLpTBM5Oeqm7M9XsChw.roa (hash: aN3q8Drn260bx+eRQtUiCzDsSBkZm+NdLG36hflpNDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:5a:d0:09:b9:28:61:a5:5e:9b:e2:93:9e:91:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0d444bc7d5334da14de805172b2625e9830763f
        Validity
            Not Before: Aug 14 15:00:56 2026 GMT
            Not After : Aug 15 15:00:56 2026 GMT
        Subject: CN=b6099600dcce75bd3169bbbcb38bd4016ab41cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c9:d7:aa:1e:0f:b7:12:f6:ec:21:49:56:f8:
                    1b:5a:01:19:43:73:81:ae:cf:42:94:52:d5:11:d4:
                    c8:8b:24:53:a6:64:eb:6a:47:8f:0b:4c:ed:18:92:
                    c6:9e:34:57:ab:16:66:37:50:79:9c:29:18:8a:a3:
                    1a:46:f5:a1:9b:4e:cf:71:d4:05:e3:e9:dc:1a:12:
                    63:db:9a:5a:ad:4e:04:e5:14:19:42:8c:70:b1:dd:
                    82:42:6f:68:90:66:25:dd:50:cb:97:3e:26:94:ac:
                    7c:ec:e3:38:18:30:ce:44:47:f4:72:76:97:c6:3f:
                    a4:9a:8b:f2:87:f3:bc:01:ad:df:eb:e4:88:57:1a:
                    72:28:cc:07:6f:d2:cb:84:b0:bc:9c:56:c2:54:94:
                    01:b5:f4:d9:a4:0a:65:6b:b9:58:0e:3e:54:41:71:
                    67:7d:20:1d:fc:ec:53:a2:bf:16:5b:18:3f:de:7b:
                    ba:1f:3a:7f:86:7c:24:a2:ae:0d:25:48:d7:28:f1:
                    d2:e6:34:17:2b:9b:bc:12:4a:61:7f:00:ea:53:be:
                    0e:ee:f4:80:66:06:5b:61:ce:1e:d1:e5:98:69:43:
                    84:28:bb:fa:2d:41:6b:10:d5:48:8d:db:7b:e0:89:
                    66:20:ea:05:78:dd:d3:e4:e5:03:7f:96:63:b0:98:
                    e6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:09:96:00:DC:CE:75:BD:31:69:BB:BC:B3:8B:D4:01:6A:B4:1C:FE
            X509v3 Authority Key Identifier:
                keyid:F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:f3:cb:99:e5:15:65:1e:62:3b:b7:9c:37:a1:21:2e:c3:ec:
         90:00:11:b0:74:fd:db:79:74:ff:3e:92:35:84:df:f1:26:d4:
         e6:04:e6:8d:9e:1c:3d:00:2d:59:a2:e3:86:cf:21:dd:9a:03:
         64:ef:90:3a:df:db:27:4a:a4:4b:c3:a4:a2:0f:7c:7f:4e:39:
         90:df:4c:ce:85:df:b4:19:8f:f8:2e:ba:25:6e:41:8a:2e:bd:
         4c:fa:81:d3:80:14:c1:6c:4c:46:96:26:e7:5c:c9:6e:12:0f:
         41:27:70:b1:84:55:68:59:7f:24:ad:7f:35:80:9a:a7:bb:33:
         04:76:3c:cb:ec:4f:a3:74:94:b4:78:d0:07:25:af:48:2b:81:
         bb:7a:45:9d:52:78:c9:76:8b:37:b6:cd:91:f5:cd:0b:88:af:
         b0:a3:de:27:3d:00:8e:a6:39:c3:83:a2:9b:25:cd:99:2e:3b:
         c1:95:48:99:e1:a1:ee:09:04:25:d8:8b:27:48:71:95:20:d7:
         63:ea:4f:47:e3:0c:92:e3:f1:9a:6e:64:e0:a8:52:66:b3:ea:
         bc:e4:04:c7:19:ae:ea:98:79:97:d4:1f:dd:15:35:ab:72:cb:
         4a:55:a2:dc:47:1a:59:66:89:96:36:20:24:3d:82:7a:f9:65:
         98:32:b3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:39:33 2026 by rpki-client