Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft
File:                     fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft (raw, json)
Hash identifier:          dEJEZBRL/mcI0ehEvS/eAAhGJh6cUO7vnFNq8Rf3dtk=
Subject key identifier:   8C:2F:90:50:0B:A4:F9:DF:11:A0:BD:DC:8E:0B:1C:A5:EC:A3:00:BA
Authority key identifier: 7C:45:67:2F:C4:2B:DD:33:E5:45:33:8A:74:17:E8:17:1A:04:EE:3F
Certificate issuer:       /CN=7c45672fc42bdd33e545338a7417e8171a04ee3f
Certificate serial:       01A003266B0C62C1F2D0026BE18D01E8F008
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft
Manifest number:          0F0F
Signing time:             Sat 15 Aug 2026 02:00:44 +0000
Manifest this update:     Sat 15 Aug 2026 02:00:44 +0000
Manifest next update:     Sun 16 Aug 2026 02:00:44 +0000
Files and hashes:         1: fEVnL8Qr3TPlRTOKdBfoFxoE7j8.crl (hash: CWuAZE1FiQNQKJUjjDZlgDTBgnLmrsBzJTA5qv3hDfg=)
                          2: oQqfeDIpQqTY2qXddv-RmkOsSBw.roa (hash: hZoJxnHQE17dg7NNgeLOUvJ0Ph/Ff3w++3G8l+eeaLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:26:6b:0c:62:c1:f2:d0:02:6b:e1:8d:01:e8:f0:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c45672fc42bdd33e545338a7417e8171a04ee3f
        Validity
            Not Before: Aug 15 02:00:44 2026 GMT
            Not After : Aug 16 02:00:44 2026 GMT
        Subject: CN=8c2f90500ba4f9df11a0bddc8e0b1ca5eca300ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:49:c6:26:e7:d2:cd:db:dd:cb:26:dc:e6:e4:
                    49:3b:a2:bf:f1:58:32:ff:98:cb:3a:ce:08:6e:0f:
                    c4:db:e6:bb:5a:83:3d:0e:08:20:f5:1b:c4:93:27:
                    96:c5:4b:52:7f:3a:cd:78:20:b2:06:d9:8d:a4:eb:
                    56:29:5d:87:79:1c:bb:b4:90:27:08:40:15:d2:4f:
                    25:16:46:eb:4a:bc:5e:26:df:3d:c4:a2:45:95:3a:
                    42:cb:5d:a9:93:61:e2:c8:9a:c6:fe:f9:e3:1c:a4:
                    bb:24:a2:33:78:ac:07:d3:d5:92:88:67:59:a6:e1:
                    45:70:ba:86:ff:a6:de:84:8d:26:3e:ad:e4:93:18:
                    77:ca:d9:1e:d1:75:93:e4:37:d3:65:12:e5:74:71:
                    c6:c5:f7:75:85:7b:7e:ba:06:89:63:1b:9c:1f:14:
                    f5:ea:0d:59:38:61:76:10:e4:6c:a1:5c:4e:00:4f:
                    2d:a1:ee:19:1c:95:c4:77:c0:c9:01:ec:93:60:d4:
                    16:b5:14:ed:f9:22:c5:a7:70:30:d1:fb:0f:3e:f9:
                    ac:c9:f5:ea:95:74:b7:2a:b9:5c:e6:27:bc:a0:01:
                    2a:8d:3c:5b:8a:2b:5f:1b:e0:81:ef:ac:8f:95:d6:
                    4b:08:e8:e9:ed:5b:d3:72:45:f5:46:46:f7:cd:23:
                    ae:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2F:90:50:0B:A4:F9:DF:11:A0:BD:DC:8E:0B:1C:A5:EC:A3:00:BA
            X509v3 Authority Key Identifier:
                keyid:7C:45:67:2F:C4:2B:DD:33:E5:45:33:8A:74:17:E8:17:1A:04:EE:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:f8:18:fc:07:ad:7b:27:8f:65:3a:65:88:e9:c6:34:ef:38:
         85:8f:36:1b:5d:cc:14:22:7d:fd:45:4a:4e:bf:d4:b6:a6:1c:
         da:2b:e0:5b:22:12:9d:4a:b2:c0:11:9f:32:47:db:1e:ab:60:
         02:30:46:52:48:6f:d5:ac:68:04:01:e4:f8:93:e1:b0:15:7e:
         41:f9:b4:eb:41:80:47:4c:de:88:47:0d:0a:1b:e5:1c:0f:93:
         38:d4:31:18:84:0f:3e:6f:c9:d2:bb:01:ca:fa:c4:f8:fb:d3:
         00:21:b3:23:28:80:81:5e:c9:f6:93:12:e1:32:32:17:45:33:
         81:6c:5a:81:4f:31:6a:6a:9c:1d:9c:44:54:0d:39:d9:e3:24:
         61:8b:e6:ef:8b:85:2b:b4:10:19:50:5d:8e:4e:0f:b4:eb:61:
         d0:47:b3:f4:2e:15:8f:bc:33:74:8d:c3:60:87:25:0d:49:64:
         3a:36:19:49:28:92:04:00:ec:85:12:21:14:33:2b:88:41:f5:
         75:41:f3:16:11:e9:4c:ad:39:74:9b:97:85:12:af:1b:7f:80:
         71:38:83:21:c4:62:f5:ef:ce:05:01:a5:89:b3:cb:19:20:7b:
         c2:15:19:59:17:7a:b8:33:18:f6:58:5c:93:ce:35:a7:11:7f:
         fc:14:af:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:22:51 2026 by rpki-client