Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
File:                     0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft (raw, json)
Hash identifier:          ENfo+XgQJ5Lblgi7SPM7v0Fmm6SlL4sqtL7XsGrl+cw=
Subject key identifier:   F0:AB:5D:89:5C:C6:EE:A9:B5:95:84:D0:7D:2C:44:2C:38:B1:0C:F7
Authority key identifier: D3:3A:62:0B:2A:CC:8F:C3:0B:8C:4D:51:8F:92:97:E3:F7:C9:A6:0A
Certificate issuer:       /CN=d33a620b2acc8fc30b8c4d518f9297e3f7c9a60a
Certificate serial:       01A001DD5DCB8B2FFFF24F71158C60176555
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
Manifest number:          0FEE
Signing time:             Fri 14 Aug 2026 20:01:19 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:19 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:19 +0000
Files and hashes:         1: 0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl (hash: 6EES86/HJ+aYHiD8PIsucrjJ0UTiogyVMRfVfUbIjrQ=)
                          2: 30fBF43nNMXHw1Tgh2dLtFk3R6M.roa (hash: PgUDjgwNU/uw7qs9K31DsvhoYHzlo8cAS/N8Ut5gSaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:5d:cb:8b:2f:ff:f2:4f:71:15:8c:60:17:65:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d33a620b2acc8fc30b8c4d518f9297e3f7c9a60a
        Validity
            Not Before: Aug 14 20:01:19 2026 GMT
            Not After : Aug 15 20:01:19 2026 GMT
        Subject: CN=f0ab5d895cc6eea9b59584d07d2c442c38b10cf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:31:c9:dd:4f:13:1e:1e:f7:c5:28:ee:ac:22:
                    da:8a:36:5a:78:a7:c1:23:e3:e6:c0:e9:0e:5f:bb:
                    62:10:df:93:d9:e0:a2:7e:06:bd:49:3f:b3:3c:63:
                    80:d1:8a:52:b1:83:5f:82:fb:59:23:06:ba:6f:61:
                    3f:87:29:76:e9:cc:af:b8:59:dc:ab:da:65:46:79:
                    a8:c9:58:94:98:d1:4c:f0:cb:38:55:ce:19:e7:8d:
                    b0:eb:82:46:f8:2a:18:95:70:85:4f:57:00:e9:63:
                    b1:ab:2d:36:7a:95:74:2a:0f:a8:83:1f:7a:b5:c6:
                    3a:0d:12:a7:7a:15:75:6e:6b:88:c3:d0:ac:3f:9d:
                    69:9b:db:07:ec:38:48:1a:14:b6:0e:b7:1f:f6:88:
                    07:3d:45:0d:4e:b9:fd:6b:8d:27:36:a7:9f:d3:c7:
                    84:57:c9:ec:8a:fe:07:f9:fd:e6:74:58:f0:81:25:
                    69:35:29:e4:6c:69:30:64:66:6c:d0:64:34:a7:27:
                    e3:1a:37:74:22:4d:e5:9b:fa:32:86:0e:4c:3d:75:
                    6f:49:4f:b3:a9:91:3c:18:5b:91:33:77:c2:bf:36:
                    29:5e:39:73:c7:4f:d8:54:17:22:ae:b5:00:ee:d0:
                    c3:46:72:25:22:3b:61:20:e0:4d:db:2b:5c:8a:6b:
                    ad:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:AB:5D:89:5C:C6:EE:A9:B5:95:84:D0:7D:2C:44:2C:38:B1:0C:F7
            X509v3 Authority Key Identifier:
                keyid:D3:3A:62:0B:2A:CC:8F:C3:0B:8C:4D:51:8F:92:97:E3:F7:C9:A6:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:99:63:2f:11:b3:51:00:41:2e:f8:f2:e7:0f:f0:15:49:ab:
         bb:b9:b7:c1:fc:fe:70:07:a6:2c:95:21:23:84:97:64:8e:92:
         40:ac:68:d5:57:af:9f:8e:dd:d6:f8:74:2e:95:c4:85:56:67:
         a3:55:fe:fd:28:77:5b:d7:7f:46:9e:35:f6:4a:6a:17:29:5e:
         76:ac:78:d6:96:1e:7c:68:c1:02:46:eb:d4:1a:80:8e:54:ed:
         68:ad:84:f1:1b:c6:8f:f4:bf:cc:85:f2:ab:e3:4c:0f:11:90:
         91:bb:56:92:11:0d:35:b0:60:f7:33:0d:a0:c5:07:f3:5b:b7:
         97:a2:fb:22:b3:67:d6:0b:e0:06:19:3b:62:c9:76:b7:92:9a:
         7b:ca:dd:6e:93:8a:be:13:3f:48:68:e4:1b:34:dc:0e:a4:dd:
         19:29:a5:49:38:3a:dc:af:e5:a8:21:7b:ed:d2:66:fc:91:8d:
         06:83:3c:5e:58:a5:a9:79:d6:64:1e:06:03:f9:fd:fa:fe:e3:
         0d:eb:48:82:e4:50:ad:48:69:4d:da:02:9b:d8:97:37:30:49:
         a8:f1:35:ee:7c:2d:61:83:71:44:c6:ee:e4:40:b5:3b:12:42:
         fe:28:b7:19:70:dd:8d:0d:a7:f8:54:a4:d8:9c:47:52:58:19:
         56:fb:a2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:29:34 2026 by rpki-client