Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
File:                     DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft (raw, json)
Hash identifier:          UJv9ncAsVM3O9BgoO+HFACdISEjl9OL0V2Lo2VFYTnI=
Subject key identifier:   C7:E1:17:87:FE:1E:5F:E8:9A:7A:0C:8D:E1:46:B7:FC:A0:18:8A:B0
Authority key identifier: 0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75
Certificate issuer:       /CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
Certificate serial:       01A00281BE4DD425306CC1F7C7E7A7DD7F14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
Manifest number:          109F
Signing time:             Fri 14 Aug 2026 23:00:52 +0000
Manifest this update:     Fri 14 Aug 2026 23:00:52 +0000
Manifest next update:     Sat 15 Aug 2026 23:00:52 +0000
Files and hashes:         1: DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl (hash: 29263/fEsNRRIdQ2PTVyxpnLgxHXnJksQX1k13WlN2c=)
                          2: PT0Hh_zA6DA7Ygm3lsv3kQf_fks.roa (hash: FxFcWo8Y6GRlCILxAgJ+3ut0eY9so1Z8V3wHguGCZXE=)
                          3: Ua52IPMh7tUk8OiJNRdVKabymgI.roa (hash: Ig2jLrSQbVFfXELVpcCRVjOIIU8fStnsUhfT16Zx690=)
                          4: bteUfMNGCw4iekhcsm-TC--JQrY.roa (hash: 0mwVlH5pQckOHYni1LukazfItUgOS1Qd+GhZIFEebJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 23:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:81:be:4d:d4:25:30:6c:c1:f7:c7:e7:a7:dd:7f:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
        Validity
            Not Before: Aug 14 23:00:52 2026 GMT
            Not After : Aug 15 23:00:52 2026 GMT
        Subject: CN=c7e11787fe1e5fe89a7a0c8de146b7fca0188ab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f4:a9:4c:82:0a:8e:79:c5:92:cc:96:77:a8:
                    c8:79:05:30:2e:3e:53:9e:27:f3:be:e8:b8:91:75:
                    f9:dc:77:8c:08:bd:6e:90:ef:af:0b:3e:f4:a9:b6:
                    89:a6:6d:55:91:a6:09:de:72:47:96:40:04:56:a2:
                    5a:43:c6:15:2c:7a:00:99:80:a7:22:0f:3d:9c:cb:
                    d1:48:44:f4:75:66:fd:3c:b5:87:a2:22:ec:b3:31:
                    6b:46:33:c3:5f:75:bf:03:a9:e5:6a:07:a3:55:f9:
                    c8:13:6d:f5:eb:df:c1:f7:17:fe:42:78:0c:b8:d9:
                    c8:e8:c2:6c:f1:23:0e:aa:d5:1f:7f:b0:8f:b2:9c:
                    49:52:24:60:47:5e:fe:e3:60:cf:72:6a:15:ec:ca:
                    ba:2a:bc:b8:4c:f5:e8:a7:f4:79:07:25:8f:e1:ec:
                    c5:20:1e:e9:8a:b9:3b:c9:57:ab:0b:23:35:1c:6b:
                    0c:b6:61:8a:da:2b:dc:27:b6:fd:f9:57:5d:97:21:
                    08:5b:b6:a7:da:15:66:27:fe:20:cd:92:55:b1:b2:
                    82:b0:50:59:dc:0a:3c:92:a7:37:f9:14:3c:53:0d:
                    41:04:7e:78:b9:87:b8:e2:df:ca:c5:3b:fb:d5:3b:
                    0b:28:6e:f1:25:90:2b:b9:ec:3d:e3:3c:6a:33:cd:
                    cb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E1:17:87:FE:1E:5F:E8:9A:7A:0C:8D:E1:46:B7:FC:A0:18:8A:B0
            X509v3 Authority Key Identifier:
                keyid:0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:94:87:6c:f4:8b:31:88:d3:76:e4:f8:17:b7:ce:92:54:b5:
         a7:06:51:ed:a1:8f:5a:f8:6c:37:d3:73:88:2a:41:43:57:13:
         ba:01:29:70:63:dc:4e:4f:bc:94:7c:d2:d4:28:dc:6e:7e:88:
         fe:89:d5:60:5a:42:df:d0:ad:ce:4b:ec:35:d2:0c:c8:74:2c:
         fd:39:f1:cb:65:ec:2d:04:ab:bc:21:17:bb:4b:cb:d9:58:5a:
         20:8e:45:de:b7:3e:08:a0:cd:51:34:22:2d:b8:29:1b:f2:2c:
         17:ee:aa:17:00:20:83:7f:03:bc:2f:d9:e1:34:a1:d5:d4:4d:
         bb:eb:92:11:7c:59:3a:8a:31:a2:27:3e:8a:09:1d:ea:41:f9:
         92:6e:cb:cc:ff:08:72:c1:2a:c5:da:b3:0e:ff:c7:b9:b9:13:
         d0:fc:72:2e:2a:07:c7:d8:72:3a:f2:75:2c:ff:62:ce:7a:28:
         c8:e6:45:9e:ea:97:5e:15:23:2c:8b:98:cf:ef:dc:6b:26:48:
         13:2c:cd:74:b3:a5:6e:06:47:3a:46:29:f4:fc:9b:c9:ec:4b:
         5b:ba:cf:b8:f5:34:eb:14:13:f8:69:b6:51:b4:57:61:d9:f9:
         a7:9c:5d:2e:78:4c:0b:8f:db:51:6d:b6:d8:43:24:c0:68:cd:
         75:06:77:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:02:39 2026 by rpki-client