Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
File:                     8D9771R9ACUziqa2rueqHb4Urio.mft (raw, json)
Hash identifier:          fjR5izSS2lVwwzMrBgBgH2U7pODeAo5XrM8LXv+CIso=
Subject key identifier:   23:3C:0E:B3:20:2F:CE:BB:7A:69:F6:73:D4:FB:4E:1E:B5:9A:8D:1B
Authority key identifier: F0:3F:7B:EF:54:7D:00:25:33:8A:A6:B6:AE:E7:AA:1D:BE:14:AE:2A
Certificate issuer:       /CN=f03f7bef547d0025338aa6b6aee7aa1dbe14ae2a
Certificate serial:       01A0010148C50AE42B4BAC0C197F1339B842
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
Manifest number:          19FD
Signing time:             Fri 14 Aug 2026 16:00:56 +0000
Manifest this update:     Fri 14 Aug 2026 16:00:56 +0000
Manifest next update:     Sat 15 Aug 2026 16:00:56 +0000
Files and hashes:         1: 8D9771R9ACUziqa2rueqHb4Urio.crl (hash: xEo7WiQr6p3IVx/xSHTsWzFDnS4pUi3wceraYWra3TU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:48:c5:0a:e4:2b:4b:ac:0c:19:7f:13:39:b8:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f03f7bef547d0025338aa6b6aee7aa1dbe14ae2a
        Validity
            Not Before: Aug 14 16:00:56 2026 GMT
            Not After : Aug 15 16:00:56 2026 GMT
        Subject: CN=233c0eb3202fcebb7a69f673d4fb4e1eb59a8d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:36:a6:e9:9e:a7:07:74:84:44:6f:50:b5:ad:
                    87:b6:ba:9b:81:74:4b:4e:e9:5a:12:f2:77:6b:53:
                    26:2a:67:57:01:8b:5a:ff:6b:e8:79:cc:a9:99:84:
                    4d:c2:e8:d8:7d:ec:f9:f4:8a:08:cb:95:7d:8f:b7:
                    23:3f:a1:a3:e6:50:0f:bd:34:83:22:b1:0a:29:73:
                    88:b7:a9:cf:4c:0c:54:c3:b4:f5:bf:c3:51:6c:16:
                    f8:f6:96:e3:4c:42:8c:c2:ae:25:41:4f:12:f8:ab:
                    7b:7f:1b:95:94:e0:34:32:a9:d0:2a:cf:3b:cc:f9:
                    d9:71:86:7b:b2:3f:5e:c3:e9:91:78:0b:1e:ca:c4:
                    70:f0:f0:d2:70:21:ba:c6:bb:47:e6:9c:d5:50:7a:
                    21:a9:67:90:bd:7a:21:20:e3:35:78:82:e2:40:08:
                    74:02:64:aa:c4:20:e2:5f:37:ca:d0:39:8b:28:34:
                    44:26:13:4a:43:f4:89:27:a7:6d:33:64:cd:57:9f:
                    79:a5:73:8a:5e:67:d0:02:f5:0d:fa:08:66:d1:ce:
                    28:50:8d:38:9a:d2:f9:a7:79:78:cc:81:c3:62:ca:
                    6e:76:3e:14:86:3e:57:f7:70:ea:4f:2d:62:00:5a:
                    e9:7f:8c:93:7c:af:09:48:17:16:16:3e:c7:dc:d4:
                    2e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3C:0E:B3:20:2F:CE:BB:7A:69:F6:73:D4:FB:4E:1E:B5:9A:8D:1B
            X509v3 Authority Key Identifier:
                keyid:F0:3F:7B:EF:54:7D:00:25:33:8A:A6:B6:AE:E7:AA:1D:BE:14:AE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:bc:aa:41:9b:3a:15:57:ea:f1:f2:b3:57:8b:02:b0:a9:2e:
         93:8d:77:e3:c9:62:c0:ed:c6:73:17:1f:f9:e2:1b:91:5a:17:
         d0:a4:ca:76:c1:29:c9:be:cd:5a:1b:04:40:76:bd:a6:d8:07:
         fc:7f:e2:10:3d:48:e7:12:77:2c:a3:65:7e:f3:5f:f7:27:fe:
         98:5b:dd:aa:a2:9b:26:09:e8:bd:23:f0:2e:a3:1c:7e:25:25:
         d2:c1:22:6a:2c:16:45:2f:6f:ab:b9:75:cd:c9:17:df:95:00:
         23:9c:6b:f2:ba:dd:75:3a:77:60:c3:c9:d6:ff:a7:90:1f:c7:
         42:b1:92:d5:11:15:42:fa:45:31:6e:cc:81:e2:2d:5d:e3:68:
         ec:7b:ba:e7:6b:60:93:31:28:65:39:a0:fa:e8:f3:3d:54:f3:
         49:fd:b8:53:6d:74:c2:0d:a9:76:42:04:b1:ef:ae:c8:4e:0e:
         67:d8:f3:bc:21:ea:c1:d6:76:3c:19:16:0c:36:86:0a:35:90:
         0d:5a:6a:07:8e:10:69:39:63:ce:9c:22:61:16:fc:a9:87:73:
         dc:26:2a:c8:a3:31:9f:11:d4:af:81:e8:4a:cd:f0:eb:75:c7:
         b5:7a:ea:c8:27:15:57:ba:74:f1:00:88:72:88:af:28:95:8d:
         af:91:b3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:28 2026 by rpki-client