Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/166b33-f79d-4308-ad07-5b7b9570099e/1/CMe2W6ZlnidXB3PFCFWHVOtJDd4.mft
File:                     CMe2W6ZlnidXB3PFCFWHVOtJDd4.mft (raw, json)
Hash identifier:          HCcdfgULo8CJGTSeZ60WH/hl1CxDud35Jly3n9uCUTo=
Subject key identifier:   51:45:DA:AC:ED:06:92:8A:F3:A7:1D:4D:DF:A2:B4:FD:BC:DF:97:98
Authority key identifier: 08:C7:B6:5B:A6:65:9E:27:57:07:73:C5:08:55:87:54:EB:49:0D:DE
Certificate issuer:       /CN=08c7b65ba6659e27570773c508558754eb490dde
Certificate serial:       01A0404E9A632A80BE96099E651AED75045A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CMe2W6ZlnidXB3PFCFWHVOtJDd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/166b33-f79d-4308-ad07-5b7b9570099e/1/CMe2W6ZlnidXB3PFCFWHVOtJDd4.mft
Manifest number:          0391
Signing time:             Wed 26 Aug 2026 23:01:28 +0000
Manifest this update:     Wed 26 Aug 2026 23:01:28 +0000
Manifest next update:     Thu 27 Aug 2026 23:01:28 +0000
Files and hashes:         1: CMe2W6ZlnidXB3PFCFWHVOtJDd4.crl (hash: KagVqTaBmIkoO5Y5/raD7DQmVg/zqcjcgN89Y61fRw4=)
                          2: SRXdpHT57ULX4WKXkvYrazem0ic.roa (hash: ee1vZ+vWObcfNj4Y7l+2NN7pUFsGmvTOn9r3vlBcOP4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/166b33-f79d-4308-ad07-5b7b9570099e/1/CMe2W6ZlnidXB3PFCFWHVOtJDd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/166b33-f79d-4308-ad07-5b7b9570099e/1/CMe2W6ZlnidXB3PFCFWHVOtJDd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CMe2W6ZlnidXB3PFCFWHVOtJDd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:4e:9a:63:2a:80:be:96:09:9e:65:1a:ed:75:04:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08c7b65ba6659e27570773c508558754eb490dde
        Validity
            Not Before: Aug 26 23:01:28 2026 GMT
            Not After : Aug 27 23:01:28 2026 GMT
        Subject: CN=5145daaced06928af3a71d4ddfa2b4fdbcdf9798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a9:aa:1d:c8:9c:a2:87:54:04:dd:98:bb:c9:
                    0e:8c:e5:96:27:5d:fb:e9:7a:8c:eb:87:08:f0:48:
                    aa:70:d4:4b:bb:34:d2:d5:30:c9:93:6f:3f:f8:0f:
                    6d:5b:2a:4f:06:ba:ad:f2:db:18:35:48:09:f3:f7:
                    87:ad:84:48:5f:e8:e0:db:c7:17:f4:bf:02:d5:b0:
                    13:46:d8:36:5e:77:41:87:31:5c:32:22:8c:67:b5:
                    87:41:ca:4e:7e:c3:b3:7b:ca:64:5b:f9:b4:d2:b6:
                    81:52:08:00:a6:ad:be:21:96:fd:db:d6:d7:3e:24:
                    c7:f7:8c:cd:0c:6d:13:28:4e:d7:83:92:e1:85:1f:
                    27:a7:05:14:73:72:19:bc:7f:e7:00:c7:71:33:f4:
                    42:db:5d:07:32:d6:db:4d:66:b7:28:08:7b:29:3f:
                    90:6c:01:66:67:73:fc:90:4d:f1:34:fc:de:9d:d6:
                    ba:cc:69:22:74:c6:31:cb:42:bc:fd:3f:27:ba:3b:
                    7f:72:bb:da:cc:4e:7c:dd:c0:aa:a5:ab:1b:36:28:
                    3f:d0:03:bd:e4:48:8d:22:05:44:77:13:00:89:8c:
                    07:f7:c5:cc:ca:b3:6b:89:67:cb:0f:b0:db:7f:73:
                    40:a9:26:d3:b2:42:e6:53:61:72:66:ba:6e:56:ce:
                    c2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:45:DA:AC:ED:06:92:8A:F3:A7:1D:4D:DF:A2:B4:FD:BC:DF:97:98
            X509v3 Authority Key Identifier:
                keyid:08:C7:B6:5B:A6:65:9E:27:57:07:73:C5:08:55:87:54:EB:49:0D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CMe2W6ZlnidXB3PFCFWHVOtJDd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/166b33-f79d-4308-ad07-5b7b9570099e/1/CMe2W6ZlnidXB3PFCFWHVOtJDd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/166b33-f79d-4308-ad07-5b7b9570099e/1/CMe2W6ZlnidXB3PFCFWHVOtJDd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:36:fa:a1:9e:18:cb:a1:09:66:42:78:7e:2e:c2:fa:0d:aa:
         73:2a:57:16:12:32:06:6f:d8:3b:0d:9d:31:46:b2:4c:29:5f:
         a8:72:2d:f2:8a:c3:78:4a:b7:5d:8b:84:ac:44:7f:91:19:ba:
         6d:ec:6e:cb:99:20:c9:58:47:db:09:ad:db:57:82:2c:5f:c3:
         a5:ec:27:cc:b2:ea:7a:8c:44:4a:73:a3:25:b9:af:df:7f:5f:
         cd:7c:54:cc:f2:7f:e8:37:f8:79:8a:2a:73:a4:6e:28:8f:f3:
         77:9f:c9:88:2d:dd:be:f9:c5:fc:1c:f8:5e:b6:e6:7b:77:fd:
         36:76:d2:23:e8:c1:63:50:c9:dc:bc:9b:f8:5d:78:d0:b1:49:
         fe:33:29:c7:5d:e0:1d:85:dc:d2:d9:39:37:6a:4e:bb:34:cb:
         e1:de:5e:f5:59:0e:2b:88:dd:1c:21:e3:c4:96:7e:d5:c5:bb:
         39:9d:2f:3e:5d:69:45:34:07:91:f7:e5:37:5c:bb:4f:86:38:
         62:3b:63:9b:47:3f:b5:60:88:30:ff:97:65:ed:90:d8:35:ab:
         29:c9:da:0a:97:25:f8:a0:fb:31:29:be:17:cc:c8:a3:89:53:
         bd:a7:35:e0:81:58:80:d7:f6:b3:52:a7:7c:eb:b0:2e:80:b9:
         1a:bc:17:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:21:06 2026 by rpki-client