Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
File:                     8VCW_jOQRJyTboVwYdSmll1AijE.mft (raw, json)
Hash identifier:          jfYd10MFMv3Pzj8g3uDcjwwPwmRFWfVe6V4+BShtCps=
Subject key identifier:   72:21:B0:D9:52:EE:B5:75:B7:99:D6:38:E3:67:6A:39:2A:CD:62:58
Authority key identifier: F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31
Certificate issuer:       /CN=f15096fe3390449c936e857061d4a6965d408a31
Certificate serial:       01A00137E418586BBC862ACEE867F3F55097
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
Manifest number:          1006
Signing time:             Fri 14 Aug 2026 17:00:35 +0000
Manifest this update:     Fri 14 Aug 2026 17:00:35 +0000
Manifest next update:     Sat 15 Aug 2026 17:00:35 +0000
Files and hashes:         1: 8VCW_jOQRJyTboVwYdSmll1AijE.crl (hash: ezyzwyAwF5vWT/UYoOSJmMHRW8k8Oub0ICDlF5E6eTA=)
                          2: WOvdhijn_s2DZtcctLEpLuIdUNw.roa (hash: Z7s2Qx4CcpmhX86cISi/NLHh5qOxWJPe6Z62x5xT1Q0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:37:e4:18:58:6b:bc:86:2a:ce:e8:67:f3:f5:50:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f15096fe3390449c936e857061d4a6965d408a31
        Validity
            Not Before: Aug 14 17:00:35 2026 GMT
            Not After : Aug 15 17:00:35 2026 GMT
        Subject: CN=7221b0d952eeb575b799d638e3676a392acd6258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:45:45:81:94:9c:e8:dd:ef:90:49:25:7f:d1:
                    bc:9d:0b:ac:a4:f0:27:97:87:84:a0:5b:b1:de:7c:
                    dd:7a:d7:e1:f8:b1:38:88:8b:92:96:50:d6:ff:e8:
                    aa:e3:dd:e8:f2:1a:71:c0:1e:b7:ca:2f:2a:b2:c2:
                    83:3c:81:e4:76:84:96:ec:52:fb:d6:83:04:c9:65:
                    32:5f:a2:7a:f5:54:9a:3b:d7:20:87:28:27:87:fe:
                    7b:b8:5e:28:4b:85:3a:a3:90:ea:6d:df:a2:0c:ea:
                    4e:4c:82:f2:2e:5b:82:0a:d4:b2:f1:70:dc:d4:9e:
                    c8:2d:83:f0:3b:a5:dc:ca:02:5e:58:22:b4:db:78:
                    c6:d7:a1:e8:fe:38:84:a8:77:dd:9d:59:a3:10:75:
                    4c:4f:52:ad:b7:2e:a6:42:32:b6:e7:30:9a:76:cc:
                    dd:3a:2c:b8:15:ba:70:b1:09:bb:03:a9:72:a5:94:
                    7a:30:5c:42:14:d6:52:e2:af:71:7a:3d:a4:06:d6:
                    06:bf:69:ee:b7:6b:62:2b:1f:fb:6a:bd:44:91:18:
                    23:01:21:1c:f7:67:54:05:f7:21:f7:32:84:a7:31:
                    d7:fc:0a:51:bb:f8:48:cf:53:30:71:ae:37:3f:38:
                    fc:55:cc:5e:e9:b4:02:ef:96:88:0f:71:dd:d5:a9:
                    cd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:21:B0:D9:52:EE:B5:75:B7:99:D6:38:E3:67:6A:39:2A:CD:62:58
            X509v3 Authority Key Identifier:
                keyid:F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:c2:3d:0e:5c:eb:5f:9b:83:c8:48:86:6e:0a:34:90:77:14:
         de:14:39:eb:6a:72:9d:0d:80:36:5f:e5:88:da:e2:5f:96:dc:
         19:89:bd:dd:de:3f:c8:34:0a:7f:74:fc:86:7e:d6:73:8c:d5:
         2f:0e:88:7e:37:5e:85:a5:62:64:d0:96:0e:9c:92:cf:4e:c6:
         b4:87:c8:83:7a:b2:05:03:26:1f:01:7a:49:8e:9e:ad:11:eb:
         76:5f:96:d1:1b:96:87:7b:3f:19:64:48:70:e9:88:b2:23:aa:
         70:d7:fe:eb:a2:7f:5e:f2:ab:e2:9c:f8:2f:6f:d4:75:b0:dc:
         a0:f9:26:fd:3a:64:d1:fa:94:b7:36:89:44:7c:de:a4:8e:85:
         3c:0b:52:3d:21:e5:1c:79:ad:23:11:97:76:8f:28:4f:04:f9:
         e7:a0:26:86:1a:c4:e2:7e:03:68:e6:a9:76:67:6b:11:49:bf:
         87:e9:af:91:12:97:40:9a:10:cc:20:41:45:47:50:8e:cf:c7:
         54:34:7d:17:87:2c:d0:c3:c2:71:67:e1:7b:58:69:21:90:f2:
         d7:ff:bf:66:b2:35:42:1e:6a:a7:09:e0:e7:5b:a5:11:48:15:
         9e:ad:d0:14:ad:9b:2d:16:ea:2b:d4:f5:64:6b:34:f4:5c:96:
         17:d6:20:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:29:26 2026 by rpki-client