Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/0pvgv6Vswmt22J1UoygpTq8rlWE.mft
File:                     0pvgv6Vswmt22J1UoygpTq8rlWE.mft (raw, json)
Hash identifier:          fOPrhB//psFxLClqOJ9EBYBdmXFZG5WcEowRYuWK25I=
Subject key identifier:   AA:E7:97:0B:7F:8B:2E:B8:0C:7E:A3:34:B0:5E:4A:11:18:05:AF:50
Authority key identifier: D2:9B:E0:BF:A5:6C:C2:6B:76:D8:9D:54:A3:28:29:4E:AF:2B:95:61
Certificate issuer:       /CN=d29be0bfa56cc26b76d89d54a328294eaf2b9561
Certificate serial:       01A04129C06CF3FD820C51206F0E9B98C920
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0pvgv6Vswmt22J1UoygpTq8rlWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/0pvgv6Vswmt22J1UoygpTq8rlWE.mft
Manifest number:          9B
Signing time:             Thu 27 Aug 2026 03:00:49 +0000
Manifest this update:     Thu 27 Aug 2026 03:00:49 +0000
Manifest next update:     Fri 28 Aug 2026 03:00:49 +0000
Files and hashes:         1: 0pvgv6Vswmt22J1UoygpTq8rlWE.crl (hash: UdHpmrbYsTe24bmkOBpUIHXQa7mVnE8SXjX/YmaTRuc=)
                          2: 1-ALfXNVWrpMtEmbLlIOuoeX0afA.roa (hash: rd4jOBWNvS5fQ4jBAM8QD6wQ+VPz5/5NP5L0Zf9qrW4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/0pvgv6Vswmt22J1UoygpTq8rlWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/0pvgv6Vswmt22J1UoygpTq8rlWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0pvgv6Vswmt22J1UoygpTq8rlWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:41:29:c0:6c:f3:fd:82:0c:51:20:6f:0e:9b:98:c9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d29be0bfa56cc26b76d89d54a328294eaf2b9561
        Validity
            Not Before: Aug 27 03:00:49 2026 GMT
            Not After : Aug 28 03:00:49 2026 GMT
        Subject: CN=aae7970b7f8b2eb80c7ea334b05e4a111805af50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d7:6b:39:07:c8:ba:d6:49:1b:56:5c:ed:b5:
                    1f:72:d9:86:e6:3f:81:a2:2b:85:5b:e3:2e:f4:61:
                    f2:53:e3:c0:6d:c9:49:3a:7a:29:a6:59:83:05:41:
                    59:2f:b0:c2:47:22:7d:cf:a4:c3:ec:b6:75:91:f9:
                    a7:21:0a:45:86:0d:5e:c0:0d:28:b4:bf:49:03:49:
                    89:af:c3:ef:8a:ea:72:09:d3:f5:0b:fe:87:f1:6f:
                    b7:18:ed:f0:ae:c0:7f:2f:ab:db:89:2c:71:4e:7d:
                    b8:12:7b:e9:14:a1:5f:70:99:c2:57:2f:ce:3a:e8:
                    dd:c1:7d:19:61:83:2f:82:7d:3c:e7:14:a0:cd:33:
                    27:0c:e9:42:2e:34:cb:25:01:93:ac:78:c1:ef:6c:
                    7a:35:4b:a6:0f:6d:1e:6e:e8:1d:fc:bf:db:e4:bc:
                    77:1a:b6:c4:3b:0e:2e:ba:89:53:80:ec:fd:49:17:
                    84:6d:02:92:71:f7:64:b7:fc:92:e3:d0:2f:49:2f:
                    88:fc:25:44:80:55:ce:f3:9d:27:fd:a4:02:86:09:
                    4c:9d:83:d9:56:f6:8c:de:6d:4e:f6:59:d4:6d:2f:
                    31:b0:5c:b6:58:57:c3:d8:ff:5f:0a:00:6d:6d:5a:
                    bd:74:83:45:e1:69:4c:c3:b4:6f:09:07:24:a4:ee:
                    00:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E7:97:0B:7F:8B:2E:B8:0C:7E:A3:34:B0:5E:4A:11:18:05:AF:50
            X509v3 Authority Key Identifier:
                keyid:D2:9B:E0:BF:A5:6C:C2:6B:76:D8:9D:54:A3:28:29:4E:AF:2B:95:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0pvgv6Vswmt22J1UoygpTq8rlWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/0pvgv6Vswmt22J1UoygpTq8rlWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/0pvgv6Vswmt22J1UoygpTq8rlWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:a4:59:e3:5e:04:bf:11:a0:de:c6:ea:23:b2:c1:e5:1f:96:
         b7:c5:74:bd:d9:16:47:ee:1d:94:aa:b3:c2:c5:0e:d1:9a:53:
         20:a8:fa:a7:50:98:45:5f:c5:3b:28:ca:df:9b:9c:18:0a:35:
         b1:fc:3c:53:fa:45:4d:42:70:5b:8b:90:3f:53:55:3f:52:fc:
         5b:15:c3:7a:58:6f:ce:10:71:6e:33:8c:2c:05:9b:dd:5c:5f:
         c9:3f:a0:be:54:0f:f3:07:55:ca:88:04:b2:36:89:1a:72:35:
         3a:f0:21:a1:91:84:9a:3b:8b:88:95:2c:1e:f8:e9:77:db:bd:
         5c:a2:7a:0b:53:00:77:13:ad:11:6d:48:d6:a0:b1:82:bc:33:
         a2:0f:00:47:d6:67:ca:b1:83:1e:f9:39:65:b2:d1:6c:7b:b3:
         a3:cd:8e:6f:cc:c4:ba:b8:d2:e6:fa:5f:4a:ee:64:f4:72:b9:
         77:de:ba:94:45:d3:ae:51:a8:4c:a7:aa:5b:66:16:dc:b0:92:
         06:28:67:dc:6e:d8:ca:c1:fa:61:29:ce:1a:71:49:1f:17:6c:
         b9:db:b9:88:dc:76:30:42:cf:61:7b:29:c7:87:31:6c:37:0f:
         4d:47:fd:c5:58:85:fb:86:9b:a8:79:5c:b9:6a:4e:ee:84:73:
         9b:df:67:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:28:26 2026 by rpki-client