Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
File:                     brSehwcSq7ZLGajs62HlGo4MF2g.mft (raw, json)
Hash identifier:          wVIR1xt+BPnYiEz3oHy70hWI4UPo/Qn+2ZZ6NOtFGPM=
Subject key identifier:   81:82:74:75:B4:B9:80:38:BC:FE:0A:5A:F3:8E:DB:3E:E9:B0:52:34
Authority key identifier: 6E:B4:9E:87:07:12:AB:B6:4B:19:A8:EC:EB:61:E5:1A:8E:0C:17:68
Certificate issuer:       /CN=6eb49e870712abb64b19a8eceb61e51a8e0c1768
Certificate serial:       01A002B9629C4053459716E8F38F830F2059
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
Manifest number:          0FB2
Signing time:             Sat 15 Aug 2026 00:01:38 +0000
Manifest this update:     Sat 15 Aug 2026 00:01:38 +0000
Manifest next update:     Sun 16 Aug 2026 00:01:38 +0000
Files and hashes:         1: brSehwcSq7ZLGajs62HlGo4MF2g.crl (hash: G3pSUh7eIKUUS94mgZTUHcKmTa2aVGog48stDnbyhHo=)
                          2: fTOgoYe-1RQHUjMr-5lceDA6Gh4.roa (hash: OQrhj5Ohl5/XRuzhCMj8biXrUCvWFxmJGppdP4KOC0k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 00:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:b9:62:9c:40:53:45:97:16:e8:f3:8f:83:0f:20:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb49e870712abb64b19a8eceb61e51a8e0c1768
        Validity
            Not Before: Aug 15 00:01:38 2026 GMT
            Not After : Aug 16 00:01:38 2026 GMT
        Subject: CN=81827475b4b98038bcfe0a5af38edb3ee9b05234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1e:15:ac:1a:58:c0:76:ef:10:f8:23:bf:79:
                    ec:f1:27:47:f4:d6:ec:e8:f8:9c:cc:4e:fd:53:e6:
                    fb:ba:57:4d:b0:d9:30:95:01:15:9c:47:cd:3f:5b:
                    47:3b:f4:08:fb:66:82:8a:b6:d8:f6:61:b3:5a:5e:
                    55:12:22:7e:d2:de:a8:b3:45:73:34:90:14:e5:f1:
                    91:65:22:a3:b4:0e:2f:f2:96:2a:3d:8a:a2:2e:72:
                    42:5c:03:7c:b0:47:6a:90:a1:af:77:90:e7:49:b3:
                    ec:c3:60:e0:ac:d4:c8:42:7d:b1:4f:9f:3f:14:55:
                    c8:6f:87:d5:3c:e6:c8:c4:fd:7e:ce:9e:8d:6a:f8:
                    ca:3b:a3:5a:30:a3:c7:c3:4d:9f:13:e9:a3:2d:8c:
                    b0:4c:54:e0:23:09:73:46:b7:fd:0d:55:e6:48:15:
                    a2:d5:9d:fb:79:65:f6:c1:5a:8e:26:2f:ef:94:35:
                    c3:8b:0e:eb:f2:ea:cd:dd:c1:2f:23:98:c1:b6:96:
                    7c:39:70:fb:a6:74:10:6d:2e:83:27:ce:e5:be:15:
                    99:2b:b3:2c:01:4b:59:db:b6:6e:1b:86:4e:42:36:
                    c3:10:49:fe:26:07:d2:3e:0c:f3:92:ed:1d:68:f2:
                    51:7b:63:46:b5:f4:d1:72:3b:ad:8b:c5:68:19:55:
                    c3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:82:74:75:B4:B9:80:38:BC:FE:0A:5A:F3:8E:DB:3E:E9:B0:52:34
            X509v3 Authority Key Identifier:
                keyid:6E:B4:9E:87:07:12:AB:B6:4B:19:A8:EC:EB:61:E5:1A:8E:0C:17:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:cc:92:51:6d:83:6b:fd:a7:51:56:1e:67:67:68:94:aa:da:
         99:fc:47:62:50:28:1d:33:12:47:9b:ac:b0:71:64:15:6f:6d:
         47:ff:4c:30:3b:07:d8:89:aa:f0:a9:52:6c:94:bd:c5:4d:2e:
         13:41:f6:bc:9f:b7:bb:33:6c:56:49:ae:72:8d:78:31:6f:70:
         76:e5:d4:b3:57:3c:33:bb:77:43:72:c2:3b:22:63:51:42:1a:
         10:85:4d:4c:5b:93:1f:cf:29:4a:38:03:ad:7c:24:d9:a6:6a:
         99:d5:04:16:7f:4b:2d:eb:a6:00:cd:fe:d9:92:77:c4:ae:d1:
         d0:fa:53:3d:92:87:85:72:1c:3c:cb:ee:2b:32:1a:5a:7a:5a:
         c7:05:51:53:99:4e:76:c4:b1:90:e4:14:f8:00:62:0d:ab:87:
         46:c0:6e:93:7c:99:64:e5:db:34:d4:14:d9:b0:bd:68:58:bb:
         c0:da:2f:58:1c:47:a0:9b:f4:9f:59:e3:e2:96:54:5a:b3:88:
         4b:d1:7a:93:81:af:b6:90:07:42:e7:be:e7:a6:42:72:c2:a4:
         a9:e9:09:6f:f2:73:c3:bc:f6:c4:d9:4c:92:c8:f7:cc:97:7b:
         f2:76:63:b4:f1:77:07:e7:53:5b:3b:3c:cb:63:4f:9a:dd:6e:
         cf:20:ea:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:13:51 2026 by rpki-client