Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
File:                     3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft (raw, json)
Hash identifier:          8EUETKrhWTGQ1c0E/wkwWb5Zh1zZ2Y/jDE1iMB2zekc=
Subject key identifier:   A6:6A:26:79:2B:35:A9:AD:3C:8C:56:9F:AE:59:67:0A:A5:FA:30:86
Authority key identifier: DE:A8:5F:21:66:8A:98:D7:E8:1A:74:18:3F:0C:CE:51:30:86:60:1B
Certificate issuer:       /CN=dea85f21668a98d7e81a74183f0cce513086601b
Certificate serial:       019FFE374CCE21D3C552DE7AF7CD56A66288
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
Manifest number:          0992
Signing time:             Fri 14 Aug 2026 03:01:04 +0000
Manifest this update:     Fri 14 Aug 2026 03:01:04 +0000
Manifest next update:     Sat 15 Aug 2026 03:01:04 +0000
Files and hashes:         1: 3qhfIWaKmNfoGnQYPwzOUTCGYBs.crl (hash: UK/aYTBvwrzEAu5zaRrXRJp/O4cDedZxJO/aErnUAGY=)
                          2: hBUefaIMV4VxrEK-fm1hTMzaWD8.roa (hash: ULTyVqCoLmJTp6EzOZiZ2uvQqGHDruUXv80DgFEK1ug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 00:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fe:37:4c:ce:21:d3:c5:52:de:7a:f7:cd:56:a6:62:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dea85f21668a98d7e81a74183f0cce513086601b
        Validity
            Not Before: Aug 14 03:01:04 2026 GMT
            Not After : Aug 15 03:01:04 2026 GMT
        Subject: CN=a66a26792b35a9ad3c8c569fae59670aa5fa3086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:95:8c:96:0b:57:0f:35:24:f4:62:7d:96:97:
                    18:11:d9:d0:07:a2:75:db:c7:89:45:05:c3:28:d0:
                    88:9e:a0:ae:c8:db:db:93:88:34:7e:f9:ef:b8:32:
                    47:81:95:c0:6a:32:57:bc:56:f3:a9:fb:09:6a:b6:
                    3e:e6:2a:ce:3a:61:40:0e:ed:d7:b8:f8:dc:e0:87:
                    ec:21:c6:60:ea:d2:9b:7c:b6:c6:9c:7e:6f:31:3d:
                    eb:c3:90:5b:d2:e5:93:f7:05:ac:f9:6d:67:4f:71:
                    c5:f4:c5:f1:21:f1:a3:47:19:1b:45:c5:15:d4:df:
                    e0:1a:6d:31:84:5d:52:4c:15:3a:5a:0a:99:d6:a9:
                    93:fb:87:40:e7:00:4e:28:40:15:a5:3c:66:b6:b6:
                    76:9e:f5:e9:ae:c6:2e:ec:bc:4f:46:89:7a:20:c0:
                    bf:0f:8a:c9:dc:3b:6e:f5:f6:65:f0:56:6b:4a:c1:
                    2a:30:59:af:15:3a:35:65:c8:0c:dd:4f:cf:99:eb:
                    81:41:95:1a:2d:78:d7:12:bc:46:a4:25:16:7c:0e:
                    44:e4:5b:11:81:7c:05:71:e4:ed:4b:ae:9b:6d:69:
                    04:f0:a3:de:e4:3d:c7:95:1e:11:63:79:9a:13:a9:
                    2a:ec:e0:30:f4:03:b1:39:4f:6b:79:72:2c:7d:0f:
                    e2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6A:26:79:2B:35:A9:AD:3C:8C:56:9F:AE:59:67:0A:A5:FA:30:86
            X509v3 Authority Key Identifier:
                keyid:DE:A8:5F:21:66:8A:98:D7:E8:1A:74:18:3F:0C:CE:51:30:86:60:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:fb:d6:54:cb:9f:13:9e:7a:2a:aa:1e:95:bc:6f:d3:63:fd:
         97:ca:2a:8e:47:43:d4:43:ba:1f:d5:3e:51:05:60:a1:a7:8e:
         53:db:66:1e:8d:fb:ed:2e:96:3c:86:1d:7b:47:ec:4a:51:3d:
         00:60:7e:9a:85:01:a3:50:54:1d:d2:60:83:aa:0b:7f:19:96:
         55:d0:0b:1e:b2:b3:c0:b3:8a:32:64:57:1a:38:0c:c9:3f:b1:
         fe:29:05:62:78:5d:56:25:4b:0a:97:81:31:e3:9e:e8:28:bd:
         14:ab:ad:30:66:eb:88:26:20:ea:7a:e6:95:d4:6c:7d:30:f5:
         d2:ea:67:a7:3d:fa:41:2a:11:f4:4a:5a:e0:09:2f:c2:ac:ff:
         bc:0f:b1:37:ae:87:a3:36:aa:a9:84:e3:3c:fe:4b:cd:7b:02:
         93:a7:6d:b6:0c:d3:eb:d2:1a:88:f6:d9:b1:5a:30:e8:4a:d1:
         4b:f5:37:4f:93:06:1f:35:02:98:46:69:c5:4b:01:a8:9c:96:
         9a:cd:27:80:0a:98:3c:c6:bc:e8:37:e3:2b:ff:17:6f:21:54:
         70:33:7e:02:f3:d0:39:c6:d8:41:ac:d6:73:ea:df:24:00:b7:
         fc:47:69:b8:ab:41:4f:56:db:5f:95:d2:f8:ad:fc:c9:68:28:
         7e:b6:e2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 06:11:20 2026 by rpki-client