Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft
File:                     93n18CiJhaveCYJ-A9eHpSFJ5-w.mft (raw, json)
Hash identifier:          RPGCSWIlQ+c1onVAwvf3JSkrVr9gV2dWSf2hsQCIXjk=
Subject key identifier:   D5:5F:2B:FB:5F:3C:DB:FA:9B:C4:8F:32:C2:23:43:E8:39:23:FD:41
Authority key identifier: F7:79:F5:F0:28:89:85:AB:DE:09:82:7E:03:D7:87:A5:21:49:E7:EC
Certificate issuer:       /CN=f779f5f0288985abde09827e03d787a52149e7ec
Certificate serial:       01A0016EBC5063C84EF4111DDD4AF7C3A5DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft
Manifest number:          1A08
Signing time:             Fri 14 Aug 2026 18:00:29 +0000
Manifest this update:     Fri 14 Aug 2026 18:00:29 +0000
Manifest next update:     Sat 15 Aug 2026 18:00:29 +0000
Files and hashes:         1: 93n18CiJhaveCYJ-A9eHpSFJ5-w.crl (hash: cAuLccfM45WSCtEJQOOxsJLL3oY6iXdmbEiyJ5vm5y8=)
                          2: c06tR7wEve3BgRsZfi2xd-31eVA.roa (hash: V2mYqL9ivwyeeA9Wbx55/u2xDyhE5GyqU/pPOSpOihs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6e:bc:50:63:c8:4e:f4:11:1d:dd:4a:f7:c3:a5:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f779f5f0288985abde09827e03d787a52149e7ec
        Validity
            Not Before: Aug 14 18:00:29 2026 GMT
            Not After : Aug 15 18:00:29 2026 GMT
        Subject: CN=d55f2bfb5f3cdbfa9bc48f32c22343e83923fd41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f5:f9:95:55:be:c6:9c:5f:67:a1:9d:d5:b0:
                    f1:8c:df:a9:d9:92:e6:38:2e:8f:ed:9d:99:a5:40:
                    cf:1d:58:32:27:55:03:6b:65:23:68:89:e8:61:42:
                    e8:01:2a:53:37:3c:60:a3:47:80:3e:d6:dd:a8:7e:
                    50:b2:50:88:85:37:68:a1:75:06:92:fe:11:df:7c:
                    1c:64:44:d5:ed:72:ab:6a:da:98:85:05:31:55:7f:
                    6a:58:f5:c1:ba:b3:56:0f:f7:64:52:6a:ab:59:8b:
                    8a:31:98:2e:41:d7:e8:94:0d:4a:a3:4e:9a:90:0c:
                    d4:4a:82:bd:8a:b4:61:7b:43:d9:dc:f3:2c:61:06:
                    95:c7:6a:c1:90:ec:23:0f:89:7b:f2:b9:49:e7:9b:
                    c0:81:83:34:57:c2:15:a4:ad:75:c3:46:de:1f:b3:
                    3e:71:09:47:5b:58:e0:32:34:4d:4a:a2:41:be:a5:
                    29:6b:ea:7d:85:4e:ec:8e:49:a9:d9:28:80:a5:cc:
                    81:f7:e4:24:1c:a1:74:90:c3:6a:00:53:36:f7:e4:
                    a7:e2:c6:bc:de:01:8a:3c:ea:01:f0:4a:52:a1:7a:
                    33:b6:56:72:58:fc:f1:2e:18:86:2a:f1:3c:ac:57:
                    3b:22:6d:02:e8:70:8e:e4:a3:1b:4a:f8:5e:d0:bd:
                    a3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:5F:2B:FB:5F:3C:DB:FA:9B:C4:8F:32:C2:23:43:E8:39:23:FD:41
            X509v3 Authority Key Identifier:
                keyid:F7:79:F5:F0:28:89:85:AB:DE:09:82:7E:03:D7:87:A5:21:49:E7:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:dd:1c:99:8b:71:cf:2c:81:ce:ed:c0:77:e5:45:3f:94:3f:
         e4:77:4f:3c:6f:2b:28:90:18:6d:d1:82:39:09:6e:39:be:db:
         4f:b7:3e:b5:90:a6:50:3b:0e:a6:20:c7:48:6b:80:23:cd:41:
         0f:67:f9:40:b7:27:1b:eb:1c:a1:a3:a6:f9:95:0f:2e:20:3a:
         84:bb:90:bf:07:02:92:12:69:5c:9b:7a:71:df:f5:c9:a6:c6:
         de:af:a0:af:51:67:5d:44:e6:85:59:2e:28:9d:83:45:a7:3c:
         11:d6:9b:1f:60:6a:c2:e2:ac:fa:89:ad:45:d2:f4:40:a4:f3:
         25:03:51:d0:b9:75:ea:cf:23:8e:d3:dd:ec:ff:d9:5a:98:4a:
         89:6b:6b:6d:a6:1c:de:80:e9:47:62:ab:c7:06:33:f6:b7:96:
         00:fa:31:f9:89:58:b1:48:ec:45:a4:15:bd:ee:b1:76:2a:d1:
         a2:fe:b8:ca:ce:f1:27:66:4b:77:59:9d:1c:f8:51:81:ac:62:
         f3:82:de:f2:7a:79:33:af:64:d9:d3:81:96:2f:a4:ee:09:be:
         8a:b2:2e:7b:79:bc:6b:b0:18:39:61:35:ce:25:9b:a4:86:4a:
         f1:0e:79:3c:3f:8c:0b:d2:90:31:bf:7a:c6:4a:87:ff:f7:71:
         0f:4b:ea:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:34:10 2026 by rpki-client