Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
File:                     aYLwUTKpmJUH6_bumJUYdTuizbU.mft (raw, json)
Hash identifier:          BHTj/7XqTzj2/KHq2QLZ4s/+pGz2BDqaHZ+xfQMdH4Q=
Subject key identifier:   5B:61:79:CD:8E:21:28:23:2B:E5:D5:E6:11:00:4A:25:9F:F0:F7:07
Authority key identifier: 69:82:F0:51:32:A9:98:95:07:EB:F6:EE:98:95:18:75:3B:A2:CD:B5
Certificate issuer:       /CN=6982f05132a9989507ebf6ee989518753ba2cdb5
Certificate serial:       01A00470AAFDDDCEAD8FBC5E7EA2BAAFB739
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
Manifest number:          0EB4
Signing time:             Sat 15 Aug 2026 08:01:27 +0000
Manifest this update:     Sat 15 Aug 2026 08:01:27 +0000
Manifest next update:     Sun 16 Aug 2026 08:01:27 +0000
Files and hashes:         1: SDv1pmvtKKy8j5zdxmiuQfAHvKA.roa (hash: la1FbIJeldqJDtutGbiRvWT587OJLuf+NXuNKZUoghY=)
                          2: aYLwUTKpmJUH6_bumJUYdTuizbU.crl (hash: lXKhKyFWuaw0eZr7fA4VBIauwUemrjhgG/DrgBK2lZ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:04:70:aa:fd:dd:ce:ad:8f:bc:5e:7e:a2:ba:af:b7:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6982f05132a9989507ebf6ee989518753ba2cdb5
        Validity
            Not Before: Aug 15 08:01:27 2026 GMT
            Not After : Aug 16 08:01:27 2026 GMT
        Subject: CN=5b6179cd8e2128232be5d5e611004a259ff0f707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:47:96:0c:d5:3e:90:55:94:76:34:8f:a7:26:
                    5f:5f:0c:34:9b:d2:a1:92:37:8b:1d:cd:1f:63:c7:
                    1d:28:68:1e:e0:a8:b8:6d:5b:5a:53:30:32:47:11:
                    2b:82:61:b9:ba:d3:90:00:52:23:14:72:04:98:e9:
                    9c:72:3f:47:e9:5d:de:fe:c1:56:20:25:8b:20:ba:
                    f8:f5:90:58:1a:9c:2a:1b:8e:7e:36:f3:1c:05:f2:
                    ac:0f:92:5e:f4:22:d0:3f:7b:bd:f8:79:05:f7:f7:
                    86:1d:fc:0a:87:cc:b7:3c:0d:1b:db:f6:99:8f:80:
                    18:db:7e:56:8c:8e:6b:f2:0c:b2:d0:dd:8c:76:20:
                    6b:d1:2f:f9:e0:de:fd:b9:85:d6:61:24:13:b6:ea:
                    23:8a:a8:5c:d2:99:0e:47:95:58:4f:a7:a5:b7:0f:
                    2b:9d:7a:03:a0:9d:49:c9:c4:f7:b0:f5:93:3c:ce:
                    bf:4a:27:60:04:c2:7b:43:67:98:e0:e9:56:d2:70:
                    6a:4c:aa:44:d3:a0:99:cc:b4:7d:70:a9:9b:74:0c:
                    18:7d:89:2d:b6:b9:41:e0:6b:bc:c9:98:41:7d:c8:
                    e2:bd:64:60:a6:cc:f8:5d:13:0d:de:4e:d9:f6:44:
                    74:c8:76:f3:c0:49:e9:91:e2:85:52:a7:d9:22:7f:
                    7d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:61:79:CD:8E:21:28:23:2B:E5:D5:E6:11:00:4A:25:9F:F0:F7:07
            X509v3 Authority Key Identifier:
                keyid:69:82:F0:51:32:A9:98:95:07:EB:F6:EE:98:95:18:75:3B:A2:CD:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:95:7a:39:b0:6a:ae:92:71:be:5c:a7:ce:6d:61:cb:2d:df:
         df:fb:dc:41:73:e4:a2:4c:91:bb:8f:03:3e:f0:42:0e:56:c0:
         8e:fd:3f:28:20:a5:40:ad:76:ee:b3:bd:e1:de:84:51:68:b1:
         b9:22:b7:42:1e:25:c0:ce:28:7e:d7:8d:1c:31:00:97:fa:3a:
         eb:64:d6:7d:1a:d7:9f:1a:8f:4c:f5:6c:d5:e2:84:7f:1a:84:
         ea:9d:37:e7:a0:76:f5:a4:df:bf:93:78:b1:97:f1:98:a2:78:
         db:a6:7a:dd:4b:69:5e:33:b5:e3:75:fd:fc:d3:4d:54:22:16:
         69:19:90:d2:2c:93:df:92:0c:5d:7b:4f:b6:57:f4:9e:66:47:
         51:cc:9e:b3:fa:c0:7b:a3:d9:c5:6c:ad:93:bf:99:c0:25:fc:
         02:eb:98:f6:a3:39:c6:01:75:af:fa:2a:0a:18:e8:ea:78:25:
         fb:1e:f2:97:39:80:06:58:2a:a1:45:f6:34:3d:2b:03:cd:e7:
         a1:b5:68:1f:11:5f:cd:6b:7b:ab:6d:82:f8:ff:ba:5a:b9:79:
         68:46:82:0d:78:21:0d:d1:66:56:4f:e8:26:cf:60:a3:48:10:
         fb:6e:97:9f:2c:b3:ca:19:13:86:2c:b0:17:ed:76:f3:f2:9f:
         c7:5c:da:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 10:56:04 2026 by rpki-client