Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
File:                     339euIF_Lal_ZlUHaDtcRadNDKA.mft (raw, json)
Hash identifier:          PeTTxz2FWzevUFjdny+7GUtVH5M3xqzUvBwa7ZMFQ30=
Subject key identifier:   A3:2C:52:28:DA:C6:71:46:51:79:2C:E2:52:0B:86:41:BD:41:B8:6D
Authority key identifier: DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0
Certificate issuer:       /CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0
Certificate serial:       01A0021416E978596552C4C8C5C955E717DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
Manifest number:          16FE
Signing time:             Fri 14 Aug 2026 21:01:05 +0000
Manifest this update:     Fri 14 Aug 2026 21:01:05 +0000
Manifest next update:     Sat 15 Aug 2026 21:01:05 +0000
Files and hashes:         1: 339euIF_Lal_ZlUHaDtcRadNDKA.crl (hash: mk5pDeuydljav+g3f7v6RbIsJBxcXllWLvr6y2HBOGM=)
                          2: ADb-8cFQ-NqBiNjB-9VRdEXxXGo.roa (hash: Z0tlGeHI28w/uWa6BzOx7bS4D0r8kubbhdFc5SfUT7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:14:16:e9:78:59:65:52:c4:c8:c5:c9:55:e7:17:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0
        Validity
            Not Before: Aug 14 21:01:05 2026 GMT
            Not After : Aug 15 21:01:05 2026 GMT
        Subject: CN=a32c5228dac6714651792ce2520b8641bd41b86d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a9:ad:aa:a3:40:bd:8d:1f:62:ca:3b:83:b5:
                    99:71:40:6e:55:58:67:26:97:03:eb:2c:00:d3:46:
                    87:40:2b:d4:53:a3:a7:25:73:a7:a0:65:3f:d6:d9:
                    1f:ee:27:eb:76:c2:0e:bf:93:90:f2:68:a4:54:43:
                    f2:d4:07:12:ee:04:59:ca:a4:eb:17:c5:7f:aa:55:
                    7b:26:27:36:0e:10:5a:d8:36:be:c3:1e:a5:78:a5:
                    4c:35:66:b9:92:3f:3e:8b:18:7a:b1:45:fd:cd:e4:
                    ea:57:f3:cc:8b:b1:41:bc:bc:1a:a4:a3:e2:b5:9e:
                    22:18:1c:7d:a3:1d:99:2a:80:a9:0e:e1:e7:d7:f2:
                    1f:11:30:18:a9:d4:62:ad:b9:1e:40:bf:64:a3:8f:
                    30:6d:3f:23:54:dd:5c:25:6e:87:bd:bd:74:95:0c:
                    68:36:a5:09:2d:6c:9d:30:7a:d8:e9:5c:22:84:0e:
                    69:c3:cd:51:93:08:b7:ae:72:3d:f9:ac:6a:a8:0d:
                    ac:7f:f2:f9:d6:95:ba:9e:05:40:77:93:97:ec:0f:
                    62:e0:d0:36:fa:ef:82:e8:53:14:e2:5c:c5:d2:08:
                    f3:39:e3:c3:c2:4f:aa:49:ef:40:e5:fa:ee:18:bd:
                    2e:33:6b:20:b3:37:d2:3f:a0:25:0c:1a:f6:54:bb:
                    07:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:2C:52:28:DA:C6:71:46:51:79:2C:E2:52:0B:86:41:BD:41:B8:6D
            X509v3 Authority Key Identifier:
                keyid:DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:3b:0c:8d:3d:0a:0b:5d:45:31:45:7d:78:13:ac:ff:2f:d6:
         17:69:13:d0:92:d0:20:b9:d1:91:d7:cf:17:8e:39:dc:e4:fb:
         90:33:9a:04:0e:20:57:13:b4:b6:61:b2:04:3a:e8:52:86:63:
         1b:9a:3a:25:74:b1:db:c5:a6:fa:f4:c6:8d:25:ef:b1:59:ba:
         bf:82:ba:83:17:55:26:69:ea:44:ab:7b:99:a8:e7:f0:52:e1:
         ff:cb:4a:bf:b7:d7:2d:70:2e:27:16:c1:c2:71:23:bc:7e:af:
         6e:56:9b:ff:43:4b:73:47:8e:51:a5:4a:cc:5e:b5:96:13:f3:
         3c:91:e9:62:5f:c8:0f:09:5f:6d:2b:cf:4b:11:a5:f7:aa:b8:
         c0:ec:42:1d:37:a1:a7:69:85:6a:d5:e9:1c:ec:cd:0c:da:59:
         ce:45:23:c6:04:19:dc:07:14:96:28:80:28:ac:86:fd:de:a9:
         0e:e9:c9:3f:7e:6a:a3:9f:b8:34:eb:8e:af:ec:07:77:b2:25:
         e4:36:fa:f6:e9:6d:b0:9a:8a:0f:12:f8:65:f9:24:25:50:56:
         11:e3:bb:f1:68:94:fd:5e:3d:65:f0:a5:e5:a6:79:02:78:75:
         1d:ab:f3:3b:2b:39:88:39:2a:7c:e7:34:fa:c1:9e:d1:45:2b:
         b8:46:3c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:45 2026 by rpki-client