Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
File:                     jeQsVg_CKLW7T0zwDt4t_ibGYws.mft (raw, json)
Hash identifier:          x3v2P+8eNIOkzKPyfEGcTCjWvZZ0JQECo4ol2CwIRc4=
Subject key identifier:   BB:58:F6:B0:10:A9:51:ED:28:1C:F3:9D:9C:36:F9:B4:76:5A:F7:26
Authority key identifier: 8D:E4:2C:56:0F:C2:28:B5:BB:4F:4C:F0:0E:DE:2D:FE:26:C6:63:0B
Certificate issuer:       /CN=8de42c560fc228b5bb4f4cf00ede2dfe26c6630b
Certificate serial:       01A039A71869CFF964D3FC9FBA80B4DD7007
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
Manifest number:          1B00
Signing time:             Tue 25 Aug 2026 16:00:46 +0000
Manifest this update:     Tue 25 Aug 2026 16:00:46 +0000
Manifest next update:     Wed 26 Aug 2026 16:00:46 +0000
Files and hashes:         1: I9k-Bwn2o5ImY-XynZEMk50NqhU.roa (hash: qsEOVmOoi+5WQpKE3YjQhPYA6eiI/e+XKlMxaVxAh/4=)
                          2: SEZ6fU5AhjTcT-v2AF7aa1Lk33I.roa (hash: nyDU2awTDtLEQn8KT2rzLnNR5fVOBeEGOrOK5V7gTs8=)
                          3: SbOtjeptLEex5D1CvSwE5L_Z-t4.roa (hash: VDleLqGnINoOvKQfnv32zeIvviZEKeUjS7CJbVIvH1g=)
                          4: YW3dbYMvMGpRlXCgljvs9WEA8II.roa (hash: 0QFB4Z6/oF+6LZXj3qGwOBveMLWnuMyB/KPTEoXelQI=)
                          5: jeQsVg_CKLW7T0zwDt4t_ibGYws.crl (hash: z/K6YeIyitP7JdY0O2aAPA6jCGmQEbcRAUbL//PGnhk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Aug 2026 14:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:39:a7:18:69:cf:f9:64:d3:fc:9f:ba:80:b4:dd:70:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8de42c560fc228b5bb4f4cf00ede2dfe26c6630b
        Validity
            Not Before: Aug 25 16:00:46 2026 GMT
            Not After : Aug 26 16:00:46 2026 GMT
        Subject: CN=bb58f6b010a951ed281cf39d9c36f9b4765af726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:41:37:61:fc:17:78:96:9f:15:92:a1:c3:f8:
                    1a:5c:76:0e:b2:e6:af:eb:54:71:08:a6:04:15:e5:
                    7f:5a:a0:aa:7f:17:24:93:d2:ca:ff:b2:a0:c3:72:
                    93:20:d0:bf:cc:f7:5a:fd:9f:ec:d6:8b:80:22:66:
                    ff:c7:5d:46:1d:56:b2:73:9e:d7:94:34:42:c5:bf:
                    aa:0b:e3:0c:1f:0b:7d:aa:a0:aa:6a:2b:aa:e2:60:
                    df:9d:5f:35:82:5b:24:3c:4f:8b:a9:ca:27:d7:57:
                    25:04:41:7b:79:bc:a7:75:b0:c3:b7:de:ad:75:2d:
                    7b:58:ff:f2:93:5f:5b:a8:df:eb:70:cc:2d:06:69:
                    75:6d:b3:e0:70:68:38:11:1a:f3:56:ad:2c:41:5d:
                    61:e3:fc:81:28:41:a7:a6:1b:2f:fe:6a:bd:0d:54:
                    a8:7d:c7:61:f8:ac:4f:de:db:a8:8e:c0:03:2f:34:
                    6d:77:af:ed:d3:d8:40:5d:65:ef:55:0e:96:ce:ba:
                    98:8f:00:f0:72:c1:74:b2:39:2c:77:c9:c5:99:21:
                    f2:36:a4:72:c1:19:b6:f6:e7:ed:c2:07:e0:e0:83:
                    f2:d2:e7:02:c9:1f:0d:fa:69:2a:09:c6:32:23:e1:
                    9a:4c:97:6d:22:63:6f:6e:c4:25:2f:7e:e9:e9:cd:
                    f4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:58:F6:B0:10:A9:51:ED:28:1C:F3:9D:9C:36:F9:B4:76:5A:F7:26
            X509v3 Authority Key Identifier:
                keyid:8D:E4:2C:56:0F:C2:28:B5:BB:4F:4C:F0:0E:DE:2D:FE:26:C6:63:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:1b:e8:0d:a9:e9:90:f4:69:0c:fd:46:96:bb:32:84:aa:6c:
         ef:71:2b:16:1c:1d:9b:4e:d7:c2:1a:17:9e:56:07:2e:eb:30:
         58:48:9e:30:d0:31:4a:0c:34:68:26:54:26:71:c1:c8:67:75:
         d2:4e:a6:75:d0:06:17:5d:4a:fd:92:57:93:b3:fa:9f:58:50:
         ad:78:14:9d:4d:a0:11:f5:e7:18:76:9b:9b:d2:fd:47:bc:21:
         fe:84:a8:ae:3d:5b:f5:7b:cc:57:ce:1a:06:79:ba:2b:2b:7d:
         5c:b1:18:9c:e1:4a:b5:63:a4:b2:3b:78:1b:f7:6b:32:92:bb:
         1c:39:ee:1e:13:fc:04:2e:d7:f8:14:79:b4:4b:ce:f4:d9:27:
         90:a3:4b:cd:f7:05:ec:2a:31:b4:5b:26:90:92:d2:f0:e1:06:
         d2:e9:9a:a3:6d:fd:b5:f1:d1:fd:90:3a:d6:e5:9e:97:1a:a5:
         9a:05:1d:6b:21:ee:62:eb:59:88:ca:0e:26:be:7e:ac:6b:9f:
         12:8f:1b:d0:4e:2d:86:75:df:b1:21:21:8f:f2:ee:43:4c:76:
         e9:e2:7d:4d:9f:33:fc:6b:de:a1:8d:b5:ca:23:32:40:52:31:
         02:2d:0c:27:a9:66:39:7e:a2:51:40:18:ae:c2:91:75:d7:cc:
         bd:cb:57:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:41:50 2026 by rpki-client