Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft
File:                     j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft (raw, json)
Hash identifier:          +ttGWowN9hMhKESnhmk71P6uocN5At/jQkcwbQnamxA=
Subject key identifier:   40:80:09:EC:DE:59:4B:A1:A2:D4:05:29:79:C2:0E:D4:26:89:67:76
Authority key identifier: 8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17
Certificate issuer:       /CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
Certificate serial:       01A020FA3D40AC78B7E7D765C329E956F21F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft
Manifest number:          1246
Signing time:             Thu 20 Aug 2026 21:01:05 +0000
Manifest this update:     Thu 20 Aug 2026 21:01:05 +0000
Manifest next update:     Fri 21 Aug 2026 21:01:05 +0000
Files and hashes:         1: DShqO0Ue11GUy5d8RFMckaCauhk.roa (hash: PD8/R6zXgkXFWzaUz+2PUMdYJX3ZY2n+651dnXziaN8=)
                          2: HhUP9V6D6eMcyfe9trO5RFkUgrk.roa (hash: dLLQt7TFTOMK0HJ6sdmoFfSXq6h2xikykKO4e94KISk=)
                          3: KvYzATzwIL9g-iqhBKjN6pRQns4.roa (hash: Bq4sJCKB4JPFIy91hhv99d4z3fVb9NtKRyY/klM1Ank=)
                          4: j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl (hash: PNurp64GBf5CrQTCLf7Qh+7+t7f2gRo3AvbfwaxnZ0g=)
                          5: vKntuT3xVwdgWmZ3-NPNbmwYIuo.roa (hash: i9XFeCZuakWWqMNbjgXUo7/eL4g2IBgqmIa52Z/2v4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 13:32:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:20:fa:3d:40:ac:78:b7:e7:d7:65:c3:29:e9:56:f2:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
        Validity
            Not Before: Aug 20 21:01:05 2026 GMT
            Not After : Aug 21 21:01:05 2026 GMT
        Subject: CN=408009ecde594ba1a2d4052979c20ed426896776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2e:d4:2f:5f:5e:c1:cd:66:1b:b0:ec:37:b5:
                    61:11:55:e2:30:98:a5:21:49:5d:16:4f:7c:83:03:
                    f7:d6:f0:10:99:55:e2:b1:c0:77:a1:fb:bd:71:82:
                    42:90:8b:72:00:a2:23:48:cf:00:49:b8:55:4a:82:
                    eb:33:5f:68:38:ec:04:d9:0d:5f:4a:ab:59:43:47:
                    f8:7d:31:cd:e9:06:62:b4:0e:8d:72:ce:e7:2c:38:
                    94:5e:a2:86:e3:f5:18:47:eb:e6:1f:65:ce:10:e4:
                    37:5a:ee:91:78:31:bc:87:2b:1e:c1:2d:8a:7e:a4:
                    53:15:49:95:25:bb:fe:0a:11:0e:47:16:94:94:cf:
                    c5:ff:ce:31:94:46:7e:d8:63:ab:a5:80:eb:94:a2:
                    0e:ac:9b:8f:58:c7:cf:50:89:8f:15:44:a5:68:c3:
                    98:ef:96:01:6f:44:57:4b:81:62:04:82:58:0b:24:
                    16:46:89:68:90:b9:cb:ea:0c:7e:f4:1b:d0:34:ae:
                    37:c1:67:d3:53:75:8e:c6:be:dd:1c:2d:fd:6a:65:
                    36:dc:6f:9c:00:7d:e8:98:6f:49:b9:0d:7d:9c:ef:
                    f0:86:ff:02:b7:6d:40:e4:2a:3a:e3:5f:b0:3c:64:
                    cf:c5:06:00:ed:73:ec:91:f9:cb:b3:07:50:75:1e:
                    25:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:80:09:EC:DE:59:4B:A1:A2:D4:05:29:79:C2:0E:D4:26:89:67:76
            X509v3 Authority Key Identifier:
                keyid:8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:96:cf:7b:6e:6a:3f:6b:8e:4e:31:89:c9:22:29:14:9c:64:
         48:56:e5:5f:19:3a:38:07:18:ca:43:e4:20:1b:85:62:68:6f:
         cf:b3:c0:a0:9f:02:9a:0a:09:2a:90:f0:8d:4b:ca:46:ce:dd:
         bf:37:e0:c0:cd:78:90:82:e2:e1:74:be:49:a8:a0:93:f7:90:
         d9:bb:23:73:ee:27:4c:a0:bf:a8:6b:ab:f3:db:b6:b2:af:d1:
         f0:8f:dc:e3:cb:4b:33:bc:43:5d:a3:3f:28:5d:46:37:52:f3:
         a0:7a:ad:ac:d6:22:b4:d3:43:e9:7c:ed:86:a5:d6:20:99:9c:
         9b:4d:d6:41:6e:06:0b:4b:67:cd:d5:bb:54:00:61:5c:74:b8:
         98:02:42:39:50:28:9a:ca:2a:1c:1c:61:53:34:b3:c7:0f:84:
         bc:ea:95:0b:89:67:2b:b0:19:57:66:fb:07:17:5b:b9:f7:16:
         c6:bd:61:02:7f:3b:b9:a7:cf:11:19:c7:44:eb:f7:5a:78:79:
         5c:83:65:bb:64:53:60:13:c3:b5:0c:6c:01:43:ca:00:1a:e6:
         0a:75:66:af:f4:f8:3c:4b:a0:ec:6a:3d:1d:e1:03:cd:21:9d:
         55:22:0f:ae:41:d1:a4:7a:94:4b:0c:c1:08:b5:ee:6e:e5:41:
         aa:1b:fb:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:54:36 2026 by rpki-client