Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
File:                     A83mT0Foo_OZt3SU2Urqdyksm88.mft (raw, json)
Hash identifier:          u17l252UdiO1kCIAwO84P4eSMRNaazXkOwQ3CD7JSfs=
Subject key identifier:   A1:5A:5E:00:68:42:A9:F2:93:ED:06:C2:81:DA:7E:E2:A7:E8:29:8B
Authority key identifier: 03:CD:E6:4F:41:68:A3:F3:99:B7:74:94:D9:4A:EA:77:29:2C:9B:CF
Certificate issuer:       /CN=03cde64f4168a3f399b77494d94aea77292c9bcf
Certificate serial:       01A00213BB902385E2EBCF5DF916971850FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
Manifest number:          1567
Signing time:             Fri 14 Aug 2026 21:00:42 +0000
Manifest this update:     Fri 14 Aug 2026 21:00:42 +0000
Manifest next update:     Sat 15 Aug 2026 21:00:42 +0000
Files and hashes:         1: A83mT0Foo_OZt3SU2Urqdyksm88.crl (hash: PD5JBOFLPiLekb1egyMEtXSVAVTUvBvIEpTfpyZyLsI=)
                          2: VqbW8hWa6U_90YgDAsOUDVLHuCw.roa (hash: quQX28Hjb85Vem897JezSZ+lGMfYDszka76M0Xq2SLo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:13:bb:90:23:85:e2:eb:cf:5d:f9:16:97:18:50:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03cde64f4168a3f399b77494d94aea77292c9bcf
        Validity
            Not Before: Aug 14 21:00:42 2026 GMT
            Not After : Aug 15 21:00:42 2026 GMT
        Subject: CN=a15a5e006842a9f293ed06c281da7ee2a7e8298b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b3:cf:12:2a:57:5c:15:ab:c0:e7:23:b6:06:
                    6c:e2:36:43:bc:d3:4c:d4:cf:7f:e3:5b:90:d9:7c:
                    71:93:f0:dd:9e:68:c1:96:ba:5f:6e:ae:f7:fa:77:
                    1f:f4:b5:e6:97:25:60:72:69:50:bd:ac:b4:b2:6a:
                    70:4d:a1:90:d7:ac:f0:c8:ad:5e:1e:a0:06:b8:07:
                    bd:b9:78:ff:0e:b4:65:a4:b9:c3:48:d1:33:60:8d:
                    03:e5:59:5f:40:06:34:42:3f:d0:2d:47:46:ec:15:
                    b7:33:71:eb:3a:10:00:9e:43:ab:e5:14:51:81:39:
                    d2:0d:7c:89:49:27:00:c7:a2:a1:59:45:88:b2:ab:
                    e9:32:d7:29:35:e5:13:07:b5:4e:f6:6b:5d:f4:70:
                    0e:d2:d6:59:ee:2d:cc:63:f3:fd:0c:bb:47:11:ba:
                    30:6d:2b:71:7c:38:94:40:2a:92:0b:56:48:b8:63:
                    5b:eb:82:07:df:d9:52:f2:fc:09:5a:52:9d:fd:e6:
                    d5:e3:9c:2b:ce:cc:7c:97:e8:bf:ba:58:6a:c1:36:
                    69:6f:1a:ca:5a:55:44:4e:15:28:34:df:a9:82:14:
                    90:2e:77:0a:38:b2:e6:d3:32:73:2c:61:ba:c1:54:
                    ec:30:0a:39:28:6b:ba:07:45:ff:8a:1c:73:9f:d6:
                    4f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:5A:5E:00:68:42:A9:F2:93:ED:06:C2:81:DA:7E:E2:A7:E8:29:8B
            X509v3 Authority Key Identifier:
                keyid:03:CD:E6:4F:41:68:A3:F3:99:B7:74:94:D9:4A:EA:77:29:2C:9B:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:9f:11:23:5d:5f:fa:91:d5:9b:b7:9f:d5:8f:b2:d7:10:91:
         61:10:fc:70:e8:84:ce:7e:af:c0:74:aa:4d:e1:b9:1b:2b:cd:
         a8:da:2e:aa:75:ec:45:f4:b5:f8:33:0b:be:7a:5a:48:0b:d1:
         e3:39:15:9e:bc:67:a8:69:72:b1:74:75:b2:5c:3a:6e:72:1a:
         15:23:2a:c0:52:b6:11:2f:8b:3f:6a:1c:ca:09:d2:46:2e:bd:
         5a:83:29:98:90:75:05:81:b6:86:ff:cc:66:ee:99:2f:16:41:
         7c:66:34:f9:32:89:6c:e4:5f:1a:3b:5d:c2:0f:ea:22:57:91:
         27:40:fc:fc:71:a2:d2:2f:18:81:19:f0:80:7f:a1:8b:f0:e3:
         39:f2:3d:1c:11:9e:e9:cd:2c:81:37:db:30:f0:66:6b:c4:13:
         92:7b:75:f8:4c:75:54:b2:1b:b2:85:52:75:72:37:cb:99:5e:
         9f:ad:f5:49:78:1c:2e:f9:6d:2e:cf:ba:cc:86:22:a1:1c:2b:
         96:1c:0b:d2:02:20:eb:b5:8c:b9:e3:80:81:ff:df:d5:2e:a4:
         ff:18:da:e6:35:15:f6:fe:97:87:3a:b8:a6:82:58:91:3b:a9:
         fa:ab:a7:87:b0:63:3b:b9:b2:bc:a8:a8:18:f3:30:1a:4d:b7:
         b6:01:ad:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:12:26 2026 by rpki-client