Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
File:                     sDmrgpj6NjroN-UwAolpzFy_EE4.mft (raw, json)
Hash identifier:          9B/y7lwFcu40kS58rXF3DyDBBIM41Rs1KFMlpn9h7j0=
Subject key identifier:   AB:BF:2B:F8:E1:B0:F2:77:FD:8E:7A:FE:A7:6E:F5:7B:16:23:8D:A5
Authority key identifier: B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
Certificate issuer:       /CN=b039ab8298fa363ae837e530028969cc5cbf104e
Certificate serial:       01A03C710AB2526B23B27918F6B1E3910FCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
Manifest number:          0881
Signing time:             Wed 26 Aug 2026 05:00:36 +0000
Manifest this update:     Wed 26 Aug 2026 05:00:36 +0000
Manifest next update:     Thu 27 Aug 2026 05:00:36 +0000
Files and hashes:         1: pIFip_1IBLSOvbShbCzJqPR3ISA.asa (hash: km1Ndz8NVjDLwyeoYrd5hZq5MPQnd5mMrU9kZpY/Ge0=)
                          2: sDmrgpj6NjroN-UwAolpzFy_EE4.crl (hash: 5IQuts5ESxu6VlTIiI6zUqsE4HtfRM9LuDdQEQz0ppQ=)
                          3: zfEmQThXQQemumuyrh4dc64Ljpo.roa (hash: l1StJqEcmI3IdHWyUspZlBSORRI1cMJESHxgjnRlaoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3c:71:0a:b2:52:6b:23:b2:79:18:f6:b1:e3:91:0f:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b039ab8298fa363ae837e530028969cc5cbf104e
        Validity
            Not Before: Aug 26 05:00:36 2026 GMT
            Not After : Aug 27 05:00:36 2026 GMT
        Subject: CN=abbf2bf8e1b0f277fd8e7afea76ef57b16238da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c2:26:81:6d:b0:a5:6d:db:84:3c:25:cd:cd:
                    15:c3:db:d8:b8:47:f2:ce:41:5b:97:d9:42:61:eb:
                    e8:10:92:de:41:23:0c:9f:40:d5:38:ac:5c:4b:ea:
                    91:ad:e3:e4:7a:a0:38:44:24:d6:6f:b8:53:f3:91:
                    54:37:fb:3e:eb:c0:e8:32:1c:ca:6b:a3:d3:b5:32:
                    8d:0b:4d:35:fe:f1:fd:ba:3d:61:17:b3:6d:cd:c8:
                    e5:e4:ea:10:d9:b9:c4:e8:76:8c:5d:5d:aa:5e:32:
                    bb:3f:e1:5e:b2:ee:e9:3b:84:e9:c3:56:dc:b7:3a:
                    71:16:e3:8c:32:fd:89:b3:58:26:59:d9:e6:00:ca:
                    5b:60:d7:a2:df:08:c2:76:75:c0:62:85:2b:3a:77:
                    c8:c6:2b:d6:e0:15:4b:a7:6e:f4:38:18:c3:45:79:
                    ec:0f:73:8d:18:46:d2:ad:75:d5:33:61:28:f3:fa:
                    35:78:65:98:54:db:15:c2:24:b6:1b:58:bb:71:4e:
                    65:3e:21:ad:ca:8e:1c:29:d6:61:4e:c1:7a:ae:53:
                    6f:11:3b:6b:ec:ff:28:d0:65:85:a1:31:1b:6b:93:
                    75:dc:75:44:ca:44:81:ca:fb:23:6c:b8:47:b8:21:
                    63:de:5f:ae:49:19:4d:bd:e5:d0:80:3a:9b:1a:41:
                    68:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BF:2B:F8:E1:B0:F2:77:FD:8E:7A:FE:A7:6E:F5:7B:16:23:8D:A5
            X509v3 Authority Key Identifier:
                keyid:B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:da:57:bf:be:44:61:18:2c:93:d4:d2:2e:f1:e0:96:40:3e:
         bb:15:fe:77:d1:10:5e:37:f3:5c:d2:ec:fe:2d:a7:6d:6b:d7:
         c9:db:5b:85:18:c0:5d:cb:07:8b:31:8c:55:89:39:cc:0e:bc:
         3b:3d:71:38:dc:a3:1d:8f:72:d7:f2:09:5b:e5:c8:8b:fa:08:
         7b:c2:e4:e8:a2:6c:14:86:e2:72:d8:b4:fc:e3:f3:16:45:72:
         92:43:3a:99:b6:f5:e2:2b:bf:3f:7a:e1:d6:71:19:e6:a0:45:
         df:ea:5f:65:0e:7d:44:8d:8a:0f:80:a3:56:15:a8:f7:01:ae:
         9a:28:3a:c1:8f:14:5a:7b:0a:dc:36:96:a5:c8:9e:91:5c:a6:
         24:6c:3d:ec:31:60:b1:90:82:d7:4f:46:39:fb:55:71:a0:d4:
         c8:c4:91:8a:fd:da:92:50:46:91:a2:6a:25:36:f1:7c:d3:e7:
         6b:18:16:e7:ea:69:64:5b:29:04:34:de:0d:55:a0:42:38:c9:
         e2:0c:55:cd:a1:1f:42:46:8c:97:78:7e:b5:1b:83:f7:3c:c2:
         cb:c8:82:1f:50:54:16:c9:04:2e:46:09:3e:17:b0:53:9d:76:
         11:95:e0:98:a5:b4:54:1f:a2:f9:5b:77:ed:e2:3e:a4:b7:83:
         b5:88:f2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 16:13:06 2026 by rpki-client