Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
File:                     sWq92UIPBLqcHNLDTcezUpiK-Nk.mft (raw, json)
Hash identifier:          TzYtvU+AwiLjc7qQQAdc3ayoyDa8jXB8/bmI9mjVxZs=
Subject key identifier:   D0:8E:3D:20:14:FE:2F:42:A0:75:81:52:51:4D:FE:6B:4A:AF:4A:87
Authority key identifier: B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9
Certificate issuer:       /CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9
Certificate serial:       01A0028211DA46033782F3180BEB234467DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
Manifest number:          173E
Signing time:             Fri 14 Aug 2026 23:01:13 +0000
Manifest this update:     Fri 14 Aug 2026 23:01:13 +0000
Manifest next update:     Sat 15 Aug 2026 23:01:13 +0000
Files and hashes:         1: 0WZc2xB5hVDGIEXjZ-HhqIhObPU.roa (hash: yv7agGUqeUNNQCncCwHxi4NpbbYoTQ6AYByrG78CfM4=)
                          2: sWq92UIPBLqcHNLDTcezUpiK-Nk.crl (hash: vB8UY9trpqMKkfRKEgsxg3+hXEXigDxIqlbUZ3ZDgKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 23:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:82:11:da:46:03:37:82:f3:18:0b:eb:23:44:67:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9
        Validity
            Not Before: Aug 14 23:01:13 2026 GMT
            Not After : Aug 15 23:01:13 2026 GMT
        Subject: CN=d08e3d2014fe2f42a0758152514dfe6b4aaf4a87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:78:60:ab:94:f8:7c:e7:d0:76:70:c1:fb:c7:
                    3f:fb:84:9b:9a:2e:41:07:96:dc:5a:99:7f:26:86:
                    c8:73:fc:75:9c:1a:a2:8c:db:14:0b:15:85:31:d5:
                    82:ba:1c:35:89:02:df:2f:87:75:ff:80:ce:30:5b:
                    13:06:b0:15:33:f6:d7:fe:be:96:3b:83:ba:9b:07:
                    d1:43:d2:5f:8f:30:51:1b:50:4c:c9:40:c2:7d:fc:
                    57:c6:be:3d:59:13:5f:31:7f:4a:11:af:02:69:22:
                    41:6d:d9:58:79:e8:26:e6:05:0d:ec:c3:b5:a4:56:
                    19:37:94:f8:e8:ad:8e:4f:dd:b2:7f:0c:fa:32:42:
                    74:66:80:39:8b:15:a0:a8:9e:fb:7c:13:7e:47:92:
                    46:7d:15:c7:92:26:24:36:17:7b:d2:e6:62:ee:dd:
                    07:6c:76:d8:77:f9:0f:b7:1a:52:51:31:8f:83:3f:
                    54:88:e7:b2:7b:41:df:2c:f5:42:7d:44:f2:f9:2a:
                    56:f9:83:9e:7d:19:bc:12:0b:4b:b9:12:f5:79:a3:
                    0c:36:9a:53:ff:50:9d:b2:e9:79:39:8a:a0:de:6f:
                    22:a5:c3:68:57:26:e6:5a:82:29:5e:70:fc:ad:2d:
                    e4:18:ff:35:55:1a:56:f7:12:87:08:69:9d:fa:8f:
                    38:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:8E:3D:20:14:FE:2F:42:A0:75:81:52:51:4D:FE:6B:4A:AF:4A:87
            X509v3 Authority Key Identifier:
                keyid:B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:93:d8:20:28:e1:58:90:c0:ae:d4:1a:25:64:12:0b:06:30:
         f9:83:ea:d0:d8:7a:30:b1:d9:59:97:6d:15:e0:0f:b7:00:05:
         ba:0e:50:7a:47:76:14:d4:e2:81:9b:78:93:94:63:e7:d8:7c:
         b6:61:6c:b5:ac:14:c5:99:95:ad:7f:d4:65:f5:fa:64:0e:5c:
         da:4f:aa:e2:8a:82:de:4f:cf:5d:56:71:b5:07:ac:36:8a:a2:
         0d:12:8d:00:19:33:17:bf:81:bb:26:68:95:85:68:78:d1:ba:
         39:50:f1:fd:a3:55:a8:42:3c:7f:54:02:db:88:b4:1a:d0:de:
         f4:0c:fb:e7:94:f6:71:0e:84:a8:85:6b:c6:4d:2f:7c:01:83:
         c7:12:95:50:3b:22:97:bb:5f:83:ef:19:c6:c6:e4:95:98:9c:
         a4:9b:17:e6:32:c3:e4:56:04:54:b6:9e:d4:1d:72:15:3c:cd:
         75:ec:b9:7c:17:ac:19:59:00:bf:96:8f:4e:bb:25:fe:1e:c7:
         f4:ae:4b:7d:c8:92:f0:f2:88:97:b9:1d:f1:52:ae:c7:c7:22:
         ac:d0:88:84:bf:f6:33:d4:79:81:4a:d1:2f:aa:9a:98:94:85:
         f3:d2:4a:14:d7:41:b5:6c:1f:63:78:7d:2f:c5:24:e4:b3:da:
         f9:fb:8f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:37:44 2026 by rpki-client