Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
File:                     Xo0HtF99gxJMn4wPrAO-wCRos34.mft (raw, json)
Hash identifier:          kjwOWJ5YoagWGuPg2P0t6zTHG4DSXoA5NoZwmdPA0nE=
Subject key identifier:   BA:D3:0C:1B:94:11:98:07:F3:AC:F6:4B:66:EE:3C:3D:08:CD:8F:A0
Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
Certificate issuer:       /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Certificate serial:       019FF67E8B778DB8FFDAA155C25F0070DBEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
Manifest number:          1A16
Signing time:             Wed 12 Aug 2026 15:01:56 +0000
Manifest this update:     Wed 12 Aug 2026 15:01:56 +0000
Manifest next update:     Thu 13 Aug 2026 15:01:56 +0000
Files and hashes:         1: AtV2hA3YXGqznUtgR3uB6bOY8lI.roa (hash: E9jIH1WdWmHG5Hqaca5c+6ilzJbhu15ZC+JxJ/GcG+0=)
                          2: EoMrU16bqHoGy2xh9XxsU9osNps.roa (hash: /uTZPWaskDiwuTtmaYcl1U/fLPuv+/ZTx4jUSu0Cxmo=)
                          3: IxM7jrIYQ0fDcM0dTV8GBbA5qnY.roa (hash: 7A/l1bf5UgIF3cr0ZZ6tcxEAdgV09T2Abt15BqBCTBY=)
                          4: WQ55TI7O_Y3_x9hkYSvF2UvokSE.roa (hash: TZOmAdpezSY7WR8DK0sxR8J5sP9pIOwu7JtZmeFi+dA=)
                          5: Xo0HtF99gxJMn4wPrAO-wCRos34.crl (hash: FvkPPiL71H592zyOIn181OkuNa3o9E+5DluRpF6SYSQ=)
                          6: hgl809tjaX7Gbv4DItgm3ScJV_4.roa (hash: 1spmr6hLWhe0MEAFi9Vr2mFMBf7qQUqSQroJeyohJqA=)
                          7: knU4dZaimoTFNsDybo_RrHKE45g.roa (hash: 91cLBLePGru3Ew/uOYSPXYIkqMobJYmdo5K1Q7DADLI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 15:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f6:7e:8b:77:8d:b8:ff:da:a1:55:c2:5f:00:70:db:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
        Validity
            Not Before: Aug 12 15:01:56 2026 GMT
            Not After : Aug 13 15:01:56 2026 GMT
        Subject: CN=bad30c1b94119807f3acf64b66ee3c3d08cd8fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c6:2e:fc:a5:d8:9e:ff:54:e5:f6:35:50:93:
                    32:53:35:ab:0b:83:55:24:fc:d7:d7:ff:4e:18:84:
                    ff:78:99:e4:7f:ed:35:63:4c:c5:a1:31:99:65:68:
                    9a:a1:2a:f0:37:98:80:49:84:df:82:b6:62:f7:ef:
                    30:b4:3f:d0:05:ae:2f:7a:a6:6b:86:d6:16:90:32:
                    87:f2:40:e0:d8:2f:17:26:60:03:6c:86:42:84:b7:
                    b2:01:f5:6a:5a:4b:84:37:a5:5a:35:d9:13:d2:f9:
                    9f:c4:4b:82:ad:f9:0d:d2:b4:01:f0:fa:35:69:66:
                    0b:15:02:fb:8c:19:4c:e6:c9:90:fc:4f:f5:39:f1:
                    12:b3:d5:e3:5b:94:0a:b4:1f:d2:95:88:c3:c6:46:
                    17:06:09:59:dd:f0:00:b2:ce:22:0c:16:83:04:57:
                    ce:70:a4:2f:fb:95:fc:70:7a:84:53:67:4b:1f:13:
                    eb:7e:4c:6e:37:75:3f:8f:5f:36:23:3a:07:ea:3c:
                    ab:58:b3:6e:f4:1c:57:29:c1:22:1f:71:b4:d7:fd:
                    78:3f:69:93:48:5e:86:ca:1e:fa:94:b2:e6:77:a4:
                    fd:a7:46:f5:b7:c0:a7:8c:fe:6b:1d:c9:f7:14:f0:
                    6f:f0:b4:28:38:92:03:42:f6:da:76:54:8e:51:ed:
                    54:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D3:0C:1B:94:11:98:07:F3:AC:F6:4B:66:EE:3C:3D:08:CD:8F:A0
            X509v3 Authority Key Identifier:
                keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:04:0e:62:ba:fc:1f:a6:5a:20:80:cb:a6:48:d2:db:aa:d5:
         b7:e6:4b:a2:78:11:e0:3d:7d:28:85:76:54:f0:f4:ba:66:94:
         f3:78:7e:37:90:a6:a4:84:36:48:5c:d4:67:80:0a:aa:ab:76:
         a3:69:16:ef:b6:3c:92:71:75:95:98:82:07:ee:ac:c5:b1:55:
         d4:96:f9:cf:67:3b:e9:f0:e6:b9:a8:ad:e2:0a:96:cb:02:08:
         3b:b3:49:43:f3:b5:0f:c0:55:92:c2:c6:0d:84:14:14:57:86:
         83:94:8e:c0:52:6d:71:ce:42:32:93:d5:2c:09:a8:5f:28:d7:
         ba:63:8f:e1:75:cc:e8:66:31:b6:7e:ed:ff:b1:6e:02:87:3b:
         23:4d:37:e4:58:7e:02:86:72:ad:19:59:04:bf:71:c3:c6:ce:
         50:b0:db:77:8a:d5:e6:cb:99:9b:0a:27:9c:08:c7:c8:71:75:
         3f:09:62:e8:b0:5c:9d:36:16:ab:e9:52:89:ae:a7:8b:69:33:
         ce:b4:e7:66:37:c1:c7:86:4d:5f:f2:41:c5:d8:31:fc:91:ac:
         03:e5:8c:90:32:27:8c:a9:7e:b0:84:38:64:d0:d5:55:d0:e5:
         cb:49:03:bc:21:02:3f:77:ab:49:e3:1d:9e:da:04:80:7a:fe:
         3e:e2:b0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 00:16:23 2026 by rpki-client