Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
File:                     valtAqgi9GJTwq7mgEQdWsJ8PfU.mft (raw, json)
Hash identifier:          TxdDGuzckgSXs2dKkAyvF8+lJXQUPtonXuiks2SARkI=
Subject key identifier:   08:3D:F1:79:0C:9B:71:CF:82:A9:1E:1C:1A:5C:D3:C6:26:B3:6C:79
Authority key identifier: BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5
Certificate issuer:       /CN=bda96d02a822f46253c2aee680441d5ac27c3df5
Certificate serial:       01A00213C19F77DAFDC9BA64368917C528B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
Manifest number:          1A0A
Signing time:             Fri 14 Aug 2026 21:00:44 +0000
Manifest this update:     Fri 14 Aug 2026 21:00:44 +0000
Manifest next update:     Sat 15 Aug 2026 21:00:44 +0000
Files and hashes:         1: EhydGNTB-hB89eN92UxIng6UVZM.roa (hash: gWjLjnj1fBxsYuib5uZNn6bhDyaTmXoH7T7zFvCCLkU=)
                          2: PEaB6XQK_JSckDUEH_ZUUvy4XJs.roa (hash: pHNbC9gTB8A25YDnRH1/ZymWlhpa8gI2FiyHFl3N24c=)
                          3: kNnArX8rxSQizIzXcuK9nc5VM20.roa (hash: vhtZwmPY49vps0U0PvF9ig8qAqogrTdDowNB1/EB0pk=)
                          4: luTG1wEQoJ2CdlwrK7SvZ_P5LnE.roa (hash: mWrhQXIzFzzy6PXlxTLPkj0tx5iEbtFjzb8/vkv2Ot4=)
                          5: uKP8H6ExLgUqvBel-0TlMaMdYwY.roa (hash: u+LpsbOmzfoAEVZi4Pv4FxFv7TUs4TKRpLcI7uHwFcY=)
                          6: valtAqgi9GJTwq7mgEQdWsJ8PfU.crl (hash: X34u4gJbct59PsPLhwZUUIbcpZsdEp/caOZPmKZU0eA=)
                          7: vyQaTgnZmO6A2QP5fltvyAiHn2w.roa (hash: CuO+A8UIrEVOD42Zu4NLM0xT7n43WzFhoUCyh9EEw7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 21:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:13:c1:9f:77:da:fd:c9:ba:64:36:89:17:c5:28:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bda96d02a822f46253c2aee680441d5ac27c3df5
        Validity
            Not Before: Aug 14 21:00:44 2026 GMT
            Not After : Aug 15 21:00:44 2026 GMT
        Subject: CN=083df1790c9b71cf82a91e1c1a5cd3c626b36c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a3:df:1c:90:88:83:2b:1f:be:99:4f:e9:81:
                    96:79:9b:d0:ce:4c:20:0c:51:0f:13:e7:48:e3:ed:
                    e8:92:92:91:a1:77:78:c1:37:36:71:49:6e:d7:12:
                    e2:df:52:b0:cf:27:e7:d3:79:c8:ff:b1:00:2e:de:
                    92:0c:75:06:0a:70:07:17:30:54:ff:90:75:95:98:
                    76:74:e2:3d:e5:0e:a1:0b:59:b8:9d:db:c2:8c:a5:
                    9a:c7:b6:fc:bb:82:a9:1d:ec:31:f0:e9:b5:4c:d2:
                    43:3b:31:c3:45:8e:06:9b:a1:a6:cb:98:ce:9b:fd:
                    14:e0:5e:93:14:83:2b:cd:71:e8:d7:0b:01:31:ba:
                    a5:c9:11:b3:25:37:77:77:66:d0:cf:7d:72:4b:ce:
                    d8:2f:46:6c:27:77:71:17:e2:83:63:05:35:2b:df:
                    3f:a4:62:56:99:c0:3c:78:2a:f4:99:1d:ad:8d:de:
                    05:00:6e:9b:4e:c8:93:66:1a:e3:44:3c:11:d2:aa:
                    e2:fe:9a:20:02:38:c0:27:aa:0a:53:75:c1:9e:3b:
                    c5:65:08:f0:13:87:86:36:35:fa:52:09:e6:66:7e:
                    15:fd:0b:e1:58:5b:4a:75:65:ac:2d:13:01:c4:26:
                    57:44:68:b5:cb:65:07:42:46:80:15:a0:1b:49:0f:
                    91:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3D:F1:79:0C:9B:71:CF:82:A9:1E:1C:1A:5C:D3:C6:26:B3:6C:79
            X509v3 Authority Key Identifier:
                keyid:BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:84:c7:66:62:d4:cd:02:36:99:c7:0c:c1:74:8a:3f:d6:fc:
         a0:b9:ad:9c:60:12:c8:24:f9:9e:a5:27:38:f5:fd:a7:b7:bd:
         e9:73:9e:fa:02:44:11:32:40:53:6b:07:dd:74:6b:8d:0a:a4:
         4b:55:55:72:31:a9:98:de:38:d0:85:5f:c4:84:4e:f2:a1:db:
         08:6c:02:40:76:30:d9:bc:1c:79:df:c1:f8:14:5e:d7:18:a8:
         44:12:cc:fa:d8:e8:44:c5:5c:c8:ed:13:3a:9c:79:14:87:02:
         e1:53:cc:43:cd:9d:40:fa:08:ee:f1:c3:e8:9f:0d:ce:b9:f1:
         81:1c:bb:e8:f1:21:ca:4f:a4:39:bd:d6:f8:75:1e:79:51:5c:
         22:9e:27:a0:5c:85:6f:64:20:d0:14:c1:a0:e4:c9:04:65:5d:
         dc:6a:84:4c:a0:de:77:ab:a7:41:0e:dc:22:69:95:25:81:42:
         80:57:a4:1a:c9:0c:7d:aa:70:d7:63:69:3e:69:a9:a0:f0:27:
         1b:ab:7b:3b:0e:5e:42:90:ae:14:32:7c:10:4a:1a:2b:c4:57:
         b3:85:8d:39:6a:84:20:32:d8:25:be:8c:ba:16:30:ee:11:c5:
         63:fe:c6:db:ae:66:3b:79:86:39:7e:36:2e:f5:67:eb:8d:e7:
         55:e1:fb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:46:34 2026 by rpki-client