Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
File:                     41oFbIJClx0akLC_qYsbepMFKIQ.mft (raw, json)
Hash identifier:          mssV4FZJjw8Nmb1CB9jP1q5Fk0DUuRw1RWQT4NQUv/8=
Subject key identifier:   86:D1:02:F8:BD:7F:C9:E7:ED:8B:21:63:4A:BD:C1:59:F0:33:97:65
Authority key identifier: E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84
Certificate issuer:       /CN=e35a056c8242971d1a90b0bfa98b1b7a93052884
Certificate serial:       01A001701F2CCA182CB55234E6F987D2F0B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
Manifest number:          1A03
Signing time:             Fri 14 Aug 2026 18:02:00 +0000
Manifest this update:     Fri 14 Aug 2026 18:02:00 +0000
Manifest next update:     Sat 15 Aug 2026 18:02:00 +0000
Files and hashes:         1: 41oFbIJClx0akLC_qYsbepMFKIQ.crl (hash: 9lZSGGdx+ElprlK4XUvTAdquaxd1qKx7H1saoTi5fDI=)
                          2: 6L2DF24h5kP__h0ZXcHhhgUtOHE.roa (hash: k3rPz38ZgJPfjpSFDtarFqrK6I1kr4U/pIOZrMPrf6k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:70:1f:2c:ca:18:2c:b5:52:34:e6:f9:87:d2:f0:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e35a056c8242971d1a90b0bfa98b1b7a93052884
        Validity
            Not Before: Aug 14 18:02:00 2026 GMT
            Not After : Aug 15 18:02:00 2026 GMT
        Subject: CN=86d102f8bd7fc9e7ed8b21634abdc159f0339765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:87:b0:90:e0:af:55:78:7e:26:49:b6:ba:23:
                    97:7d:40:f7:24:71:79:85:d1:7f:75:f3:f1:80:a8:
                    d9:ca:52:84:f0:ce:5b:14:4b:e4:7f:49:7f:79:a3:
                    f0:27:c9:cb:2e:10:0b:6d:de:22:45:91:1f:06:17:
                    71:42:27:7f:c3:ec:1a:84:52:31:88:19:e5:f1:17:
                    fb:13:fb:1c:04:0b:b3:55:29:5a:71:03:c8:e6:24:
                    2e:60:a4:ef:eb:7f:ab:dd:8a:4e:0c:66:50:7a:6f:
                    86:e5:be:65:36:40:52:88:95:e2:fd:4e:82:5b:65:
                    c2:cf:5b:60:59:5a:2a:d4:a8:11:8c:99:b4:58:82:
                    86:89:32:15:5a:a5:b0:8c:2a:89:f5:22:a8:05:d6:
                    22:0a:87:15:ef:22:c7:8e:91:37:c9:aa:53:06:af:
                    be:ef:a0:19:5e:90:5e:0c:e4:58:e6:9f:c5:da:a3:
                    02:a3:ea:75:78:d7:dd:8b:b2:fc:8f:73:ef:1a:38:
                    7f:95:21:7e:57:50:23:9b:7d:a4:5a:6a:69:0f:a1:
                    a6:9e:0d:58:b5:a7:0c:09:5b:7c:8a:bc:d1:e8:0a:
                    55:98:23:a9:e6:73:d3:06:ad:a3:11:e7:a6:ed:9e:
                    a5:9a:d1:4b:1f:42:7b:84:18:93:91:e4:9d:f1:4f:
                    84:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D1:02:F8:BD:7F:C9:E7:ED:8B:21:63:4A:BD:C1:59:F0:33:97:65
            X509v3 Authority Key Identifier:
                keyid:E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:2d:66:e8:79:a0:e1:d0:dd:cd:30:d1:54:d8:11:4b:0f:d6:
         d5:9d:e5:b4:72:11:2c:bc:69:51:5b:fd:47:4e:09:8c:4f:3d:
         64:01:35:81:73:55:69:63:0d:0f:f1:13:9b:5e:ec:06:52:a8:
         4a:7a:26:07:f6:e1:0c:ca:5b:03:a8:41:20:12:a8:61:e2:3c:
         39:b7:29:66:dc:5c:b1:33:54:f1:23:aa:c9:44:8a:78:55:8b:
         26:7c:6c:3b:80:b0:97:fd:36:54:89:f5:66:f5:f8:6a:55:76:
         cc:eb:25:7b:56:fd:28:76:89:fa:98:4c:a7:dc:13:1d:0a:4a:
         94:1c:07:7d:27:c5:9e:c3:11:ce:9d:c4:38:a9:aa:41:cc:73:
         df:01:19:dd:3c:88:81:0c:4a:12:6e:3e:52:7d:38:ca:ce:da:
         c1:98:52:c9:bc:62:23:4b:01:13:ce:f3:e0:9e:39:90:7e:bb:
         63:5f:bd:17:51:ed:7f:d8:47:6f:e3:98:0b:fe:73:bb:00:e9:
         65:8e:5c:6b:78:b1:0b:5a:04:9c:04:5f:76:cc:6d:ec:69:97:
         4c:8a:cc:5a:08:a4:fa:aa:11:24:2d:5d:17:b7:a9:06:a8:b9:
         28:10:62:40:37:5a:2b:ff:e4:e0:f4:07:d0:34:fb:2c:7a:35:
         1e:1e:27:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:12:07 2026 by rpki-client