Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.mft
File:                     26EkBVXYbI296Dbt0WTNMo-uY7U.mft (raw, json)
Hash identifier:          UnoWBf6gB3/FxXHcYwxocWuVJEMPwLdpc3zBTUkHOlo=
Subject key identifier:   05:B0:24:E5:7C:E9:2B:C7:E0:47:4B:D8:1A:6C:28:A6:EE:61:84:A1
Authority key identifier: DB:A1:24:05:55:D8:6C:8D:BD:E8:36:ED:D1:64:CD:32:8F:AE:63:B5
Certificate issuer:       /CN=dba1240555d86c8dbde836edd164cd328fae63b5
Certificate serial:       01A000CA534DAF5A569AD9061E7D00D6A557
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/26EkBVXYbI296Dbt0WTNMo-uY7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.mft
Manifest number:          0679
Signing time:             Fri 14 Aug 2026 15:00:54 +0000
Manifest this update:     Fri 14 Aug 2026 15:00:54 +0000
Manifest next update:     Sat 15 Aug 2026 15:00:54 +0000
Files and hashes:         1: 26EkBVXYbI296Dbt0WTNMo-uY7U.crl (hash: 1HpOSBT67ijgEdw5gsGZKUZ18BQ9HW9dT2JFeIZD+0s=)
                          2: vU7OOAM1oU2KdgtDcq53PB71mUo.roa (hash: bWa7gI9NfYeqeGnGyvEymMLlvAT66yVfsa/6btBaFoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/26EkBVXYbI296Dbt0WTNMo-uY7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:53:4d:af:5a:56:9a:d9:06:1e:7d:00:d6:a5:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dba1240555d86c8dbde836edd164cd328fae63b5
        Validity
            Not Before: Aug 14 15:00:54 2026 GMT
            Not After : Aug 15 15:00:54 2026 GMT
        Subject: CN=05b024e57ce92bc7e0474bd81a6c28a6ee6184a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:48:6a:da:2a:55:2f:46:25:3b:5b:6e:ed:04:
                    b3:29:d2:f4:c5:be:a4:09:12:37:7b:a9:88:6c:ac:
                    5c:7c:39:bb:23:1b:b1:91:4d:8c:55:a1:f6:7a:6d:
                    b3:5a:bf:90:3a:27:6d:17:e6:39:b2:ca:73:70:99:
                    ef:c7:d3:99:db:3b:64:25:1d:6a:da:dc:dd:5a:62:
                    99:df:9e:0e:e9:b9:1d:3f:40:61:53:6a:d5:70:fc:
                    3f:af:db:06:69:2a:a1:51:ef:4d:42:d7:61:bb:77:
                    45:f0:fe:93:28:9d:c5:16:54:cb:2b:65:20:a9:87:
                    c5:4d:4c:6f:32:bd:ac:93:a6:c8:bf:6e:23:a5:c2:
                    54:e4:ed:b6:78:dd:5a:ec:3d:d1:a0:ec:e4:5e:39:
                    21:12:02:e1:b3:7b:ce:96:74:0e:db:36:78:16:e8:
                    d5:72:86:ba:e0:10:26:9c:63:69:86:8c:a3:c3:67:
                    a2:c8:6c:48:e4:f4:8d:0c:80:7c:b7:1e:37:36:9a:
                    46:52:55:74:96:d8:49:7a:ab:dd:a1:33:62:34:13:
                    6c:fa:fa:48:92:ec:f4:8d:59:9e:89:2b:cf:7c:b9:
                    ff:58:5b:42:92:30:36:fe:4a:84:0b:7e:81:af:49:
                    fb:4f:cc:cb:bd:9e:e4:6e:65:53:7e:0b:4a:d5:99:
                    41:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B0:24:E5:7C:E9:2B:C7:E0:47:4B:D8:1A:6C:28:A6:EE:61:84:A1
            X509v3 Authority Key Identifier:
                keyid:DB:A1:24:05:55:D8:6C:8D:BD:E8:36:ED:D1:64:CD:32:8F:AE:63:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/26EkBVXYbI296Dbt0WTNMo-uY7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:97:b2:9b:18:93:27:62:09:8d:e1:1e:9b:ba:57:a3:43:71:
         1a:d3:99:2e:11:70:51:9f:36:ce:c9:e5:31:18:3d:9f:f3:e2:
         d0:ea:28:77:14:20:57:12:33:e1:c4:a7:9a:32:a3:ea:c1:94:
         fe:57:6b:74:dd:74:a5:46:6e:85:46:1d:c1:62:0b:46:56:48:
         06:aa:2d:9c:59:34:70:ab:8a:ad:11:e1:48:c8:cc:0e:d4:1b:
         ff:e3:46:1b:fc:1f:84:de:15:7c:42:af:7e:5f:80:d8:16:d9:
         a1:38:6f:df:ba:d8:6f:48:d2:94:d2:43:1c:78:2c:d9:04:39:
         11:d3:92:ae:cb:d5:0a:1d:b4:86:70:0f:fa:b6:d7:c3:49:32:
         72:9a:b3:c0:fb:d1:6c:d4:c8:18:a1:af:a2:a0:ab:d3:77:59:
         42:bc:de:11:ef:81:3a:43:c5:f8:5c:d4:ca:8d:75:a0:3b:f4:
         65:33:d0:00:91:ae:34:eb:42:43:ab:16:b8:5a:5b:90:2f:a5:
         5a:69:b2:aa:2d:d7:b6:4f:5f:5c:a5:9a:ec:a3:78:b8:ea:0a:
         b8:d9:62:e4:68:39:1b:f6:53:93:ff:94:9c:7d:60:8e:0a:7b:
         db:07:83:d0:78:3e:3e:cd:66:7f:5a:35:77:8d:55:72:9e:56:
         ad:12:53:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:39:34 2026 by rpki-client