Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
File:                     5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft (raw, json)
Hash identifier:          h3uDKliYj0/p4tOun89Qt4UyqpYL38mYle5a5ufMW5c=
Subject key identifier:   C3:45:81:5F:E9:F8:C3:A8:15:24:6E:E3:50:46:7F:44:D0:B7:50:8B
Authority key identifier: E6:A4:D5:DF:23:38:98:E0:4F:AE:3D:83:E8:58:22:D9:88:0E:08:06
Certificate issuer:       /CN=e6a4d5df233898e04fae3d83e85822d9880e0806
Certificate serial:       01A03D4CB43F297737492A877CCD0830E95E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
Manifest number:          0252
Signing time:             Wed 26 Aug 2026 09:00:31 +0000
Manifest this update:     Wed 26 Aug 2026 09:00:31 +0000
Manifest next update:     Thu 27 Aug 2026 09:00:31 +0000
Files and hashes:         1: 4SK6T1joxEKD3qcJIw_toyLw7Cg.asa (hash: S9VsSYa/rKcIFEh+rtQN72zQTr6Bln2NJ0sYtwMEOXo=)
                          2: 5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl (hash: gjOI2FrhcWuTWZ/cafn5lWRfkWmHecbaDIEV3FYWYOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3d:4c:b4:3f:29:77:37:49:2a:87:7c:cd:08:30:e9:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6a4d5df233898e04fae3d83e85822d9880e0806
        Validity
            Not Before: Aug 26 09:00:31 2026 GMT
            Not After : Aug 27 09:00:31 2026 GMT
        Subject: CN=c345815fe9f8c3a815246ee350467f44d0b7508b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9f:93:fe:9e:4b:70:20:f3:79:95:79:be:30:
                    85:bd:49:8a:ca:b6:86:22:35:4f:4d:51:e6:f9:0e:
                    b1:d9:e3:d5:e3:b0:51:2c:e6:a8:2d:09:a4:83:fd:
                    a9:30:ba:2a:39:d9:08:7a:7c:1c:9b:28:d6:99:87:
                    2c:21:a0:62:eb:ff:03:1f:04:68:10:93:d7:80:1e:
                    de:9e:59:da:4d:0c:84:6a:95:e0:d5:88:8e:c3:9d:
                    5d:9b:44:ae:c6:55:13:b9:87:51:f6:4a:1e:ed:c7:
                    53:7c:34:47:89:98:9f:e3:e1:7e:55:8d:b4:50:e8:
                    68:ab:4b:85:9b:1f:ef:9c:17:d4:cd:9a:7a:7c:9b:
                    54:3b:4c:a6:5d:30:1a:94:59:19:43:b8:80:1a:36:
                    33:ba:07:69:4f:6b:0a:e3:5d:a5:1f:0f:99:b6:7f:
                    29:6b:d1:f6:5f:08:78:69:ca:25:c4:c0:23:6c:fc:
                    f5:d1:39:8a:9e:3d:00:7b:38:cb:7f:31:8b:3f:9d:
                    86:cd:e5:b6:ea:14:49:bb:bf:ae:2c:92:42:6e:0e:
                    d6:bc:90:e8:98:6e:9f:2d:58:0f:ae:30:b0:22:4a:
                    1a:0b:00:a5:fe:2b:56:bb:9e:e8:21:31:62:88:d1:
                    91:c2:5f:3f:d9:d3:e1:e3:41:10:1a:a0:63:de:98:
                    3d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:45:81:5F:E9:F8:C3:A8:15:24:6E:E3:50:46:7F:44:D0:B7:50:8B
            X509v3 Authority Key Identifier:
                keyid:E6:A4:D5:DF:23:38:98:E0:4F:AE:3D:83:E8:58:22:D9:88:0E:08:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:9c:c7:4e:41:2a:25:f6:d5:73:b8:34:38:e8:88:a5:da:ca:
         df:27:01:a1:e1:83:79:a5:80:9b:62:29:3e:aa:2e:40:33:3c:
         71:5f:a4:5d:d4:c0:c3:7b:6f:7c:85:ac:e3:9b:1a:7f:2b:0e:
         4b:ae:ad:ea:c9:83:62:88:1c:bc:65:64:49:50:7a:87:4f:92:
         d7:fa:56:82:15:fb:7d:47:0c:b9:52:19:8f:0d:56:ab:6a:f8:
         f4:f9:a1:f2:8c:ff:00:83:84:b6:ac:15:ed:72:33:2f:4d:c4:
         23:80:79:1d:18:a5:63:2f:0f:33:bd:82:8d:bb:e0:47:87:02:
         84:c8:84:ab:0f:d4:cd:d6:d3:a3:5f:b6:f4:c6:df:b4:c9:b9:
         76:46:be:fd:30:36:9b:29:4d:c0:7d:fb:e9:ef:55:2c:1c:cb:
         fd:98:97:87:a0:a7:21:d6:81:3a:16:0e:73:09:a3:31:33:a8:
         e4:69:e1:6c:97:39:58:0c:3c:6e:6a:62:03:fb:80:08:b9:c6:
         52:ee:d3:db:d3:cd:05:93:95:dd:61:73:d5:65:dd:4e:04:0b:
         f4:6f:9c:5f:3b:09:7b:94:11:f6:e1:dc:a3:b6:13:28:07:67:
         be:fe:97:fc:e0:4d:b9:1a:7a:e1:44:a6:77:2b:fc:1e:b2:97:
         43:ab:de:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:09:57 2026 by rpki-client