Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
File:                     1MOxLI1jUZDskoQ3u9bLDow4-ak.mft (raw, json)
Hash identifier:          LaWW3zn0dOaF632fjJZaQMKl89y7X+sVg6MeJ8lK+Cg=
Subject key identifier:   8D:7A:A5:6F:FA:E8:84:18:04:5C:D8:89:7E:4B:A3:6B:9C:9E:68:2B
Authority key identifier: D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
Certificate issuer:       /CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
Certificate serial:       01A0005D01711589A9D0541D4F56492B4B85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
Manifest number:          1A10
Signing time:             Fri 14 Aug 2026 13:01:30 +0000
Manifest this update:     Fri 14 Aug 2026 13:01:30 +0000
Manifest next update:     Sat 15 Aug 2026 13:01:30 +0000
Files and hashes:         1: 0xrZEj05nZklKXgoWScPIF2_55I.roa (hash: /xHv98UagMpY7p7/l707cOwppDtpfGRBySWTV/pX6Bo=)
                          2: 1MOxLI1jUZDskoQ3u9bLDow4-ak.crl (hash: ipL2WLBbHKsh5pLg7xKM3M/EsE3QpfG4FaJw94H5nE8=)
                          3: 2_chmdN9KFFBZIvF9VY89f23PGs.roa (hash: oIVNlGlquIUtlwcT49BOjBM2tIxXAOLbTnaR8cakqIw=)
                          4: oSGKhwEc_oyA4GgI1H0hJOveCVI.roa (hash: 1SINNHx3FHxT/JXf8IpEHqdou86CS2g7FnWo+nB+dSQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5d:01:71:15:89:a9:d0:54:1d:4f:56:49:2b:4b:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
        Validity
            Not Before: Aug 14 13:01:30 2026 GMT
            Not After : Aug 15 13:01:30 2026 GMT
        Subject: CN=8d7aa56ffae88418045cd8897e4ba36b9c9e682b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:56:cf:5f:da:ff:88:e6:1b:10:40:53:a3:5b:
                    b3:59:d1:e3:03:5e:b3:1a:cc:29:23:d3:ba:95:86:
                    df:86:68:53:7b:d6:c6:2b:02:60:80:84:d9:65:8d:
                    5f:63:0a:0e:70:6b:3c:44:f0:de:63:f3:8c:90:47:
                    95:f8:ae:8d:5a:d7:e0:3b:ab:8c:23:66:a0:9a:a0:
                    a3:35:6e:e4:5f:18:31:7e:4e:77:f7:ad:2b:d8:60:
                    a4:87:73:b2:00:13:ec:60:3a:66:69:f0:cf:d6:cd:
                    28:58:a2:c6:26:66:12:39:94:45:f6:51:bf:0f:31:
                    2f:18:6e:25:1c:fe:ae:2a:6c:1b:d5:5b:37:91:68:
                    d5:5e:8c:f7:b3:bb:3c:43:99:d1:03:80:41:3b:04:
                    b3:06:e3:09:a6:db:49:81:f1:af:f4:d0:0d:ed:e2:
                    ee:15:4d:a3:10:58:f0:ce:a3:33:01:4d:7d:da:3d:
                    46:39:51:22:f2:38:dd:fd:d2:79:f6:78:38:78:13:
                    4a:69:26:5e:5e:f0:7d:e9:52:9b:58:f5:e8:6a:0c:
                    eb:29:dc:14:1f:f6:e2:e4:8e:73:c0:96:3e:55:c1:
                    e9:29:d3:e2:53:e0:b8:57:eb:07:5d:43:b9:72:33:
                    00:98:f7:24:b7:f2:52:b0:c9:1e:97:fc:11:0f:42:
                    4d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:7A:A5:6F:FA:E8:84:18:04:5C:D8:89:7E:4B:A3:6B:9C:9E:68:2B
            X509v3 Authority Key Identifier:
                keyid:D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:1f:00:10:7d:99:08:e0:34:7e:a6:93:51:5a:ed:de:25:ce:
         90:94:7d:b2:b0:93:6e:65:f7:6a:c8:f1:ff:61:04:71:c3:08:
         f9:22:23:94:b9:f6:a9:3c:5d:25:aa:d3:20:7c:e3:20:06:52:
         36:21:eb:ec:27:54:f8:3e:90:c3:c8:e5:50:b4:75:7f:df:e2:
         5a:ea:12:04:aa:df:81:0b:d0:18:76:6c:fa:e4:a4:c4:29:56:
         49:92:48:a0:f0:3e:2e:af:04:94:95:39:0b:2d:d5:3b:3b:c4:
         a7:2d:6f:31:c9:c3:b9:ec:c4:f6:70:b5:32:0b:89:6b:68:dc:
         a2:56:81:7b:9b:19:d7:ad:66:56:fc:89:d4:a0:5a:6f:7a:69:
         1a:5b:1c:c3:67:97:03:2d:4b:19:bf:13:b6:d1:96:b3:57:a6:
         ed:ce:77:c7:6d:0d:dd:0a:ce:df:d9:5e:26:25:cd:72:cb:dc:
         89:c0:27:f4:8d:fc:0e:25:ed:9d:02:b5:36:30:05:d9:88:4a:
         2b:7f:ff:f8:7b:bf:df:1d:16:33:8a:6b:1b:13:21:67:77:b2:
         b7:4d:a0:9a:70:9c:f4:4d:e9:04:c9:a8:be:76:50:fe:24:de:
         de:4d:cb:4d:81:f1:16:1d:83:13:ed:45:62:fc:68:3c:9e:12:
         fa:0d:55:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:35 2026 by rpki-client