Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
File:                     RsmLLko-Bg3vRavGLA40X6qAtew.mft (raw, json)
Hash identifier:          QGt3exWd4B7Nvloj43+BK1rO4zlWAfLg7ur1+VLUZUA=
Subject key identifier:   B6:9A:1E:AC:BE:7C:41:63:08:16:FE:1D:5E:00:01:D4:A4:45:81:4C
Authority key identifier: 46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC
Certificate issuer:       /CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
Certificate serial:       019FF6EC20CB3B21548A0DE47D4FF68B766B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
Manifest number:          19F9
Signing time:             Wed 12 Aug 2026 17:01:37 +0000
Manifest this update:     Wed 12 Aug 2026 17:01:37 +0000
Manifest next update:     Thu 13 Aug 2026 17:01:37 +0000
Files and hashes:         1: Ip7p_hL1VXdeRgj8FVGhTum4zB0.roa (hash: agYqlxFFSnuNhJD9cHkZJfqIOemy4XNVrJfaav2GJL4=)
                          2: MGqAhkKHBACRFaiNXYcP9SHiMFE.roa (hash: GZRYXJdlMwxnrdhoW6/XDsnMjgU/H78VBDuIRDqDxI0=)
                          3: RsmLLko-Bg3vRavGLA40X6qAtew.crl (hash: sAIzk5KeGj04tybVzyuC5NuA403Qbzx35H3svuTTyRQ=)
                          4: WjHsZr2LYotu7UixbhUPmyhufyM.roa (hash: UbFC6dvqvKaXgJmhKzkqauNjGk31aKocZ5d+hid0GEk=)
                          5: hL4nAbMjDcB0I8HfTfp0aJOETu4.roa (hash: HMgiqPXACPgRgXB4fWWx/eVqV6zK3UzAgCuz5lAzZEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 17:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f6:ec:20:cb:3b:21:54:8a:0d:e4:7d:4f:f6:8b:76:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
        Validity
            Not Before: Aug 12 17:01:37 2026 GMT
            Not After : Aug 13 17:01:37 2026 GMT
        Subject: CN=b69a1eacbe7c41630816fe1d5e0001d4a445814c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fd:1f:a5:bd:f5:b5:c0:c0:3a:2c:47:81:a1:
                    d8:75:4d:35:85:31:62:53:12:c1:d5:ec:88:0c:5e:
                    88:7a:d1:dc:27:a5:84:78:1d:b7:26:54:5f:0d:27:
                    9c:d7:96:23:de:42:02:5d:98:b9:0c:86:28:b8:c1:
                    f4:50:83:8f:07:39:3f:58:a5:de:63:f8:74:84:9e:
                    54:aa:0a:9c:ac:c5:49:17:d5:6b:49:36:25:8c:8b:
                    c6:91:74:3e:3c:69:61:19:cf:66:d1:60:64:fc:74:
                    ee:dd:1b:4d:39:ac:37:9e:e6:85:32:5c:82:e2:21:
                    f2:b0:f0:81:3d:c1:9e:ec:d9:ae:60:60:d5:2a:70:
                    7d:70:3a:eb:44:19:04:da:c6:0b:11:6f:29:5a:6c:
                    a4:da:5d:84:a8:74:0d:7f:bc:ae:08:73:16:ae:33:
                    d6:b0:26:ef:43:c4:96:98:ae:79:f6:3e:a2:7c:23:
                    0d:5b:2c:8a:89:07:e3:3c:b2:66:13:2f:0a:a8:b2:
                    60:cc:09:77:57:a8:c5:99:b5:a5:49:20:63:3e:41:
                    34:eb:a2:74:7c:e8:ad:7a:96:cc:63:60:fa:80:2b:
                    d7:d9:50:ee:4e:fa:d6:5f:23:ea:c4:f1:30:be:82:
                    bb:1d:99:c5:e5:54:76:00:3b:89:64:46:c4:47:49:
                    10:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9A:1E:AC:BE:7C:41:63:08:16:FE:1D:5E:00:01:D4:A4:45:81:4C
            X509v3 Authority Key Identifier:
                keyid:46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:ec:1c:27:a4:94:36:57:8e:1c:f4:a7:24:03:de:78:34:5d:
         26:a8:7e:00:42:2c:3b:48:19:4d:ec:ea:fb:55:64:51:d6:f9:
         32:a9:df:1a:0f:4b:a3:3d:69:7d:fe:a5:cd:01:95:d5:bf:5e:
         17:52:4d:e7:d1:bb:8e:43:15:4f:5b:6b:33:c0:4c:45:d4:ca:
         f2:3c:37:9b:a4:24:40:9a:85:4d:b5:b3:44:2e:fd:12:da:9d:
         a8:70:87:17:91:d4:02:5c:5a:1f:e9:d9:fc:ff:f4:aa:35:c9:
         37:2b:49:8c:a7:91:9a:93:1b:1a:66:42:e4:97:36:58:2f:78:
         9c:fa:9a:c2:71:d7:7a:30:88:fe:35:16:d0:71:85:88:af:62:
         c1:32:fd:98:73:90:a6:77:e5:e6:e2:25:7d:65:20:95:7c:6d:
         89:a2:38:3b:52:f5:e3:fb:62:3f:7f:ac:51:23:f8:73:ea:c0:
         27:12:e8:a3:35:29:cc:98:4f:26:0c:0f:60:b9:2a:9d:9a:2a:
         64:37:f8:2c:ce:0d:88:60:05:9d:fc:4d:50:b7:a3:e7:a6:63:
         73:aa:e3:79:56:73:2f:73:91:34:76:f7:ce:ea:cf:85:8a:40:
         42:06:17:87:db:d0:a3:49:93:9d:b6:58:52:46:c4:4b:94:63:
         bf:6b:d7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 03:05:37 2026 by rpki-client