Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
File:                     RsmLLko-Bg3vRavGLA40X6qAtew.mft (raw, json)
Hash identifier:          F/lbBMmZY8lBSKid8PtrbOsDW3HfeTOokuEdeGfajIg=
Subject key identifier:   82:01:ED:6A:7E:EF:EF:9C:3B:45:B4:6B:DF:F1:70:BB:51:12:83:2D
Authority key identifier: 46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC
Certificate issuer:       /CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
Certificate serial:       01A0404DBFDAFF8E7BC2D700AF9B041A4ADF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
Manifest number:          1A1F
Signing time:             Wed 26 Aug 2026 23:00:32 +0000
Manifest this update:     Wed 26 Aug 2026 23:00:32 +0000
Manifest next update:     Thu 27 Aug 2026 23:00:32 +0000
Files and hashes:         1: Ip7p_hL1VXdeRgj8FVGhTum4zB0.roa (hash: agYqlxFFSnuNhJD9cHkZJfqIOemy4XNVrJfaav2GJL4=)
                          2: MGqAhkKHBACRFaiNXYcP9SHiMFE.roa (hash: GZRYXJdlMwxnrdhoW6/XDsnMjgU/H78VBDuIRDqDxI0=)
                          3: RsmLLko-Bg3vRavGLA40X6qAtew.crl (hash: zAFIhjANg4CCNhkID/tol8JyWQmU8AN88AbrwT93/vk=)
                          4: WjHsZr2LYotu7UixbhUPmyhufyM.roa (hash: UbFC6dvqvKaXgJmhKzkqauNjGk31aKocZ5d+hid0GEk=)
                          5: hL4nAbMjDcB0I8HfTfp0aJOETu4.roa (hash: HMgiqPXACPgRgXB4fWWx/eVqV6zK3UzAgCuz5lAzZEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:4d:bf:da:ff:8e:7b:c2:d7:00:af:9b:04:1a:4a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
        Validity
            Not Before: Aug 26 23:00:32 2026 GMT
            Not After : Aug 27 23:00:32 2026 GMT
        Subject: CN=8201ed6a7eefef9c3b45b46bdff170bb5112832d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:37:36:03:cc:67:56:cd:b5:99:d3:10:08:f0:
                    6e:0a:8f:df:7f:87:ca:8f:76:62:d6:d6:6b:28:dc:
                    38:10:bd:5b:fd:25:55:79:11:4f:f0:1f:e7:b1:5e:
                    e7:23:84:36:7c:b2:59:55:06:26:fb:c8:10:55:a7:
                    12:a1:2f:cb:fa:13:88:c2:3a:02:b4:9f:c2:36:cd:
                    dd:f2:a6:37:28:ef:fd:da:2b:7b:d8:83:98:ee:be:
                    54:8c:2c:44:ee:5b:ec:25:a6:05:09:4d:48:3f:69:
                    a8:33:d7:c6:c7:99:be:e3:5b:e9:52:1a:8f:74:8d:
                    d7:41:cb:28:3b:0e:d6:13:4b:cf:fb:80:83:62:01:
                    43:5f:f1:6b:4c:65:c7:38:40:af:05:d5:cb:55:78:
                    38:16:6d:ad:37:56:b7:6a:81:c9:6c:07:83:19:36:
                    05:c9:bd:04:83:be:a2:a7:70:ed:8c:97:62:30:7f:
                    40:47:70:62:ae:30:f5:9f:ae:80:03:b5:0b:70:0b:
                    f5:a8:64:7b:94:f4:b0:71:d6:41:e3:21:d3:f1:34:
                    5c:6e:47:22:54:9d:e7:8c:35:be:69:24:9b:71:32:
                    df:18:88:85:7e:97:f1:e8:c1:dc:2d:c5:38:49:20:
                    3e:11:b1:d3:ce:6b:9c:aa:4e:12:36:07:e5:14:15:
                    27:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:01:ED:6A:7E:EF:EF:9C:3B:45:B4:6B:DF:F1:70:BB:51:12:83:2D
            X509v3 Authority Key Identifier:
                keyid:46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:1b:fb:ca:b3:f9:df:23:61:19:ec:48:15:92:a6:d8:23:39:
         5c:27:96:15:ef:56:5f:e0:99:8c:e8:7f:2e:f3:e1:5f:86:9a:
         8e:f4:1a:ed:7e:41:69:58:22:18:0d:9b:16:ee:1a:8e:7c:16:
         a0:d0:31:01:1d:34:2b:08:45:7e:71:5c:0d:cb:5f:e6:eb:46:
         a7:e4:08:bb:3c:4a:55:b3:f2:23:c7:ea:61:29:fd:5f:ee:17:
         1a:88:bc:13:b2:4c:8f:70:57:de:f0:5e:7e:b5:82:af:dc:bc:
         61:82:46:cf:12:81:73:b5:ff:85:49:ed:5c:40:e0:74:34:c2:
         54:ea:d8:8d:35:4e:d0:61:1d:55:29:f9:52:c2:c2:35:1e:61:
         f8:77:4e:1d:20:db:0d:c9:80:bf:42:f3:50:86:5f:06:c9:6a:
         64:0a:98:33:d1:9c:be:5f:cc:83:79:28:30:d0:e6:69:91:b1:
         f0:de:98:03:32:b7:ba:cc:00:55:01:27:2d:2d:81:88:ba:75:
         c1:1f:16:b1:c8:c2:73:55:7c:3b:f4:3e:b0:0f:f2:36:92:d8:
         51:de:83:0f:38:dd:90:a0:21:49:17:0b:0d:36:53:51:78:f7:
         3c:a0:54:8a:10:b1:c7:34:a9:67:17:2a:28:00:01:0e:b1:a6:
         62:ed:5f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:01:30 2026 by rpki-client