Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft
File:                     d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft (raw, json)
Hash identifier:          WjwJ8dJ5S1Mi3SfPsn0bgNRKlQV4nX7FOgmkb85jMC8=
Subject key identifier:   B3:95:C1:D1:CB:73:D6:96:B8:42:EE:EA:B0:74:55:2E:B3:9E:41:3B
Authority key identifier: 77:40:2F:F8:15:EE:BC:61:A9:3C:F1:B0:D0:BC:DC:EC:7A:29:F1:9F
Certificate issuer:       /CN=77402ff815eebc61a93cf1b0d0bcdcec7a29f19f
Certificate serial:       01A002B8C14EBFC346D7BFD8930AB402FEFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft
Manifest number:          1A00
Signing time:             Sat 15 Aug 2026 00:00:57 +0000
Manifest this update:     Sat 15 Aug 2026 00:00:57 +0000
Manifest next update:     Sun 16 Aug 2026 00:00:57 +0000
Files and hashes:         1: cjO-JSKeIeKfhSr8BfkC9JUrsaw.roa (hash: FDKs6XQEKS17A+eX40GCtBIucy/T4VULlaGZ/uQb+zQ=)
                          2: d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl (hash: PglE0/q8sVwW+LIUp0yGZkIKeshpKFDMXeCEV86hpPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 00:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:b8:c1:4e:bf:c3:46:d7:bf:d8:93:0a:b4:02:fe:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77402ff815eebc61a93cf1b0d0bcdcec7a29f19f
        Validity
            Not Before: Aug 15 00:00:57 2026 GMT
            Not After : Aug 16 00:00:57 2026 GMT
        Subject: CN=b395c1d1cb73d696b842eeeab074552eb39e413b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:19:3e:14:ff:d4:8d:c9:2c:b3:ac:68:81:e9:
                    2e:05:bf:f3:28:39:e7:59:6f:bc:7d:56:6c:05:d5:
                    76:a5:a0:83:79:32:a3:74:06:08:f3:c5:5f:3f:96:
                    79:73:a7:87:c8:44:b7:e1:06:6e:ea:26:e6:a9:2a:
                    d9:e6:30:bd:bc:5c:27:04:50:a3:3d:8e:4f:05:60:
                    df:4d:3c:0a:75:bb:28:ed:c1:14:cd:27:1c:74:e8:
                    51:26:48:f3:a3:e8:43:fd:32:79:ca:80:3e:ec:d9:
                    25:99:69:76:de:9f:68:7c:73:a5:a8:28:f7:1f:45:
                    ab:cd:e5:4d:b3:20:01:31:ed:de:3f:63:3f:9c:49:
                    83:16:0b:f5:c8:da:32:2b:35:b3:e7:95:fd:4a:df:
                    ed:de:13:41:ae:57:6a:2e:33:39:3a:d1:dc:37:1f:
                    3e:04:c7:f0:03:97:cc:43:7e:d5:09:c5:b4:4a:fe:
                    38:af:38:5e:36:14:dc:6a:d8:f2:89:20:f5:93:81:
                    f8:aa:12:49:2e:ca:8c:ea:43:e7:0f:43:e1:94:1a:
                    f3:00:f1:87:27:8e:db:5a:bd:ae:e6:56:92:ca:ab:
                    00:d0:c2:6f:8c:33:5c:7e:75:01:07:5e:59:f6:bf:
                    05:b6:22:4f:84:88:c4:e9:b2:ab:78:92:8f:d2:cd:
                    20:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:95:C1:D1:CB:73:D6:96:B8:42:EE:EA:B0:74:55:2E:B3:9E:41:3B
            X509v3 Authority Key Identifier:
                keyid:77:40:2F:F8:15:EE:BC:61:A9:3C:F1:B0:D0:BC:DC:EC:7A:29:F1:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:e9:80:b5:4a:50:79:32:38:8f:bd:e0:71:40:f6:62:01:e9:
         59:75:06:87:48:49:2e:19:98:03:c6:e1:83:88:1a:59:62:a8:
         e5:b4:dd:bc:c3:3d:b6:55:3c:20:3a:7e:6b:28:70:68:2a:b3:
         0d:1c:96:1d:84:65:a6:0a:3d:de:37:75:22:9a:56:05:52:67:
         31:11:a0:61:f5:1d:c0:f9:44:36:da:b1:0a:af:29:80:3b:ab:
         3c:a6:71:88:89:7e:b0:01:03:7d:4a:2a:c4:c3:17:d9:6c:e4:
         23:4e:b2:f9:ff:4c:97:04:e2:9a:41:3a:05:68:4b:39:a0:5e:
         6d:fd:c7:e0:1e:ca:96:b2:95:b1:0c:f2:fd:f3:77:21:2d:c1:
         f5:4d:5d:a0:72:b3:9a:15:6e:e4:26:5e:16:eb:c2:70:5c:cc:
         c5:f7:31:34:1d:88:19:6d:98:94:f8:61:4f:92:ae:07:fb:46:
         f6:68:91:90:19:a0:3e:f9:08:20:82:51:20:e6:2b:fa:95:f7:
         d9:36:03:36:56:50:3f:7b:76:fb:d6:2d:fc:d8:c3:0d:5e:96:
         3d:5a:73:c1:cd:33:5d:d2:2d:0b:2b:fe:5c:cc:af:65:2c:b0:
         72:32:c7:a3:61:b4:55:65:c7:4d:5a:17:b1:c8:31:48:e7:d7:
         9e:98:0b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:38:16 2026 by rpki-client