Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft
File:                     SnDhvI7t2UeGELGv8JMPQDR1JuU.mft (raw, json)
Hash identifier:          IDm3UdXhCzj7XxCcFkVPSFFScT1m9UdbB+DYahAKDQg=
Subject key identifier:   62:77:11:0A:3F:7B:BD:3C:29:2F:C2:18:95:8A:EC:78:78:20:EA:10
Authority key identifier: 4A:70:E1:BC:8E:ED:D9:47:86:10:B1:AF:F0:93:0F:40:34:75:26:E5
Certificate issuer:       /CN=4a70e1bc8eedd9478610b1aff0930f40347526e5
Certificate serial:       019FF5D901E22E6EB0C57D94A2911F39FAFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SnDhvI7t2UeGELGv8JMPQDR1JuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft
Manifest number:          01C3
Signing time:             Wed 12 Aug 2026 12:01:07 +0000
Manifest this update:     Wed 12 Aug 2026 12:01:07 +0000
Manifest next update:     Thu 13 Aug 2026 12:01:07 +0000
Files and hashes:         1: SnDhvI7t2UeGELGv8JMPQDR1JuU.crl (hash: 3AuJjPKjIqmHM8hMaXvzrGvlO/WZ702oodm2NiGxyOg=)
                          2: mbfy7L8D_2UAGm_dalRDD5X5-5k.roa (hash: QA1iyiTc+hx3IttbGaQYktAkhZefaHnHg6PgY6o1wcw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SnDhvI7t2UeGELGv8JMPQDR1JuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 12:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f5:d9:01:e2:2e:6e:b0:c5:7d:94:a2:91:1f:39:fa:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a70e1bc8eedd9478610b1aff0930f40347526e5
        Validity
            Not Before: Aug 12 12:01:07 2026 GMT
            Not After : Aug 13 12:01:07 2026 GMT
        Subject: CN=6277110a3f7bbd3c292fc218958aec787820ea10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e3:50:da:4b:f3:b6:4c:9b:76:eb:d2:2c:4c:
                    02:8b:09:2d:12:b7:ca:38:0c:0d:19:e5:51:7e:f5:
                    58:07:49:e5:92:c7:86:c6:50:b0:e8:ec:a1:11:07:
                    12:3c:6c:14:f5:f0:87:72:5c:db:a1:6f:08:c9:e8:
                    40:84:a3:4c:09:15:2e:6e:7a:d6:c0:84:ed:64:6d:
                    a0:ea:d6:35:93:f3:5d:87:51:c5:2b:15:f7:b1:03:
                    a3:8d:94:0b:20:87:ac:24:04:6a:8b:a4:7a:3b:48:
                    52:0d:d2:ed:f9:19:aa:ce:8d:be:24:bb:1d:10:cf:
                    41:c9:99:9c:84:35:1c:d3:c3:58:27:42:e5:8d:ad:
                    5a:80:f1:c7:51:fe:bb:20:af:83:f4:f5:9e:bf:bb:
                    4c:db:7a:14:4c:00:04:45:31:10:9f:cc:9a:5e:39:
                    98:4a:39:91:94:dc:17:0a:9b:1c:77:b4:e0:21:50:
                    76:c4:ea:9e:1d:ee:c0:a3:75:68:b5:01:13:0f:83:
                    c1:68:3b:4d:44:cc:32:8c:d8:62:d7:32:25:13:02:
                    3a:c1:d9:d9:a9:5e:87:23:de:2c:f6:f4:75:c1:c4:
                    de:eb:40:d7:13:29:99:dc:99:91:23:7b:5d:3c:f6:
                    90:44:14:cc:3c:8e:f9:6f:26:bf:da:5b:07:88:80:
                    06:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:77:11:0A:3F:7B:BD:3C:29:2F:C2:18:95:8A:EC:78:78:20:EA:10
            X509v3 Authority Key Identifier:
                keyid:4A:70:E1:BC:8E:ED:D9:47:86:10:B1:AF:F0:93:0F:40:34:75:26:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnDhvI7t2UeGELGv8JMPQDR1JuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:89:c9:58:a2:64:13:46:47:75:f3:7d:2c:29:bb:27:79:0a:
         33:94:97:52:30:32:92:4b:f3:83:d2:6f:97:d2:ae:1c:75:1d:
         74:77:08:8e:65:3b:b8:87:5e:20:47:4e:c0:72:26:7f:53:c8:
         ba:38:ed:7c:56:65:56:15:f9:e8:7d:68:f6:6d:a1:da:1a:2c:
         0e:4c:ae:db:42:58:58:af:ff:17:fe:0b:16:84:53:3d:43:e3:
         78:f5:5a:47:18:cf:95:d1:14:ac:06:92:4c:10:a8:5c:21:ee:
         e5:53:76:74:e5:64:f0:a8:77:06:5b:ec:e4:8b:33:1a:a2:e0:
         2d:48:9f:27:ef:6b:21:47:cb:b6:bc:cb:f1:94:f0:a8:41:0b:
         a7:b6:db:aa:be:ff:73:87:aa:ca:09:7d:74:d7:85:10:66:1d:
         a0:bc:c4:b0:d6:9d:5c:55:31:33:ef:cb:2f:8a:b0:cd:2b:9d:
         00:2d:58:91:4d:be:ce:9c:f5:1b:d6:32:8b:32:57:af:42:64:
         95:ac:38:77:26:c0:cc:94:1a:56:38:03:45:9e:e8:d7:06:ea:
         a7:73:27:a9:9a:53:b8:44:d7:69:ce:62:00:09:ae:ef:70:98:
         84:11:4f:46:c6:e7:20:8a:3d:95:75:bb:ff:3b:7c:eb:36:50:
         2a:9c:31:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 20:39:54 2026 by rpki-client