Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
File:                     1aqcEWV9iipUzmcoFLa9uXlhiDA.mft (raw, json)
Hash identifier:          XJlgUaV1KvTdUYi/hi+87SAn8ut+wEzAV4aMBWW+BlY=
Subject key identifier:   1E:FF:C3:CE:00:88:27:90:C6:CE:71:95:42:ED:21:5C:68:A0:60:A2
Authority key identifier: D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30
Certificate issuer:       /CN=d5aa9c11657d8a2a54ce672814b6bdb979618830
Certificate serial:       01A0016EE0E147EF9CB2330CA97AA6EFD829
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
Manifest number:          092C
Signing time:             Fri 14 Aug 2026 18:00:38 +0000
Manifest this update:     Fri 14 Aug 2026 18:00:38 +0000
Manifest next update:     Sat 15 Aug 2026 18:00:38 +0000
Files and hashes:         1: 1aqcEWV9iipUzmcoFLa9uXlhiDA.crl (hash: sLHqpNjo+aQGokTbhxTqRBRHv2eLPmW4CZZHB4LJcS0=)
                          2: 2QaZAgQ2BxUVFfg1aWYDEr7yowE.roa (hash: mrwPNewhrXBRjZ3xbz9XepEm0Cy1szvH8RFKVrkr1LU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6e:e0:e1:47:ef:9c:b2:33:0c:a9:7a:a6:ef:d8:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5aa9c11657d8a2a54ce672814b6bdb979618830
        Validity
            Not Before: Aug 14 18:00:38 2026 GMT
            Not After : Aug 15 18:00:38 2026 GMT
        Subject: CN=1effc3ce00882790c6ce719542ed215c68a060a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:06:fe:34:7b:e7:f2:94:cc:f4:6d:9f:f7:cc:
                    a6:a7:42:32:af:80:58:17:ce:4d:8d:8b:d2:55:94:
                    0c:fe:9c:ac:09:7b:39:91:1d:39:48:fd:38:00:d2:
                    3c:dc:4e:42:32:4f:f9:7c:24:b4:02:89:35:fb:e5:
                    06:d2:ba:4d:c9:21:16:8e:aa:ab:0f:e2:51:34:82:
                    1f:f2:2c:26:7c:fc:95:d9:bd:1d:f7:72:fc:41:96:
                    cb:ee:c7:9d:ac:7d:ba:61:a3:1b:9a:84:9c:d0:f9:
                    c4:5e:f3:08:16:49:92:5f:f9:df:2c:21:d8:ef:8c:
                    5f:1a:fa:09:25:6f:65:b7:11:e2:d5:2d:1e:8c:65:
                    09:01:d2:7d:40:78:04:23:99:29:06:29:de:ee:bc:
                    04:a7:8d:0f:ea:ff:8a:a4:dd:3d:ac:6d:cf:15:c2:
                    29:69:13:3f:75:f1:8d:70:33:aa:4f:b1:e4:3f:90:
                    d7:e7:4a:b4:ef:ef:ac:85:eb:51:86:2b:6e:e2:d7:
                    06:cc:f9:71:80:78:63:44:4c:49:1f:98:4c:24:60:
                    81:1c:26:74:e5:77:e6:5d:f2:af:a9:11:9a:4a:78:
                    f0:fb:31:65:68:1b:80:ea:7f:7a:53:a3:e6:15:2b:
                    6b:23:b8:a7:7b:f8:b6:32:a2:31:fa:3a:6e:87:78:
                    c3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:FF:C3:CE:00:88:27:90:C6:CE:71:95:42:ED:21:5C:68:A0:60:A2
            X509v3 Authority Key Identifier:
                keyid:D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:94:d9:6b:bb:59:72:c7:ba:b0:71:ce:4c:61:f7:3b:ea:54:
         1d:06:cd:97:67:35:ce:c1:57:90:32:d2:20:07:d6:c8:58:06:
         0a:c8:3e:1e:e1:3b:ad:89:7b:5e:4c:fe:3d:19:05:5c:8d:e1:
         01:cc:30:b1:a9:b9:bb:1c:46:76:30:64:8f:f6:f6:ca:2e:b7:
         08:b2:57:0f:f9:2a:24:54:bd:fb:a8:92:87:06:4e:b1:38:e8:
         9f:65:4c:c3:00:2d:08:e0:d1:a4:00:a6:0b:9c:48:36:8a:4e:
         d4:7f:7a:c3:8d:e8:f6:82:d6:af:96:92:b4:53:6e:d6:3a:3c:
         da:be:d8:69:e8:83:e3:71:9f:34:fe:1f:6a:cf:a1:08:b4:19:
         a6:1a:93:9c:b7:c2:00:85:a0:7c:03:ba:70:88:e7:2f:e4:0b:
         ee:c5:cf:1c:f9:40:ec:da:de:25:f4:1e:7a:89:af:fd:35:04:
         51:d1:dc:94:3a:bf:1f:cb:8b:f3:c2:d7:fe:88:52:24:80:61:
         ce:38:21:29:66:bc:48:e3:52:39:5c:02:1e:40:a1:81:ea:61:
         e6:a1:41:6e:dc:12:a1:25:2f:4a:a9:1f:8a:a2:9a:c8:28:0a:
         18:e0:a0:6b:15:20:82:c2:99:d4:92:c1:0f:1b:98:bb:00:79:
         fa:8c:5b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:24 2026 by rpki-client