Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/pQyvnDYd70jAkzMhvgUYOoOnv8k.mft
File:                     pQyvnDYd70jAkzMhvgUYOoOnv8k.mft (raw, json)
Hash identifier:          UUb12CXAW89G1mb4aykQtssYhpIB0hfnbYRuiF2gcLk=
Subject key identifier:   E1:B5:1B:F7:DB:19:A3:D8:C1:14:B1:9B:E2:C8:F0:1D:8E:26:68:9C
Authority key identifier: A5:0C:AF:9C:36:1D:EF:48:C0:93:33:21:BE:05:18:3A:83:A7:BF:C9
Certificate issuer:       /CN=a50caf9c361def48c0933321be05183a83a7bfc9
Certificate serial:       01A02055044A861CE783EE9D50F9D8255421
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pQyvnDYd70jAkzMhvgUYOoOnv8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/pQyvnDYd70jAkzMhvgUYOoOnv8k.mft
Manifest number:          8A
Signing time:             Thu 20 Aug 2026 18:00:37 +0000
Manifest this update:     Thu 20 Aug 2026 18:00:37 +0000
Manifest next update:     Fri 21 Aug 2026 18:00:37 +0000
Files and hashes:         1: 1-iqZ8I8kLhheHEAx_o50Ayvr-Dk.roa (hash: RfgagCxpiboTY2NkZbT0w4RqzTNQPKbpNiSQymddl4Y=)
                          2: 3zKqo9tzrDFHKj_Xn74CQ7Zp0Yw.roa (hash: /LFq1WNtpzmrSy4DHyV2230+6XSjlYq34txavrXU1wA=)
                          3: FjAjA5JSu9iSdMI9FTN4lABeYFw.roa (hash: kvmXzF7dgjne11SruvyJWpKtLvX+cnEpTrh80qXwd0A=)
                          4: L6k0aUmuwnQNi--cnPyE6qY9xE0.roa (hash: BzVcOMvfoDVOdx3fvQjFRnCNO4lIJ0/eNlnIvFlQ6RI=)
                          5: pQyvnDYd70jAkzMhvgUYOoOnv8k.crl (hash: pu8oVIaGaY8NVggRn2zV20fNKv31Av3D1XYlIZ6MY4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/pQyvnDYd70jAkzMhvgUYOoOnv8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/pQyvnDYd70jAkzMhvgUYOoOnv8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pQyvnDYd70jAkzMhvgUYOoOnv8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 13:32:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:20:55:04:4a:86:1c:e7:83:ee:9d:50:f9:d8:25:54:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a50caf9c361def48c0933321be05183a83a7bfc9
        Validity
            Not Before: Aug 20 18:00:37 2026 GMT
            Not After : Aug 21 18:00:37 2026 GMT
        Subject: CN=e1b51bf7db19a3d8c114b19be2c8f01d8e26689c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7c:9d:f2:a4:5a:ab:c3:ed:3c:ff:9f:79:89:
                    eb:d4:4a:f9:77:52:d0:8b:f9:97:6e:82:65:22:19:
                    5f:aa:d5:69:6f:d1:90:fb:8e:bf:e9:09:bd:4e:00:
                    c5:be:4b:da:56:03:3d:1c:71:61:88:e4:d0:b9:2b:
                    07:cc:5c:f0:c2:d1:98:08:8d:e9:a6:10:33:52:b5:
                    27:0a:ea:ce:58:44:c2:10:b8:23:43:e9:bd:1e:d9:
                    43:f3:d7:f1:39:86:a3:22:ca:9b:6f:59:99:63:8d:
                    22:4f:de:a0:9c:ba:c5:73:4e:90:08:19:48:13:7a:
                    d3:11:60:22:e6:14:a4:0c:59:07:c5:6c:e6:57:30:
                    cf:99:4c:8b:44:a1:8c:83:14:ba:c0:16:19:77:fa:
                    b2:9d:54:0e:b6:25:64:32:90:1c:cc:76:9f:77:4f:
                    67:a6:9b:b7:b7:6f:cd:47:87:ce:f6:10:e0:8a:6e:
                    1d:b9:a2:3e:40:29:24:11:a4:d6:ac:31:51:db:a1:
                    cb:1b:79:77:cb:78:45:69:35:04:f0:0e:7c:93:d6:
                    15:c7:b9:f9:55:6e:78:3c:37:4d:82:81:ea:24:ba:
                    99:03:a5:2a:7d:02:b5:de:49:f0:2b:bb:e5:04:3b:
                    8d:9a:57:a6:ac:56:03:38:ff:3d:4a:0e:05:43:23:
                    64:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B5:1B:F7:DB:19:A3:D8:C1:14:B1:9B:E2:C8:F0:1D:8E:26:68:9C
            X509v3 Authority Key Identifier:
                keyid:A5:0C:AF:9C:36:1D:EF:48:C0:93:33:21:BE:05:18:3A:83:A7:BF:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQyvnDYd70jAkzMhvgUYOoOnv8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/pQyvnDYd70jAkzMhvgUYOoOnv8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/pQyvnDYd70jAkzMhvgUYOoOnv8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:32:23:ed:40:ed:67:03:da:c9:32:8e:e3:3e:87:20:7f:f4:
         4c:a1:ef:e9:2f:b3:f2:5f:3b:4b:69:8d:b4:3d:c9:48:9d:e4:
         07:72:32:06:41:01:13:9f:c9:d9:4e:72:7f:9f:b5:fc:70:c1:
         62:1c:9b:24:d1:8b:08:10:5f:b3:79:bf:d9:7f:12:d9:65:ad:
         ce:75:1c:0e:31:80:06:87:74:b6:d4:30:36:b1:6d:ea:8f:f3:
         41:ab:75:24:f5:7f:05:b7:ca:78:0e:fd:3c:2a:a6:53:22:07:
         0d:f6:fb:67:92:a7:7b:5a:07:eb:64:a4:99:e5:be:42:86:3b:
         b7:e7:08:4e:70:4a:db:2e:66:a2:35:15:85:a4:c3:f6:e7:f1:
         78:4d:9e:37:31:04:6f:b4:6b:96:80:f4:eb:fb:a6:e3:fd:47:
         14:93:c7:5a:0c:ee:a2:86:68:0b:c0:ae:27:c7:af:ae:bb:1f:
         89:b8:35:d0:66:9c:46:db:34:a6:74:6c:e7:0a:ee:ab:00:a8:
         63:ef:af:c6:59:b7:23:56:e1:c9:81:99:9b:26:27:b5:47:ea:
         34:98:4a:24:9b:f7:bc:7d:14:74:18:ee:17:4e:06:6c:04:7f:
         c2:56:98:c9:52:78:a0:d5:17:f9:3b:f5:ae:db:c7:5a:42:02:
         31:23:60:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:54:07 2026 by rpki-client