Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
File:                     E38jlE49eNqSAFXXLHTQK-VFXzU.mft (raw, json)
Hash identifier:          jgiEg7q3667yO7k4vzYGSqoJ0Yt56hXSH9hi9EwNNAA=
Subject key identifier:   87:F1:88:10:1E:7F:E5:97:A4:9D:01:7C:27:31:5D:2F:21:33:B7:B3
Authority key identifier: 13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35
Certificate issuer:       /CN=137f23944e3d78da920055d72c74d02be5455f35
Certificate serial:       01A002139FC2B30FBAA6E812E1CB67DE871D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
Manifest number:          195A
Signing time:             Fri 14 Aug 2026 21:00:35 +0000
Manifest this update:     Fri 14 Aug 2026 21:00:35 +0000
Manifest next update:     Sat 15 Aug 2026 21:00:35 +0000
Files and hashes:         1: E38jlE49eNqSAFXXLHTQK-VFXzU.crl (hash: pRRkXnsVHZD3bE9thPLNxbJK8uS1ZWRnrnhiPYzWapA=)
                          2: mDFc7pj7Bovc-0Bk_3gf_YPWSI8.roa (hash: foLb5bYIbYqHfFOiPX+cqHpJp+lcFErw3rPGOF4xGuY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:13:9f:c2:b3:0f:ba:a6:e8:12:e1:cb:67:de:87:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137f23944e3d78da920055d72c74d02be5455f35
        Validity
            Not Before: Aug 14 21:00:35 2026 GMT
            Not After : Aug 15 21:00:35 2026 GMT
        Subject: CN=87f188101e7fe597a49d017c27315d2f2133b7b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d2:de:be:aa:8f:2b:ac:6c:38:87:74:b8:03:
                    36:97:88:c0:5a:a4:a1:31:22:7c:6d:a3:2b:df:5e:
                    db:ce:80:7d:ac:b4:56:68:df:ce:5a:d8:3d:a6:44:
                    36:61:ac:8f:57:0f:e9:00:bf:62:89:c2:52:d4:99:
                    af:fc:3d:b8:97:e0:61:58:a8:12:76:d6:0c:14:72:
                    aa:c0:32:55:2f:17:ba:95:3d:52:da:11:c6:1d:7e:
                    ae:e8:00:11:b6:5c:63:7f:a9:2d:83:d8:65:01:5c:
                    e6:b8:14:7a:2e:8c:a4:93:c8:c5:58:85:5e:85:69:
                    0d:75:52:5f:77:cb:39:98:b7:87:0a:70:fd:15:d0:
                    cc:fb:5f:a6:5d:a2:5e:b9:ec:ff:69:95:81:3e:d8:
                    3c:3a:38:b0:cc:1e:81:be:8a:9d:f6:c4:51:6e:c3:
                    39:21:d3:9b:41:3a:54:10:56:99:07:25:ae:58:1b:
                    f9:5e:80:92:41:13:cd:5c:fa:8c:99:2d:76:82:e1:
                    4a:dc:f4:46:15:12:97:ca:6d:fe:5e:e8:45:b9:6a:
                    24:18:a0:06:82:03:10:fd:c3:ec:e4:ef:6a:2c:ec:
                    a8:0c:cd:89:ba:48:46:45:da:0a:ab:c5:5c:ed:df:
                    05:9c:dd:6f:53:c9:7b:91:5e:08:fd:90:24:20:97:
                    d7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F1:88:10:1E:7F:E5:97:A4:9D:01:7C:27:31:5D:2F:21:33:B7:B3
            X509v3 Authority Key Identifier:
                keyid:13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:46:e2:9e:59:ff:2e:b1:46:42:49:e3:85:04:ed:36:e9:85:
         61:86:32:6d:44:3b:2a:db:08:cd:99:ec:cc:44:77:37:53:12:
         18:65:09:d0:99:91:95:8c:7e:6a:62:8a:b1:4b:7b:93:b6:90:
         0e:96:4e:db:89:b0:c4:67:33:b6:d7:8b:2b:fb:a9:7c:d7:24:
         b5:b5:27:1e:df:0c:e4:4f:83:62:22:e8:fd:ec:37:b8:0e:57:
         76:6d:2e:a5:15:6d:99:ca:a7:24:e3:fe:69:95:82:7f:86:54:
         d8:a5:a1:84:1b:db:9d:1d:22:ed:92:f5:30:4d:4e:2f:ca:ab:
         b3:23:ae:45:a3:ca:9a:90:25:60:5e:1d:b1:ee:a2:2f:9b:99:
         ef:2c:5b:7e:32:cd:f4:2d:46:04:58:74:39:32:c7:73:40:41:
         c8:23:87:93:81:e5:b3:90:f9:d4:ab:72:84:93:7a:af:6e:d5:
         47:c7:f1:6d:ea:b6:0b:de:ee:32:25:0d:09:be:56:f6:f7:55:
         53:fc:3f:d8:d8:54:1d:d6:71:6d:4a:c8:68:4b:4c:91:70:90:
         b7:46:c0:cc:09:13:64:3d:17:be:8b:e6:6f:05:e4:b5:29:7c:
         da:ba:36:7d:5b:35:c5:85:f1:27:65:ac:c1:97:1a:e7:8b:f3:
         cf:18:9a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:30:09 2026 by rpki-client