Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
File:                     Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft (raw, json)
Hash identifier:          g0bVHCgupgw9Qmux2Yn4Z7lh+hY3VzTTcfxcDuiVQwg=
Subject key identifier:   37:1C:56:97:48:87:26:C4:E9:A3:78:25:8D:85:CD:12:51:A4:88:28
Authority key identifier: 46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52
Certificate issuer:       /CN=463f917077f8f3d0e338c742ea21d64358d19d52
Certificate serial:       01A01FE818EA5190CBD9566BD3FAA2EED331
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
Manifest number:          0979
Signing time:             Thu 20 Aug 2026 16:01:39 +0000
Manifest this update:     Thu 20 Aug 2026 16:01:39 +0000
Manifest next update:     Fri 21 Aug 2026 16:01:39 +0000
Files and hashes:         1: HmNbu7fvLqkuNCvwTP-eXZTgjiM.roa (hash: m/atD1lD6rUs54W8etAvVpgoMLgOWanL44spO3D1HdE=)
                          2: Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl (hash: T5Vm8NdxTjEto7RqczqpiV6Uq3pDFyQu1AVtuMI33rs=)
                          3: eASxXKRxIs_kj-l1Ner7toyYCdA.roa (hash: ezV7+yb4XB2ubnd0AqkzgtqKTjmFbndpmZgG2VbnSno=)
                          4: pxOnqlq8UjygS2yRmi3Ur3nd-A4.roa (hash: aJhD1VyN6OGe5iE4OPjL2lO60V5k352+7aiUBwTHoKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 16:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:1f:e8:18:ea:51:90:cb:d9:56:6b:d3:fa:a2:ee:d3:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463f917077f8f3d0e338c742ea21d64358d19d52
        Validity
            Not Before: Aug 20 16:01:39 2026 GMT
            Not After : Aug 21 16:01:39 2026 GMT
        Subject: CN=371c5697488726c4e9a378258d85cd1251a48828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:13:51:8a:3a:ed:a9:30:4d:34:4d:25:ee:e3:
                    aa:22:c2:28:05:24:29:ff:6a:ee:3d:65:35:fd:5f:
                    79:be:12:bf:09:cd:06:a1:fc:3a:c9:46:e2:2a:1f:
                    52:bf:e0:5a:9e:91:11:1d:47:5f:fa:a2:66:25:7e:
                    84:0b:f6:f9:f7:06:fd:0f:1c:77:84:fb:d5:0a:e9:
                    3b:e7:57:a8:9d:2d:09:df:32:5f:78:a1:c9:eb:fb:
                    7f:58:e0:15:81:c7:39:40:a1:c0:e8:d2:c9:c3:99:
                    2e:43:2e:57:b2:67:1f:fa:97:e2:ff:83:a1:32:ee:
                    c1:a3:37:c8:91:c9:d8:1d:6e:3c:c8:83:a0:e7:ca:
                    4f:0f:f6:31:c8:d8:7f:25:5a:cd:15:b4:96:ff:4a:
                    08:13:15:c5:a8:1a:15:d6:c8:8e:45:21:67:22:47:
                    e0:91:43:0f:f3:52:72:ca:54:b9:6a:9f:f4:a5:6e:
                    27:69:57:1f:d8:ee:33:68:1f:53:7c:84:2f:af:d1:
                    d2:3d:25:c0:bb:22:4a:38:e6:df:db:6c:e3:c5:b2:
                    27:0b:1e:38:06:1b:1a:57:a8:89:4e:73:44:f6:8b:
                    62:95:6d:e4:0c:64:f2:b1:5c:42:77:37:fd:68:fa:
                    5c:a1:9b:25:c4:0f:c5:0a:e6:ce:2b:b9:d6:08:36:
                    10:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:1C:56:97:48:87:26:C4:E9:A3:78:25:8D:85:CD:12:51:A4:88:28
            X509v3 Authority Key Identifier:
                keyid:46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:4b:9e:94:f6:af:06:48:20:6f:45:5e:7f:fc:97:2c:61:2b:
         93:36:8f:75:cb:60:b4:a7:6c:99:c5:0f:93:31:3a:73:19:35:
         fc:90:0e:36:48:ce:90:c8:87:fc:01:96:75:a5:4a:f7:b5:10:
         30:79:d3:34:0c:b4:15:3f:9e:70:e5:62:6a:ab:b0:bc:74:7b:
         3c:9a:bc:0e:51:3e:a9:f2:bb:58:40:3e:70:31:37:65:d4:74:
         e6:14:7a:89:25:c6:df:79:a4:5a:e9:4c:f0:34:8c:58:32:c5:
         62:f9:cf:83:ec:3c:1c:bd:fc:26:b1:0a:31:27:ed:d0:43:81:
         7e:a0:1d:ba:4f:0e:b4:c6:96:a5:f3:0d:ae:d9:e5:4a:99:5c:
         75:51:a2:d0:53:10:47:1f:85:82:65:2c:ce:34:41:b7:be:e1:
         e3:61:ce:ee:a6:32:56:5e:d4:9c:9c:78:fc:e7:35:f5:a8:bf:
         29:48:d3:30:8a:b9:d7:6a:05:13:63:35:90:08:7c:40:60:20:
         52:26:09:03:b3:b2:d0:a2:32:eb:6f:af:cb:56:ce:3c:88:56:
         26:d8:d4:c2:c6:f0:fc:25:42:0d:d1:48:4c:45:85:a0:ac:ed:
         8f:8c:81:a6:60:2d:79:78:40:c5:2b:65:5b:03:46:99:e2:35:
         03:b3:5e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:02:43 2026 by rpki-client