Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
File:                     0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft (raw, json)
Hash identifier:          H1rjQJxQsg9ONAK+fPwxOpba0mI1ZczQydDOxmMfjEI=
Subject key identifier:   55:33:DA:77:07:E7:B7:BE:25:D2:18:C6:6B:CE:0C:24:04:A4:D4:CC
Authority key identifier: D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A
Certificate issuer:       /CN=d2075c84f529c87dd85fd4afea4e0934366af54a
Certificate serial:       01A00213CA06AB976E47FB2CCDD6B9427AC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
Manifest number:          1A02
Signing time:             Fri 14 Aug 2026 21:00:46 +0000
Manifest this update:     Fri 14 Aug 2026 21:00:46 +0000
Manifest next update:     Sat 15 Aug 2026 21:00:46 +0000
Files and hashes:         1: 0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl (hash: WJAg+x8CMoRG1iHTt2LKo2rZDSW51ps+wopUVLiTCJ8=)
                          2: 3v7_pd6AxduDKiF3xKgJGqymEqk.roa (hash: g+W/JVcPBEoaHA81/G0plL5WOD+5LjCl2XGzLzB5NuI=)
                          3: O6eW5NgA4SYtR0QdMpos9kGVbx8.roa (hash: vNWr6WjAQo4/b29D3hI5zGTafpoZZFqPo9hkvS1ZF+M=)
                          4: rVuwmGnwYv_V6whaEGlCtt_t-jU.roa (hash: eOWfhOukOgYiBn4QdoGi9zhMMnx1blKy6/IzloDdoFI=)
                          5: sz2hM6b0kWi5lGSZOx8xQWLEDac.roa (hash: WNOAe/3pRo5H7hWt2dUEHtw/6Zr0ujDafm8V0QNv03k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:13:ca:06:ab:97:6e:47:fb:2c:cd:d6:b9:42:7a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2075c84f529c87dd85fd4afea4e0934366af54a
        Validity
            Not Before: Aug 14 21:00:46 2026 GMT
            Not After : Aug 15 21:00:46 2026 GMT
        Subject: CN=5533da7707e7b7be25d218c66bce0c2404a4d4cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:93:df:08:28:6a:ed:ce:a8:91:16:c8:05:e6:
                    4f:da:06:12:89:61:32:14:1e:cb:ee:95:ce:f9:19:
                    64:81:da:1d:45:7a:c0:0f:41:1a:d9:65:ff:a4:73:
                    41:67:f9:3d:e8:0b:d4:05:c3:13:83:d8:52:99:78:
                    10:c1:9b:4f:53:32:7a:e0:32:f0:c0:bd:3f:51:7a:
                    cc:d5:6a:ef:5a:1b:75:68:a7:44:9e:84:3f:4c:d7:
                    ae:4b:7e:a5:8d:de:84:fa:bd:0b:9c:e4:65:7e:a4:
                    d1:39:b5:c8:f3:26:1e:7e:99:5d:75:0c:97:24:c9:
                    31:83:3e:ec:91:e8:50:82:bf:c7:da:9b:87:90:57:
                    36:5a:1f:20:4a:3e:99:0b:78:7c:8e:0d:55:d7:98:
                    c0:54:04:a8:87:da:b4:dc:bc:19:dd:6e:ba:e9:31:
                    95:7f:d6:0b:e0:13:aa:a0:cf:40:d0:dc:87:bc:2a:
                    ec:f9:0c:40:17:e0:b0:ba:13:2e:17:a8:28:8e:3c:
                    17:8c:bd:32:af:4a:4c:07:4c:5d:ab:ce:c4:2a:3f:
                    90:a8:1c:17:6a:b1:5d:9a:ac:0b:59:9d:10:79:3b:
                    a3:9a:1a:bf:95:c0:fe:62:07:48:e7:b8:41:5a:d7:
                    c6:3e:79:41:ee:5c:7b:9a:7e:fe:ea:a7:ce:a5:d3:
                    3c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:33:DA:77:07:E7:B7:BE:25:D2:18:C6:6B:CE:0C:24:04:A4:D4:CC
            X509v3 Authority Key Identifier:
                keyid:D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:5e:c9:e2:ae:e6:e9:fc:09:85:89:04:e9:1d:04:ea:f2:2f:
         89:f7:6b:bc:95:7a:1b:7f:25:33:de:d1:6f:70:a7:da:6f:c3:
         b8:c8:a6:97:a7:c0:7c:a2:43:c2:2f:bd:59:16:69:fc:bb:58:
         56:4b:16:ef:e6:70:c9:97:fb:01:8d:6f:8f:d1:04:e3:ae:23:
         29:58:6a:9e:a5:7d:6c:c8:1e:aa:69:18:04:36:fb:31:ce:56:
         5b:72:a2:43:86:d8:4c:ca:ce:ba:28:b3:fc:91:d7:24:88:ec:
         47:69:e9:3d:d7:c8:99:02:d1:d3:05:80:60:a3:f4:99:f2:94:
         27:27:22:78:68:a8:62:ce:bf:c1:20:4f:b3:7d:b4:19:8b:db:
         81:da:d8:81:9f:f7:53:d4:50:5e:88:87:ca:9d:fd:78:fc:72:
         22:49:68:51:bf:fe:ad:54:03:f8:6f:46:e3:8c:4a:8f:28:88:
         e0:a4:2b:31:14:3a:25:3c:0d:d8:7c:2c:d6:dd:18:1b:9e:30:
         20:4f:80:3c:cb:10:11:ab:34:72:40:f2:dd:f9:4d:51:c7:1f:
         17:a8:31:58:1a:57:ee:d4:85:27:56:3e:a8:48:24:26:db:0f:
         a4:08:a9:b9:f6:69:54:2d:b4:e8:86:c5:8d:33:a0:d0:30:9a:
         66:70:fe:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:16 2026 by rpki-client