Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
File:                     2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft (raw, json)
Hash identifier:          WrQz9ggawvQakNp0V7aoL1dOSYjkZtn5s/aaS3n4zZ0=
Subject key identifier:   7F:86:D4:8E:F1:C3:E7:C9:43:0E:50:C8:CF:43:24:14:6C:E3:76:53
Authority key identifier: DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
Certificate issuer:       /CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Certificate serial:       01A00213C1A556A3A3374FFDF47D0D2B8E9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
Manifest number:          08B2
Signing time:             Fri 14 Aug 2026 21:00:44 +0000
Manifest this update:     Fri 14 Aug 2026 21:00:44 +0000
Manifest next update:     Sat 15 Aug 2026 21:00:44 +0000
Files and hashes:         1: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl (hash: 1bLKjviErA3fHg4gz/9K+pHwPJxHbli2pn7au74+Ij4=)
                          2: GxtZLx_v4ZawHyhAp_9x0t2x-Bc.roa (hash: dCxYAJ2dCEl4aeNXHPw7bhwKpVSx+0iwsl5Y1tfVG2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:13:c1:a5:56:a3:a3:37:4f:fd:f4:7d:0d:2b:8e:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
        Validity
            Not Before: Aug 14 21:00:44 2026 GMT
            Not After : Aug 15 21:00:44 2026 GMT
        Subject: CN=7f86d48ef1c3e7c9430e50c8cf4324146ce37653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0e:66:46:b1:b0:2d:32:bf:d6:9f:7d:e2:19:
                    32:00:7c:60:af:88:ea:d7:72:ce:87:39:f4:ce:a5:
                    c7:e7:a8:34:2a:b9:db:22:aa:a5:97:2e:53:fd:0d:
                    68:95:45:e7:b2:07:8e:68:3b:5f:b4:3a:01:77:1a:
                    ce:7c:9b:f9:00:34:95:bf:31:aa:b4:1c:f5:90:ea:
                    65:e7:fa:33:6d:14:a0:94:eb:7d:b2:6d:81:b5:b1:
                    ce:00:cf:56:91:bc:d2:39:b7:ea:24:89:c2:43:43:
                    07:f7:70:18:f3:c5:2c:75:81:51:08:62:f7:eb:a7:
                    d6:cf:3b:cb:c1:64:75:66:08:70:a9:2f:b3:d3:44:
                    a9:87:37:31:df:94:ba:b5:1b:6d:d0:68:64:12:cf:
                    6c:fa:01:5c:9d:fd:e3:26:7a:46:35:4f:cb:ad:90:
                    52:aa:bf:48:b4:74:a1:01:bc:7d:f0:73:d6:bf:48:
                    09:5b:56:1e:bf:76:b1:2c:73:17:07:1a:d7:31:4a:
                    f6:d4:9e:5c:d9:2e:94:09:87:c3:21:20:75:cf:a6:
                    b7:a6:5d:74:40:b3:e8:28:8d:e6:28:e2:7c:db:cb:
                    a7:d9:6b:ae:37:a0:4e:65:7b:30:75:63:da:b6:63:
                    92:32:45:97:bb:9a:f0:46:4d:b1:2a:c2:1d:1d:50:
                    cb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:86:D4:8E:F1:C3:E7:C9:43:0E:50:C8:CF:43:24:14:6C:E3:76:53
            X509v3 Authority Key Identifier:
                keyid:DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:5c:23:04:60:3f:0a:e4:0a:ae:fb:01:8b:c6:53:fe:b9:f5:
         d3:14:c5:a4:61:71:0e:89:e5:ed:a9:1a:67:cd:c1:f8:af:fb:
         45:3f:2b:c6:67:5f:7b:4b:49:4c:ce:27:cc:06:5d:fc:f3:7f:
         76:d1:7d:8a:ef:3b:4c:85:e4:55:e1:46:24:62:8e:81:2d:2e:
         bd:10:e7:16:cd:0a:6c:f0:9d:db:b5:8f:17:e1:0f:34:c4:96:
         d3:db:4f:24:f9:26:91:b5:e4:75:f4:3b:a4:57:29:44:12:f2:
         a1:5b:a6:b6:3e:a8:37:76:8f:9d:ae:d3:6e:d3:dc:6a:34:68:
         41:b4:ed:d6:05:ec:c7:83:11:2e:b6:33:eb:9b:12:ce:b5:80:
         30:e3:13:0f:cd:bd:54:ba:de:e2:4d:5e:f1:f2:29:ce:eb:59:
         a7:fa:89:e4:b7:77:e8:08:89:0b:f5:87:b7:62:e1:fd:d8:e9:
         00:d3:86:67:66:9d:76:92:79:bf:0b:e3:23:08:5f:eb:d9:74:
         a0:69:84:53:32:3f:a7:a9:27:7a:84:a3:94:d8:c1:a8:fe:a8:
         35:e1:26:d0:1a:90:20:5a:ad:3b:dc:c7:01:da:f9:c2:d8:18:
         95:db:f8:e1:7d:7a:c3:c0:b3:cc:70:c8:86:8d:3a:c3:e9:f0:
         73:2d:c1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:35:36 2026 by rpki-client