Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/EtgqJUhnpS5oDkEbv_WrwgrNYjo.mft
File:                     EtgqJUhnpS5oDkEbv_WrwgrNYjo.mft (raw, json)
Hash identifier:          AH2mq7inO5ncziI9WiyeKqXCWkRDmETZbU9/BBYm8zs=
Subject key identifier:   AB:AD:B5:FE:3D:83:C6:0B:E9:58:01:8C:24:37:1B:7D:B3:97:4A:61
Authority key identifier: 12:D8:2A:25:48:67:A5:2E:68:0E:41:1B:BF:F5:AB:C2:0A:CD:62:3A
Certificate issuer:       /CN=12d82a254867a52e680e411bbff5abc20acd623a
Certificate serial:       01A05667815E6E71E17BC29B0503CE6E4EAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EtgqJUhnpS5oDkEbv_WrwgrNYjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/EtgqJUhnpS5oDkEbv_WrwgrNYjo.mft
Manifest number:          A6
Signing time:             Mon 31 Aug 2026 06:00:18 +0000
Manifest this update:     Mon 31 Aug 2026 06:00:18 +0000
Manifest next update:     Tue 01 Sep 2026 06:00:18 +0000
Files and hashes:         1: 0CXMCUKQ4CdjBlvAt5pm0hEnETo.roa (hash: q7VCvKAGi9XQDJti9raevgXGzbHYgG1g/0cCScoRD+k=)
                          2: 2Z06w-6aRdtV0QK4J8t70JdDrjs.roa (hash: k7e4lEr8W/EMx7CcjgiyyJjZ/itKU+JMkO7hCLhiTdA=)
                          3: EtgqJUhnpS5oDkEbv_WrwgrNYjo.crl (hash: hO4bmKluV7OtLtX022vOAnPzdxBl4mNlB2BW3/YM9BU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/EtgqJUhnpS5oDkEbv_WrwgrNYjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/EtgqJUhnpS5oDkEbv_WrwgrNYjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EtgqJUhnpS5oDkEbv_WrwgrNYjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Sep 2026 06:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:56:67:81:5e:6e:71:e1:7b:c2:9b:05:03:ce:6e:4e:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12d82a254867a52e680e411bbff5abc20acd623a
        Validity
            Not Before: Aug 31 06:00:18 2026 GMT
            Not After : Sep  1 06:00:18 2026 GMT
        Subject: CN=abadb5fe3d83c60be958018c24371b7db3974a61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a0:65:bc:76:7e:4d:2b:19:a4:25:81:71:fd:
                    58:86:06:c8:ac:69:cb:09:8d:75:80:d2:80:39:fc:
                    84:34:80:c8:f6:1e:04:f8:9b:c6:09:8f:d5:dd:31:
                    47:c8:59:cd:e8:e9:ad:7e:f2:3a:27:0c:d2:14:dc:
                    1a:16:d0:73:73:17:1a:18:99:91:8c:04:74:8b:1c:
                    6e:41:1e:d1:48:8c:38:19:af:05:43:97:30:16:d3:
                    39:61:b9:51:52:e2:0a:05:84:a7:e8:a3:c6:1e:59:
                    1d:22:21:87:dc:27:9c:b6:7a:bc:2e:65:5a:25:26:
                    09:52:76:8d:04:b4:c8:5c:f5:81:ce:04:5c:01:a0:
                    0d:a6:fb:51:d4:02:44:76:a1:e5:ec:27:64:19:eb:
                    72:be:a5:57:df:a1:be:09:b3:d6:d6:75:62:50:97:
                    40:6e:8f:70:eb:f9:80:af:a0:9f:92:f7:43:42:bb:
                    54:e3:f4:63:7f:f0:38:97:fd:9b:c5:d9:1c:1c:c0:
                    01:0d:c7:11:f6:9e:9b:fa:5c:db:a8:3c:0e:b0:c1:
                    0b:73:00:8d:b6:44:7e:fb:f2:5f:db:43:f6:35:0f:
                    6d:41:f3:f8:0b:e4:86:da:e4:17:f8:b8:3f:c7:7a:
                    3a:27:de:7e:ab:a0:26:23:33:b9:fc:f3:fa:98:ff:
                    ce:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AD:B5:FE:3D:83:C6:0B:E9:58:01:8C:24:37:1B:7D:B3:97:4A:61
            X509v3 Authority Key Identifier:
                keyid:12:D8:2A:25:48:67:A5:2E:68:0E:41:1B:BF:F5:AB:C2:0A:CD:62:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtgqJUhnpS5oDkEbv_WrwgrNYjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/EtgqJUhnpS5oDkEbv_WrwgrNYjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/EtgqJUhnpS5oDkEbv_WrwgrNYjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:7e:82:12:e1:5b:f9:ce:b9:62:90:55:aa:53:8b:42:53:6b:
         44:4f:b3:25:13:23:99:01:c9:fd:8d:6e:cb:e9:a8:e1:3c:4a:
         9d:46:ce:0a:b7:ed:3d:9a:c6:1f:bd:ce:aa:af:e9:02:9a:45:
         2d:bd:a0:0a:55:84:13:25:74:21:91:80:62:1e:c1:57:54:46:
         b1:7a:54:83:0e:00:b5:12:86:c3:21:25:92:fb:1f:9c:1b:7c:
         eb:2e:2c:db:19:f1:d0:9c:1b:38:e8:96:21:aa:46:3d:7a:6d:
         5d:07:bb:f8:3c:ce:ae:24:9f:6b:a2:9d:bf:fa:31:b3:c5:70:
         49:04:5d:a0:4c:fe:d6:a7:28:a4:88:f9:b3:6f:04:34:7e:7b:
         b7:0a:b9:dc:25:8e:c0:29:0f:d0:27:54:0b:59:4d:b4:8f:9c:
         4f:02:74:9c:a3:d3:e7:a3:bb:04:9b:4b:f4:3d:7a:81:a0:89:
         b7:f8:05:5b:68:39:11:f0:16:61:f8:08:44:08:b3:f6:2a:0f:
         37:6e:2d:49:bf:af:88:46:a8:4c:bd:8b:3d:c4:7e:d1:21:fa:
         97:2c:62:b1:2b:83:f4:03:00:8f:4d:38:71:65:b3:0b:f0:c1:
         7e:2d:69:cb:22:df:56:97:b5:67:95:80:bc:d2:f0:b1:37:8c:
         19:31:12:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:12:35 2026 by rpki-client