Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
File:                     rHZwaYz67yZH-8mgb3OAhW4rMCc.mft (raw, json)
Hash identifier:          q1hZdU6LS3BHmnZCeZxi50VbLAsSb9rgglA13D+N96g=
Subject key identifier:   63:60:3C:9E:6D:97:12:B4:80:A8:E4:96:4E:9E:A2:79:70:26:58:68
Authority key identifier: AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
Certificate issuer:       /CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Certificate serial:       01A003265BB771033C46CE58BD9FBBE7B5A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
Manifest number:          1406
Signing time:             Sat 15 Aug 2026 02:00:40 +0000
Manifest this update:     Sat 15 Aug 2026 02:00:40 +0000
Manifest next update:     Sun 16 Aug 2026 02:00:40 +0000
Files and hashes:         1: 78S8nE6Tm2eyNILoxKvxde4Vz9M.roa (hash: De0jNoDO/oGRJ4a6g4u6FT5jq9eDCmf8xJF8vAvJsw8=)
                          2: ETi6rBv0jmHDZMdhavHXc91w57c.roa (hash: dIyT+dh+7DYUIlNnbK/CAN49jDHLvDXQ+GqXfT4OXIo=)
                          3: gWaiPpc-ErbrGrjl088t2bSjcmw.roa (hash: +36r0vrza5GiEw8n2IFtXKbk5Cn4yPm/AaonUOboqEk=)
                          4: rHZwaYz67yZH-8mgb3OAhW4rMCc.crl (hash: NODUUuOi6URlo2pPCBTBMVOaPr7gSyqfN+jAbHE7UdM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:26:5b:b7:71:03:3c:46:ce:58:bd:9f:bb:e7:b5:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
        Validity
            Not Before: Aug 15 02:00:40 2026 GMT
            Not After : Aug 16 02:00:40 2026 GMT
        Subject: CN=63603c9e6d9712b480a8e4964e9ea27970265868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ff:de:78:09:38:28:49:33:54:00:39:d3:ff:
                    ca:0c:44:95:9e:93:a4:33:04:ae:9b:cb:c5:61:be:
                    a1:20:5c:b8:33:2a:52:a1:a7:d6:be:a8:fc:28:a0:
                    81:27:e5:66:45:98:23:ea:30:07:d9:e9:2e:73:23:
                    26:b6:59:ce:5f:5d:24:8e:89:2b:3f:08:9e:34:4b:
                    a2:75:a3:c1:64:c3:ab:a5:88:d9:82:96:20:c3:0c:
                    a9:b6:9d:80:57:b8:11:5e:85:dd:7b:0e:c5:c0:26:
                    29:12:cf:ca:cd:62:44:6b:77:a6:87:bf:e2:f4:ec:
                    64:59:b2:0c:5a:d6:7e:5c:41:d3:9b:bf:0d:4d:fa:
                    cb:8e:99:82:dc:b0:92:9a:14:d3:85:48:1f:92:e1:
                    cf:3b:c0:59:9e:60:73:66:1d:15:fc:70:17:9d:b8:
                    87:26:9a:15:3a:cd:5f:79:ff:52:fe:8c:ef:35:bb:
                    17:00:19:50:23:b7:97:d1:03:f0:4e:4d:0b:bb:20:
                    b2:35:dd:51:28:dc:81:6b:bb:6d:40:b4:4d:29:5a:
                    fa:32:e2:51:b9:e4:52:ac:f2:c8:5c:76:3a:49:28:
                    20:aa:45:d0:c4:37:c1:20:f5:ba:3e:f6:83:ba:5c:
                    8f:22:c4:cf:40:dd:b6:dc:ce:77:b1:0a:84:4e:4b:
                    56:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:60:3C:9E:6D:97:12:B4:80:A8:E4:96:4E:9E:A2:79:70:26:58:68
            X509v3 Authority Key Identifier:
                keyid:AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:be:b1:20:ea:5b:56:93:1b:e9:39:6c:82:04:f1:cc:82:6e:
         7c:24:78:1d:a9:8d:0f:0f:bb:0e:49:e8:a4:ac:88:73:d9:5c:
         72:38:37:be:30:23:d6:de:a3:bb:42:27:9d:fc:3a:38:3e:0c:
         c9:dc:19:89:62:7c:6b:7a:b6:4e:f6:6c:a2:b8:9d:db:88:53:
         f3:4f:9b:d6:12:0f:a2:69:05:4d:0a:29:d5:6f:e3:0a:93:ef:
         21:fd:ea:bd:b8:cc:2a:eb:fa:09:9c:2b:e5:38:b3:95:ab:5b:
         05:48:f8:39:95:14:2f:51:a4:02:fd:cb:cd:03:de:be:09:a4:
         9b:76:29:e9:8d:46:a6:0a:96:36:ab:87:a7:a4:ac:bd:cc:40:
         e1:63:36:df:37:44:6b:19:c7:5c:f6:d4:6b:bd:f4:e4:54:6d:
         26:7f:73:7b:c6:3a:b0:d3:8c:bb:25:ad:66:db:24:60:4d:c9:
         fa:db:37:d2:a6:84:94:6e:fb:f9:90:b8:92:6e:68:e2:c0:1d:
         e2:3c:9d:20:3f:85:f4:2b:43:3d:33:dd:a0:78:5b:0a:43:4b:
         54:4a:d2:31:c3:03:74:38:49:ab:eb:da:97:fe:66:fb:6c:39:
         0d:84:ba:a0:2a:e1:42:46:f4:b3:76:fb:28:d5:ae:02:15:73:
         0b:06:31:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:08:03 2026 by rpki-client