Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
File:                     inuFwxZYaxmdJr_Ej-JZiTnLb94.mft (raw, json)
Hash identifier:          zbXVCZZ5O2i6OfWvb6Y6tcu7529T+bVgRnIQQ+oAxM8=
Subject key identifier:   BD:7A:05:CA:6B:35:DF:60:4B:07:E1:F2:62:12:01:DF:22:CE:3B:2B
Authority key identifier: 8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE
Certificate issuer:       /CN=8a7b85c316586b199d26bfc48fe2598939cb6fde
Certificate serial:       01A01A52F5F45D7B15EB651E79CA72CA0368
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
Manifest number:          1A0D
Signing time:             Wed 19 Aug 2026 14:00:39 +0000
Manifest this update:     Wed 19 Aug 2026 14:00:39 +0000
Manifest next update:     Thu 20 Aug 2026 14:00:39 +0000
Files and hashes:         1: b2w6O9WirtRCdzK66va1rPliDCM.roa (hash: stbRk0sxdQicjLZT3kCAibpOrHEkv6FoTLisoOLFpLg=)
                          2: inuFwxZYaxmdJr_Ej-JZiTnLb94.crl (hash: IFwsB3tXX0400aUiEfuPQ35+D4czcP2j3T391XEQkaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 20 Aug 2026 13:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:1a:52:f5:f4:5d:7b:15:eb:65:1e:79:ca:72:ca:03:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a7b85c316586b199d26bfc48fe2598939cb6fde
        Validity
            Not Before: Aug 19 14:00:39 2026 GMT
            Not After : Aug 20 14:00:39 2026 GMT
        Subject: CN=bd7a05ca6b35df604b07e1f2621201df22ce3b2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:33:b6:bf:1e:9a:5c:03:ce:04:3d:0a:8b:15:
                    f2:e9:31:5c:51:9d:7a:4b:d9:69:31:b6:60:c3:27:
                    4d:54:f4:10:b7:24:3a:b1:e7:81:08:d9:09:66:61:
                    ca:6c:87:8b:58:0b:ff:5b:29:e0:0d:9c:ff:6f:5c:
                    f3:50:9a:d8:c8:63:93:a6:c1:65:1b:1f:08:2d:4d:
                    7d:44:9f:ef:c6:56:fb:d5:48:47:53:d4:d6:5e:ad:
                    00:a0:85:0e:1e:1f:2d:31:c4:00:39:ad:31:68:d5:
                    b0:1c:2f:b6:db:d8:10:38:bc:42:42:08:76:66:be:
                    ba:4a:fe:d6:fa:a0:7c:ec:d4:30:68:e7:5b:23:7b:
                    ed:20:cb:cd:8f:32:e0:5e:5b:d8:98:e5:5a:35:bc:
                    ec:58:f9:a5:c2:fc:48:9e:23:b4:70:db:c1:95:88:
                    ce:3d:75:d7:c0:9b:8e:47:e2:a7:15:dc:20:bd:82:
                    3c:4c:91:ce:0f:09:c7:83:f1:f9:d5:ce:80:87:a8:
                    63:13:44:83:83:e2:6e:39:37:07:a4:59:a4:f4:2a:
                    5e:49:07:4d:fc:0f:8a:0c:8a:2e:5b:84:e4:57:9e:
                    2a:51:83:64:6e:a0:13:f8:af:fc:89:ea:88:e2:9b:
                    8f:ef:97:96:84:76:29:06:80:c4:93:cd:b5:de:f9:
                    74:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7A:05:CA:6B:35:DF:60:4B:07:E1:F2:62:12:01:DF:22:CE:3B:2B
            X509v3 Authority Key Identifier:
                keyid:8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:5e:37:84:9c:ee:59:f1:5b:2c:84:1b:c6:9a:7f:35:a6:a0:
         f4:17:f5:81:30:25:f7:63:96:8d:a5:2c:10:04:9f:50:3e:ca:
         55:e9:ed:0e:41:03:0e:52:46:83:9d:c3:7d:dd:01:46:88:3e:
         86:c9:0c:e3:40:b0:f1:b3:ca:de:44:31:4b:40:78:9b:60:87:
         f3:28:af:20:fa:97:1c:b2:fc:90:50:4d:a2:b6:c3:b2:5f:a0:
         60:8d:f3:fe:2f:42:3e:c0:44:59:f5:a9:bc:db:0f:66:e6:ef:
         32:90:d5:a6:10:77:26:67:85:d9:ca:b9:1d:19:66:f6:24:2c:
         f6:ae:ea:d7:dc:c4:3d:e4:af:f5:aa:54:e7:cd:26:5d:f1:9a:
         f0:d1:9a:56:42:2f:c0:39:c9:d9:50:74:54:19:81:bd:70:0a:
         2e:e8:2f:44:a0:14:80:69:9f:88:70:c1:aa:2e:22:8c:91:f5:
         b0:30:1c:40:7f:45:7d:27:c9:ee:95:72:42:5c:a9:32:d8:cf:
         06:84:ac:38:ed:1f:fa:ae:5e:29:ff:52:ae:16:8a:b1:43:d2:
         53:df:ea:28:81:db:3d:51:a8:ed:c7:87:e1:96:33:b6:79:6d:
         1e:c8:62:a7:d9:3c:ef:9b:6e:dd:76:ea:ac:e2:8e:56:9a:ec:
         73:2b:81:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 21:40:41 2026 by rpki-client