Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
File:                     rAhSr1qOQ2stTacukrZBFOH00V8.mft (raw, json)
Hash identifier:          xSnF2Cuk9hY2WSEAVcDeQaD4w/IuBdu5Yz+A2rATJfo=
Subject key identifier:   66:C3:B2:0F:56:C3:40:A7:F1:1D:51:BA:20:AB:11:50:75:60:49:60
Authority key identifier: AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
Certificate issuer:       /CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Certificate serial:       019FF9B6C906F4A3B5F652F506E4A90B1782
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
Manifest number:          0979
Signing time:             Thu 13 Aug 2026 06:02:13 +0000
Manifest this update:     Thu 13 Aug 2026 06:02:13 +0000
Manifest next update:     Fri 14 Aug 2026 06:02:13 +0000
Files and hashes:         1: RYjmwwSeitE7YflGQ-BXVuEOw-Y.roa (hash: +mZHJEVEx50dKyXD00LKvcDkY+DRVgSg2B5Jqah+/wo=)
                          2: rAhSr1qOQ2stTacukrZBFOH00V8.crl (hash: FhxMma4DzvmjXisNErdWvGy8v/EZL3wgxHmfKQD9xL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 06:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f9:b6:c9:06:f4:a3:b5:f6:52:f5:06:e4:a9:0b:17:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
        Validity
            Not Before: Aug 13 06:02:13 2026 GMT
            Not After : Aug 14 06:02:13 2026 GMT
        Subject: CN=66c3b20f56c340a7f11d51ba20ab115075604960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bc:2f:26:51:a1:c9:ab:8e:92:de:b6:3f:e3:
                    e8:a0:a4:ea:72:ef:60:80:b3:b0:72:da:82:f4:f6:
                    24:5e:6f:91:c4:db:31:12:80:7e:2c:f7:4e:27:1a:
                    8c:3c:2f:92:0d:94:c4:7b:ff:49:2b:2c:df:a5:4d:
                    3f:23:99:77:d1:f0:88:67:ba:25:36:d2:96:71:47:
                    ad:9d:c2:c3:4e:08:bc:92:49:ff:41:30:fb:14:d1:
                    94:d7:62:6f:38:10:31:e0:64:75:1d:5b:7d:1e:27:
                    f8:61:44:f2:0e:71:21:67:fd:91:dc:8d:6c:2e:84:
                    36:ec:db:d8:cf:cb:d0:30:aa:b9:9c:3e:f0:ea:62:
                    38:6b:84:07:de:61:ef:f7:5c:6f:56:9d:3d:53:87:
                    07:34:8e:97:30:82:19:56:ca:cb:7e:21:ab:32:ff:
                    be:b4:e8:50:a6:8e:6b:95:32:90:38:bb:a2:cf:28:
                    de:38:97:a8:c7:71:52:71:6b:4e:50:fd:41:14:25:
                    85:b2:28:b6:4f:67:c8:2e:f4:db:6b:91:af:17:49:
                    9f:71:44:96:52:f6:9d:42:fe:2f:e0:dc:c2:61:55:
                    30:7a:20:81:21:1c:d5:98:b1:ef:69:e3:d7:a6:e1:
                    e1:8c:30:b0:e1:7d:4f:e5:b5:96:2b:59:6b:20:25:
                    94:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C3:B2:0F:56:C3:40:A7:F1:1D:51:BA:20:AB:11:50:75:60:49:60
            X509v3 Authority Key Identifier:
                keyid:AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:28:68:35:04:72:59:8c:57:04:44:93:6a:b2:7b:8d:af:34:
         66:18:0f:58:41:aa:ca:5e:49:7a:59:e6:ce:80:8e:df:79:f5:
         99:87:5a:c9:84:ba:ee:da:e4:31:d7:c0:98:75:2d:fc:7e:48:
         1a:56:28:82:c9:d1:33:b6:42:16:ed:b4:f0:d2:b1:38:a9:ef:
         37:69:ed:0f:b4:f8:96:1c:69:fe:88:3d:23:7e:2b:22:35:60:
         1b:73:bd:ca:a4:a8:90:e7:56:b9:02:9e:89:75:11:b3:ed:89:
         5f:47:de:76:ed:26:81:46:f7:e2:c4:5a:8c:38:20:7c:5d:ea:
         94:84:09:31:f6:6c:5b:0b:5c:a9:b9:19:0f:40:16:6f:a5:b3:
         f8:4d:a6:b4:bf:25:8a:25:bd:25:e2:e9:68:11:28:57:d9:a8:
         76:13:8b:d7:c6:84:6b:31:c4:50:11:88:e6:69:da:c8:55:ea:
         8d:18:dd:40:86:f5:6f:e8:0c:23:2d:a3:ec:79:c5:16:45:0f:
         e5:7c:fc:90:94:59:af:0a:53:cd:6e:19:6f:ce:d1:8b:9c:70:
         52:45:09:cb:4e:c1:0d:80:c3:90:6e:d6:b3:3f:00:bb:4e:ad:
         49:6b:97:ec:94:c6:f1:6b:29:34:9f:f9:3c:85:64:8a:30:53:
         b5:63:e6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 14:21:14 2026 by rpki-client