Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
File:                     fVAuLSSx8haRMIggeiaOZiawzjk.mft (raw, json)
Hash identifier:          sVnRlyKDJCGWYVMNuJsPvwGJJZvA54E+Q1Y/pPpBYGc=
Subject key identifier:   42:92:65:E2:52:BE:CB:0C:20:EA:0A:F5:63:3D:8D:FE:94:87:15:6F
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Certificate issuer:       /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial:       01A039DE9582A3A587BEFFD7D24BD309E765
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
Manifest number:          1A25
Signing time:             Tue 25 Aug 2026 17:01:23 +0000
Manifest this update:     Tue 25 Aug 2026 17:01:23 +0000
Manifest next update:     Wed 26 Aug 2026 17:01:23 +0000
Files and hashes:         1: Jdd-cmX87aL_jT8gx7H2pzeD9rg.roa (hash: rEF/W/6Z+pZc6KaImTNeG/JyJNxyLCm8rc9VcoK/X0o=)
                          2: RXhERJYF9F3xyAQUzqPLF6e3zPE.asa (hash: +udagM0kkzwnlijwfgUtOgl4NvTaL2YpS35XybC3JA4=)
                          3: Vcs9QSjV2KVE3rPf-2ljsZO4_Q8.asa (hash: yoP5UGd9Isi8iSG9JXG0GRxBp5+VrDnOmOlRk93yWB4=)
                          4: fVAuLSSx8haRMIggeiaOZiawzjk.crl (hash: KBQnF6Cdrg71KdabGNGyCmV4asbI22adZFbAKySCYsM=)
                          5: gFOjbWB7I_w-vrenN-Bunfa99k4.roa (hash: jwgceh/3ITVpquNuTB6w5OIjCduknP3STqxn7Za9hOo=)
                          6: qICYlqQKnUp69sPFBkSudA-GEjQ.roa (hash: lj3RVVuEbPd9/CqRy/WnF37Zb0OlvVGPlQOnHzEZNs8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Aug 2026 14:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:39:de:95:82:a3:a5:87:be:ff:d7:d2:4b:d3:09:e7:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
        Validity
            Not Before: Aug 25 17:01:23 2026 GMT
            Not After : Aug 26 17:01:23 2026 GMT
        Subject: CN=429265e252becb0c20ea0af5633d8dfe9487156f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b7:ce:54:93:bb:19:9c:eb:a1:4e:57:4c:27:
                    82:69:af:17:fd:3b:f5:93:18:70:82:47:77:18:41:
                    c5:2f:8b:63:a1:6e:52:a0:97:4f:a0:b7:c6:72:88:
                    dd:4e:d3:35:00:94:20:b8:c3:c6:33:5a:3b:ab:66:
                    5c:7c:98:f2:54:c4:ef:59:bc:7a:77:92:40:cd:bd:
                    57:18:d5:51:b4:56:31:10:ab:6e:a6:d9:98:a4:a6:
                    dc:e9:f1:1d:43:bd:1e:28:06:ab:27:6c:f7:d3:5c:
                    78:37:46:5a:e8:06:2b:86:f9:e5:9a:8d:fa:ea:7c:
                    10:23:c8:75:6f:ac:6b:4e:55:91:4c:71:8b:77:bc:
                    e6:ee:54:c4:15:5d:6f:ef:04:c9:f4:75:dc:a7:ac:
                    64:df:9a:1b:4a:3f:21:c9:46:89:8d:5f:5a:e2:cd:
                    80:cf:9d:a0:eb:a0:c1:75:ca:c7:3c:25:91:ca:f8:
                    d9:7e:af:71:bd:96:c3:5c:2e:f6:fa:e3:37:ab:29:
                    a3:74:ae:f6:a1:f9:6b:8a:cb:32:9c:1c:d8:f2:2d:
                    b2:ee:e3:39:3d:68:b9:73:fb:6a:47:26:d5:b2:4d:
                    eb:bd:10:85:4f:16:34:3e:db:04:0d:72:50:5c:46:
                    99:a2:49:55:40:94:7d:36:4e:56:35:86:67:a6:d4:
                    dd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:92:65:E2:52:BE:CB:0C:20:EA:0A:F5:63:3D:8D:FE:94:87:15:6F
            X509v3 Authority Key Identifier:
                keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:39:96:f8:91:a0:74:91:54:2a:bc:23:d4:b6:6d:b3:74:e8:
         f3:38:04:30:ba:75:90:b9:9e:18:dd:e0:e6:21:af:27:01:b6:
         9c:4d:f6:66:b6:ac:e4:ad:63:07:fc:86:c4:ed:b5:94:a0:e2:
         ac:8b:6e:65:ca:b7:b7:ea:8f:4f:00:81:55:ec:67:ac:34:e4:
         24:7a:2d:36:08:dc:62:dd:39:30:bf:52:83:b8:8b:ab:ba:09:
         38:cb:33:3a:9f:15:4f:4c:d1:9e:ff:c3:c8:53:f0:3c:90:57:
         2d:94:a7:59:00:12:07:05:33:54:a7:27:9a:ec:92:19:32:86:
         44:e4:be:ff:aa:29:31:a1:a2:e1:f4:2f:66:db:4e:8c:61:29:
         38:a0:e3:d6:6b:41:a4:c7:01:2c:a9:42:2a:03:bc:f8:75:c0:
         a7:14:b3:cd:65:1a:4a:f8:43:81:f6:7d:15:df:36:26:f4:32:
         c6:9d:60:68:99:29:77:a3:e6:e1:2a:c7:5b:c4:c4:9a:0a:a8:
         f4:ff:b7:7a:54:85:b3:29:4c:31:33:1f:ed:8c:0a:e8:d4:c6:
         5e:9d:88:d6:36:a3:9f:8e:05:88:3a:0c:33:03:e4:d8:8f:d7:
         b7:d3:20:03:98:e9:1f:f5:90:c0:33:d3:ae:f0:0b:6f:69:91:
         26:38:ea:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:42:31 2026 by rpki-client