Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft
File:                     a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft (raw, json)
Hash identifier:          r6zKAvOFrNiEanzVZfhjmgqcg/1rUDA8fXq24VA6W7Y=
Subject key identifier:   C8:76:16:A3:95:56:62:FF:B8:19:A4:32:3E:53:38:6A:82:BF:7E:F2
Authority key identifier: 6B:96:6A:78:00:33:37:99:D7:CD:82:0E:30:97:11:64:73:CA:42:EB
Certificate issuer:       /CN=6b966a7800333799d7cd820e3097116473ca42eb
Certificate serial:       019FF9B62A04452157F0615AD6A6353CF7FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a5ZqeAAzN5nXzYIOMJcRZHPKQus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft
Manifest number:          0131
Signing time:             Thu 13 Aug 2026 06:01:32 +0000
Manifest this update:     Thu 13 Aug 2026 06:01:32 +0000
Manifest next update:     Fri 14 Aug 2026 06:01:32 +0000
Files and hashes:         1: WrUWqB5jJeFqCbC5EXq-ks26-Bo.asa (hash: F2DPSfLQYJyDePcz+eV6IzbvmlLEE0e2BJutA3Z+nlQ=)
                          2: a5ZqeAAzN5nXzYIOMJcRZHPKQus.crl (hash: TnraxNQDq28AP0T675ZplV5ppfU5SZqlQwbTAPAiGkc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a5ZqeAAzN5nXzYIOMJcRZHPKQus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f9:b6:2a:04:45:21:57:f0:61:5a:d6:a6:35:3c:f7:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b966a7800333799d7cd820e3097116473ca42eb
        Validity
            Not Before: Aug 13 06:01:32 2026 GMT
            Not After : Aug 14 06:01:32 2026 GMT
        Subject: CN=c87616a3955662ffb819a4323e53386a82bf7ef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ae:f3:be:8c:87:33:15:b5:07:e2:6c:de:1e:
                    d7:8e:bc:c8:6a:16:0f:cf:66:39:ad:10:65:59:87:
                    bb:08:b3:4c:2b:53:45:a8:b7:38:ab:9e:07:e7:8b:
                    fe:b1:06:01:6e:4d:cb:03:c4:1d:38:5b:a1:bf:cf:
                    8d:ce:0e:f8:5e:4b:75:2b:73:e2:ee:5c:8f:c0:fc:
                    98:d9:df:f4:6d:ea:81:02:66:f0:67:d4:57:80:c6:
                    84:fd:c6:bb:4c:ba:20:45:6d:70:df:f8:92:a3:02:
                    8b:ea:7e:e0:03:f3:cc:aa:e7:bf:97:a5:85:dd:36:
                    70:ed:ef:74:c1:40:e7:73:a4:38:a9:5f:ce:d3:37:
                    1e:96:99:9a:71:9f:af:b2:59:29:7d:02:a4:83:48:
                    87:26:0c:dd:31:15:33:53:ef:0a:e2:79:93:f0:09:
                    01:7a:4d:4f:12:f6:7a:63:6d:71:cb:23:ee:f7:f9:
                    a2:cb:37:89:16:52:fd:10:a0:e5:55:8a:5e:b3:9b:
                    f1:fc:76:5c:a4:53:e0:b4:c4:1a:61:38:13:1b:e7:
                    ec:32:55:bc:96:9e:f5:87:4a:f6:00:15:c2:ec:7c:
                    19:da:cd:67:51:ab:1c:e0:e0:c7:b2:23:09:97:3b:
                    dd:9d:68:2f:93:16:52:b9:e4:5e:55:43:fe:ce:d9:
                    b3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:76:16:A3:95:56:62:FF:B8:19:A4:32:3E:53:38:6A:82:BF:7E:F2
            X509v3 Authority Key Identifier:
                keyid:6B:96:6A:78:00:33:37:99:D7:CD:82:0E:30:97:11:64:73:CA:42:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5ZqeAAzN5nXzYIOMJcRZHPKQus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:1d:80:3c:04:32:07:ec:8e:8b:cc:1f:90:09:b0:36:0a:43:
         80:62:9e:2a:34:3f:dd:06:1d:e3:4e:a1:d4:53:7d:ff:31:b3:
         c6:54:6d:03:15:12:5e:68:85:74:4f:0e:2b:06:fc:ad:be:69:
         5f:b2:54:53:3f:ee:45:cf:d4:d1:82:50:23:f4:ce:c6:7c:05:
         43:75:ce:a5:cb:22:26:70:ba:83:cb:6f:ec:94:6c:18:4b:f1:
         94:9f:24:73:b3:4a:cb:d8:89:ab:c5:49:8e:b0:0d:70:72:d9:
         b4:59:41:e2:34:dc:75:d8:0d:82:96:79:8a:b6:af:b9:c8:06:
         c9:42:22:a6:f1:b1:9b:05:3b:23:dd:ee:10:d9:93:0c:dc:cd:
         3b:99:32:60:28:ae:22:a6:b6:15:61:ba:fe:0a:8a:39:ab:6b:
         b9:db:f0:7d:fa:e2:51:33:11:22:a0:2f:54:8d:e3:0f:f8:70:
         83:12:cb:4b:4d:68:3f:ed:27:7d:32:a3:2d:44:7a:7d:7c:63:
         65:78:e6:9d:35:76:9d:31:7e:f4:ab:99:ca:85:34:6a:54:d4:
         40:31:ec:0f:95:f8:59:e3:81:1f:51:77:c8:54:01:2b:36:16:
         ab:8e:f3:99:ef:6c:94:6e:4c:5c:fc:20:f0:52:f1:86:40:99:
         82:5a:e5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:03:31 2026 by rpki-client