Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
File:                     rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft (raw, json)
Hash identifier:          ZNLhtnM61SuA1ivKA9aMapk+KFp7YoKJdvbfQCqc/tE=
Subject key identifier:   BE:02:70:AF:A8:38:4F:D2:88:C9:A8:A4:F0:29:1D:2F:44:C3:1D:74
Authority key identifier: AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
Certificate issuer:       /CN=af121cd6e11da095f856d79deec469d0c6358494
Certificate serial:       01A02CC7CA83185A34EC539DB059B1FC10DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
Manifest number:          155D
Signing time:             Sun 23 Aug 2026 04:01:26 +0000
Manifest this update:     Sun 23 Aug 2026 04:01:26 +0000
Manifest next update:     Mon 24 Aug 2026 04:01:26 +0000
Files and hashes:         1: Kt3WssTVExomZWHJCqXl8pbqTeI.roa (hash: sMdfEY5PN8jhtfsylFmunzan1olQaOOSvuDOe68g4ws=)
                          2: KzmoITHkJpLOR4Tlul5pobyRKM4.roa (hash: AsqRiFYDTCnKZFcWZmiW079vgPj+Gpml9bimn7NxEjY=)
                          3: LeESlSzWIvuQdTBNS-mk1tTyv7E.roa (hash: WD96tCmI2Z4zPrVkF6yX9hz40ljCQT+UIo7XuVxQtwE=)
                          4: rXLsHixYlq3Kcw9EvhZkSV4zLvI.roa (hash: xL1IzYaCYhuM2YhqoZfpmf/cRlZ3zbvhm0l28fnKcTk=)
                          5: rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl (hash: 1KOC4NKl3FpLkklrecv3ebeysyFO4B4kxmmLF/e/AKI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Aug 2026 02:32:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:2c:c7:ca:83:18:5a:34:ec:53:9d:b0:59:b1:fc:10:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af121cd6e11da095f856d79deec469d0c6358494
        Validity
            Not Before: Aug 23 04:01:26 2026 GMT
            Not After : Aug 24 04:01:26 2026 GMT
        Subject: CN=be0270afa8384fd288c9a8a4f0291d2f44c31d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:24:ca:7b:f2:aa:b2:4d:4e:30:32:04:15:fb:
                    ac:83:4c:fc:d8:f5:b4:7e:94:6f:b3:58:ab:19:f5:
                    4f:c3:09:41:1f:a3:ba:b5:31:f0:01:e6:e1:92:d0:
                    f1:f2:f8:1c:9f:1f:54:d1:17:33:49:91:7d:dd:20:
                    e9:2a:40:4e:d0:ad:7e:ce:32:cc:8f:23:5e:14:39:
                    87:f0:5d:7e:0c:3c:0a:3f:dd:40:6c:03:00:56:d8:
                    52:b7:68:54:03:76:c7:f4:37:f6:5d:39:1a:01:60:
                    43:1b:a1:e9:ed:69:74:48:0c:82:53:92:7d:3e:27:
                    dc:09:d2:9d:b7:a8:02:1d:f6:0b:5f:37:9b:9e:f9:
                    af:d2:20:68:8c:81:98:23:f0:c2:cf:0d:51:87:54:
                    b1:d3:0a:72:ee:2f:cb:a7:c4:df:68:8c:ca:cc:2b:
                    9f:dc:27:ee:1f:d1:16:23:c0:29:68:c9:c5:cd:99:
                    ad:ca:da:82:f4:b7:18:ca:86:f3:a9:db:17:4e:0a:
                    ce:cb:25:b7:8f:85:c3:89:b7:e2:7a:e0:f3:d7:3d:
                    e0:19:a5:7d:b2:18:77:60:7f:82:4f:21:25:74:fe:
                    ab:e5:3b:de:e8:d8:7b:c7:94:b5:cf:ec:ee:e4:cd:
                    2e:39:5a:78:34:85:b4:79:05:a9:43:ec:93:07:d6:
                    09:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:02:70:AF:A8:38:4F:D2:88:C9:A8:A4:F0:29:1D:2F:44:C3:1D:74
            X509v3 Authority Key Identifier:
                keyid:AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:3c:c5:a1:b6:fd:5a:b6:e5:87:53:67:73:ed:7d:9b:b0:03:
         3c:cf:69:80:39:f4:ea:27:4b:0e:1d:82:f3:56:3d:55:35:b8:
         16:6c:1b:79:7d:15:97:45:1f:46:40:5d:e2:41:10:68:01:0a:
         1d:d2:e1:d7:72:15:db:3e:1f:01:72:44:b9:5e:68:4c:db:0d:
         50:b3:15:d8:9b:2f:3a:39:0a:9a:6e:34:0b:d6:c0:be:66:97:
         d7:eb:eb:c8:63:74:5b:ad:a8:1f:45:65:54:e9:9a:10:ec:80:
         8f:c3:20:0b:de:7f:48:99:16:1d:63:82:91:5c:5a:d4:16:52:
         ff:af:69:8e:ab:ff:35:c1:f5:82:5a:e4:ae:cb:9a:68:a5:2b:
         eb:e4:cd:4f:8c:a3:2e:ff:d5:03:4c:31:6f:81:57:0f:a6:3f:
         3e:5f:87:e2:72:2b:bc:a6:67:68:b8:c1:0d:c7:96:1a:da:c6:
         8b:44:86:41:b3:8b:da:fb:6a:e5:78:a4:94:a6:77:6e:9f:94:
         2d:74:69:23:24:5c:91:7a:07:d9:44:ac:ba:f2:a0:30:01:0b:
         f1:c0:b6:93:d6:e2:4f:53:f8:bc:a9:84:4d:0b:8d:6b:bb:53:
         3b:06:02:01:13:89:18:27:e1:ea:30:c7:9a:ff:bb:59:53:4d:
         29:85:00:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 07:20:35 2026 by rpki-client