Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
File:                     25ebiYwPWDTLyDimmgXjq-jAKQM.mft (raw, json)
Hash identifier:          hVl0LA0BuWw0V5PSCjTb+pCN3561f97mC8XShZzd6XI=
Subject key identifier:   26:76:96:FE:62:23:C0:E5:63:4A:56:AA:CB:1F:17:BC:8A:46:01:F7
Authority key identifier: DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03
Certificate issuer:       /CN=db979b898c0f5834cbc838a69a05e3abe8c02903
Certificate serial:       01A001A60BF4E3C3B6E5C090D486054C1582
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
Manifest number:          0D93
Signing time:             Fri 14 Aug 2026 19:00:54 +0000
Manifest this update:     Fri 14 Aug 2026 19:00:54 +0000
Manifest next update:     Sat 15 Aug 2026 19:00:54 +0000
Files and hashes:         1: 25ebiYwPWDTLyDimmgXjq-jAKQM.crl (hash: MyiYGbp74YOh13z8jOrdqFZQuNRh/YN/fPtnYDweY78=)
                          2: FjKOaSffmodjULE60Uqyds_9UrY.roa (hash: Cvv1kQqsgheFH6HLElDwGFzdf6a+v+I+lfZ3+Gpg/Ko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a6:0b:f4:e3:c3:b6:e5:c0:90:d4:86:05:4c:15:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db979b898c0f5834cbc838a69a05e3abe8c02903
        Validity
            Not Before: Aug 14 19:00:54 2026 GMT
            Not After : Aug 15 19:00:54 2026 GMT
        Subject: CN=267696fe6223c0e5634a56aacb1f17bc8a4601f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2a:81:3e:fd:7f:50:a9:dd:57:a3:a3:b8:8a:
                    59:6d:ac:0d:1a:d9:6c:f4:e4:34:75:d6:ae:49:4f:
                    07:4a:15:07:ef:99:f1:29:67:a3:80:83:64:e7:4a:
                    1e:1d:22:51:9a:83:5d:dd:49:0f:ff:4c:86:89:96:
                    50:b3:99:4f:7e:c5:0f:29:0c:a7:7e:08:81:87:46:
                    f6:26:32:2d:e2:26:24:ea:6e:ac:89:4a:b8:b4:3b:
                    bb:07:6f:36:e6:87:88:48:63:b6:f9:d3:19:06:96:
                    9e:21:20:05:ab:49:80:9c:de:aa:d3:26:17:60:e6:
                    15:f9:c1:97:5a:2a:a1:e8:a6:ab:11:16:e4:f3:55:
                    f0:9b:da:1b:7d:72:c5:43:a2:df:2e:7e:7e:bd:dd:
                    7d:b4:6b:7d:f6:8a:63:43:88:fe:6a:1e:95:5c:41:
                    3c:89:c7:cf:6d:ab:cd:8a:91:ed:0f:1f:1b:08:26:
                    cf:7c:c1:19:83:c6:17:04:eb:b4:c5:10:6f:41:2b:
                    62:7b:01:ae:31:dc:37:d7:42:7a:58:1c:b9:38:b3:
                    75:99:ad:1d:b7:90:46:0a:94:3d:d4:a9:14:ff:d9:
                    6f:fb:78:f4:a6:70:90:9a:7f:61:03:b2:19:21:3d:
                    ee:55:36:a5:1b:13:40:e7:ff:cc:8e:c2:e6:ea:53:
                    83:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:76:96:FE:62:23:C0:E5:63:4A:56:AA:CB:1F:17:BC:8A:46:01:F7
            X509v3 Authority Key Identifier:
                keyid:DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:51:4d:0c:12:95:50:68:80:cd:ed:7b:ff:32:66:c9:28:b7:
         8e:43:e2:c8:87:2b:92:26:c7:dd:75:33:50:15:28:ba:a8:ad:
         c6:86:d7:8f:39:63:7c:1f:b6:8a:49:c7:3f:84:bb:0b:0b:64:
         1b:cf:5f:73:7a:81:27:be:c7:ee:42:a0:81:eb:a9:ff:11:20:
         7b:48:fe:5e:7c:26:f8:45:75:4e:36:98:cf:c9:41:dd:96:c7:
         32:64:3e:72:14:73:01:74:03:b4:2c:9c:6f:b5:2b:91:7f:a4:
         9c:06:9f:64:9c:5e:7c:10:be:e3:87:dd:d6:44:94:f5:54:76:
         d3:10:b3:12:7b:d2:75:3a:47:85:97:90:e4:89:a4:e6:09:89:
         42:83:c0:4c:54:e0:c0:df:63:75:de:00:4c:7e:f7:e0:d0:18:
         60:53:ce:54:ef:07:1d:94:6e:d9:8d:94:91:7f:c9:4d:ca:64:
         e8:da:c5:76:02:6c:2f:31:be:0b:60:ad:8f:a6:39:1d:1a:50:
         3c:b3:58:73:4a:9c:29:f3:38:2f:56:47:60:c3:fc:5e:94:fc:
         7d:6d:63:63:26:57:d2:06:22:24:d1:b5:1e:f6:ba:09:97:46:
         66:b5:fa:bc:22:b1:0d:ed:03:94:3e:04:e8:bd:5a:69:0b:0b:
         f6:46:43:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:32:09 2026 by rpki-client