Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
File:                     81ROkj2IO6zkqj9-9wByr-NRHyg.mft (raw, json)
Hash identifier:          QwpOYnIPQY8LiGFqbORmMZcsb4nYTM3/t7FkLgaye3w=
Subject key identifier:   5E:BD:52:02:68:53:B8:71:CA:20:94:4A:BE:DD:A5:4D:0B:12:ED:EB
Authority key identifier: F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
Certificate issuer:       /CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Certificate serial:       01A000939C13479A8228F248392D4233C857
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
Manifest number:          073F
Signing time:             Fri 14 Aug 2026 14:01:08 +0000
Manifest this update:     Fri 14 Aug 2026 14:01:08 +0000
Manifest next update:     Sat 15 Aug 2026 14:01:08 +0000
Files and hashes:         1: 81ROkj2IO6zkqj9-9wByr-NRHyg.crl (hash: asPpUWf+90EKrzW5M9rZuA1zHjMRTz+jVSNTC9dWRSI=)
                          2: TrhXkCJb8q-vuCZF4exUSreBB7E.roa (hash: EGX2grrS3l79QBgl+a645PR4w0grZD/PxlFuVBj36pQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:93:9c:13:47:9a:82:28:f2:48:39:2d:42:33:c8:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3544e923d883bace4aa3f7ef70072afe3511f28
        Validity
            Not Before: Aug 14 14:01:08 2026 GMT
            Not After : Aug 15 14:01:08 2026 GMT
        Subject: CN=5ebd52026853b871ca20944abedda54d0b12edeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:79:94:65:41:0f:08:44:29:b9:bd:2f:d1:8c:
                    98:a4:32:39:4b:e7:d6:a3:82:80:1e:85:4f:ea:51:
                    d0:80:64:9b:67:f0:1e:8f:81:52:e7:03:84:0c:36:
                    cd:12:4b:17:9e:c5:b2:aa:28:0f:aa:49:5f:f3:1a:
                    c1:2c:28:61:4a:61:34:64:5f:10:ae:76:94:a7:a2:
                    24:de:2f:61:56:f4:a1:64:df:b6:44:f9:03:a1:3d:
                    6d:c7:9a:31:3c:3a:f7:6a:ef:88:a5:80:11:12:0c:
                    8d:2f:0a:30:b3:48:72:08:4b:54:40:5a:c5:80:72:
                    a5:34:14:5f:e7:3c:55:a5:d2:01:9b:38:7f:ef:b4:
                    83:19:d7:49:a3:6e:42:ac:63:d5:c2:3c:a3:9d:b1:
                    37:d9:6a:ca:68:35:3e:0f:d7:a3:32:70:9b:a6:3a:
                    38:b4:4e:4f:ec:4c:c2:de:14:fe:76:6b:8c:0d:64:
                    b8:01:e9:05:06:d3:28:38:6b:63:f6:d7:e8:f5:70:
                    87:f2:d1:57:31:bd:7c:b0:f2:a1:c8:66:52:53:cb:
                    98:b5:63:ef:ed:61:ec:78:47:41:9c:93:c5:56:88:
                    cc:29:17:45:03:15:6c:c3:c6:db:84:df:96:ae:5c:
                    7e:f3:44:90:7b:92:4b:5b:10:5f:c7:5c:26:8c:24:
                    44:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:BD:52:02:68:53:B8:71:CA:20:94:4A:BE:DD:A5:4D:0B:12:ED:EB
            X509v3 Authority Key Identifier:
                keyid:F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:86:4b:e5:ff:0f:c5:87:d3:10:9a:19:68:df:99:8d:86:eb:
         66:13:56:07:85:ac:3a:be:ca:0b:bc:03:05:11:2a:47:09:2f:
         00:73:7a:4c:39:74:5c:eb:3b:7f:75:79:00:61:16:6e:95:3a:
         5a:19:7d:3f:7c:86:69:e2:1f:7e:36:07:47:00:7d:00:67:fe:
         9a:ed:9d:50:c0:28:0d:1c:6a:9e:8b:70:6b:1b:82:b9:2f:f6:
         e1:ca:e1:79:9b:0e:5c:2c:f2:ad:2c:98:d7:17:2e:4d:48:75:
         30:f3:2f:0b:86:c6:64:3a:71:f7:5f:0e:2e:2d:12:56:bc:d5:
         41:ea:75:67:e9:57:74:4c:51:00:d6:c6:aa:c0:d6:95:fb:46:
         f0:69:7d:62:03:f2:b3:5f:5b:17:fd:e1:91:54:42:33:91:d2:
         87:93:75:93:3e:27:81:09:25:48:20:dc:8b:3c:c5:0c:1d:d2:
         4f:42:0a:07:e2:cf:b4:95:6e:c9:9c:02:c0:9e:ce:59:73:2d:
         3f:31:48:0a:b1:04:0e:d9:39:a5:57:94:cf:d9:52:5e:e1:f9:
         38:0c:04:51:cb:12:c3:72:e8:80:bd:e4:6e:7f:a1:ff:d8:16:
         6b:3c:b0:ff:c1:d6:d0:87:03:4b:37:97:5a:5b:1a:c5:20:2a:
         03:50:69:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:34:23 2026 by rpki-client