Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.mft
File:                     A8gBV7VkJs46X0PIn-sdQ3x3y84.mft (raw, json)
Hash identifier:          fqwHqa4yBwObgKvPNbXR4G4vTfxHwf5lfAsy8xi5sEM=
Subject key identifier:   E4:7B:83:FD:4F:C3:94:77:00:2B:3C:58:82:6C:33:16:29:38:81:57
Authority key identifier: 03:C8:01:57:B5:64:26:CE:3A:5F:43:C8:9F:EB:1D:43:7C:77:CB:CE
Certificate issuer:       /CN=03c80157b56426ce3a5f43c89feb1d437c77cbce
Certificate serial:       019DA6E76D379D05E47EC0F78D09E1B9265C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.mft
Manifest number:          016F
Signing time:             Sun 19 Apr 2026 18:01:17 +0000
Manifest this update:     Sun 19 Apr 2026 18:01:17 +0000
Manifest next update:     Mon 20 Apr 2026 18:01:17 +0000
Files and hashes:         1: 9hmyc7CHoVirMOZNEd9K7tYFYLM.roa (hash: W9t2ncBE5dKOSwgrchzHeuwxwCQgEv7UeDz8B25sDI0=)
                          2: A8gBV7VkJs46X0PIn-sdQ3x3y84.crl (hash: SylT7k6iPPzBQTgLhzmTRx623KmKrSma4RH6bRGDeNM=)
                          3: LSYKZL6bL-kdhHy7Rekdkn-v5FM.asa (hash: +N5sGX/uOLbypJ4AbC7ZYsPhCOcK9Y9mwfmo1tGT698=)
                          4: cWwrq1JRG9N9LA5cpeXVH7PxJYQ.roa (hash: BD5O1CMhrpoa4q2pzqFcNgYXgKPADPP3AYbxu2KOUsc=)
                          5: e9xI9xxAFennKLtQShHvt8Vdf3U.roa (hash: nJ6Dkjs+4T2Bh6E1zT3mOI9063o+MgviDZiRTob06t8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 18:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a6:e7:6d:37:9d:05:e4:7e:c0:f7:8d:09:e1:b9:26:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c80157b56426ce3a5f43c89feb1d437c77cbce
        Validity
            Not Before: Apr 19 18:01:17 2026 GMT
            Not After : Apr 20 18:01:17 2026 GMT
        Subject: CN=e47b83fd4fc39477002b3c58826c331629388157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:50:fd:e4:02:42:a0:1f:bc:84:00:03:13:e0:
                    e3:b9:1b:21:b8:df:f7:7b:a5:c2:3e:89:c3:08:69:
                    28:6c:7b:be:aa:b6:dc:3a:2b:2a:af:e7:0d:96:67:
                    e9:6d:25:e6:91:39:ee:3a:ef:cc:9c:fb:0d:d9:23:
                    9d:43:0b:6b:7b:e6:ce:2d:dd:48:58:d9:4e:a0:13:
                    dc:80:03:53:f6:c5:b0:95:bf:52:70:4b:90:7e:47:
                    0a:9f:74:07:ce:a1:69:27:73:18:12:c0:d3:d3:5e:
                    36:32:f8:a2:d3:3f:cf:e5:be:9f:1f:3c:e4:b1:f4:
                    e9:0e:ca:11:58:7b:b3:36:17:dc:2c:04:9a:12:da:
                    9b:4b:8c:4d:c6:25:eb:e6:ca:38:23:67:c3:3c:a7:
                    23:f3:85:40:92:c0:18:66:b7:18:ea:9b:c4:89:cc:
                    3c:ae:58:0d:b5:1d:18:f1:39:71:b6:6d:f3:85:10:
                    4f:cd:12:29:21:49:b3:c5:7d:86:aa:8e:99:27:8c:
                    45:6e:90:09:27:4f:ca:81:55:92:3f:5d:b2:b4:a7:
                    cb:b2:2e:fc:22:86:b8:3d:e2:c4:6e:0d:07:ff:3e:
                    fd:a7:da:d1:3f:78:0d:37:4d:41:d0:57:06:85:6c:
                    5e:d3:21:c6:07:95:dd:1e:7d:56:ac:dc:ac:bb:2b:
                    f5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:7B:83:FD:4F:C3:94:77:00:2B:3C:58:82:6C:33:16:29:38:81:57
            X509v3 Authority Key Identifier:
                keyid:03:C8:01:57:B5:64:26:CE:3A:5F:43:C8:9F:EB:1D:43:7C:77:CB:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:e7:35:07:18:f4:ce:e3:62:1d:5e:70:48:5a:05:af:09:27:
         06:eb:e3:85:52:05:90:42:23:6e:39:38:99:2b:e9:da:55:2a:
         a2:a7:66:d0:e2:f1:e0:2b:5c:c3:aa:3b:cb:ec:28:74:5e:fc:
         2c:90:75:45:e1:6d:87:78:4f:19:02:f8:45:be:63:33:27:16:
         33:bc:4e:02:10:15:c2:0c:e8:5f:ea:36:aa:6f:ab:b7:b3:c2:
         02:db:68:7c:64:41:98:30:ac:aa:96:02:2f:5e:09:e5:a0:b5:
         f1:75:e4:c7:66:05:a2:b8:8d:56:e9:8c:45:ea:02:c0:53:52:
         e5:ab:c9:01:b7:d3:06:b5:0c:7f:00:63:6d:d3:4e:36:22:8e:
         e7:e3:0e:cd:cb:13:f0:a2:09:25:b7:42:a6:cf:0e:c4:77:a6:
         07:ff:ff:82:8f:42:c6:b4:eb:fc:80:2c:ad:bc:8b:29:a6:d2:
         83:b7:74:89:f3:22:9b:54:30:e9:fe:8c:27:30:f5:9e:92:08:
         3a:d1:1a:af:00:a6:16:57:ea:15:c8:38:68:5a:6a:b7:de:c6:
         18:b5:11:ba:1a:4c:71:53:cd:58:4e:70:a9:75:0b:37:d6:31:
         ec:6a:34:1d:b9:90:08:a3:06:08:ba:bf:b1:34:1a:83:e6:6a:
         01:f7:5f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 03:28:17 2026 by rpki-client