Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
File:                     2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft (raw, json)
Hash identifier:          zeJuk0PFExAiNZVC5HW3G+vq/Lmx/1jbI+Sg0zjd4aE=
Subject key identifier:   0A:1F:A6:20:82:4F:36:79:ED:F9:A7:13:23:1C:7D:8C:72:F8:02:DF
Authority key identifier: D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
Certificate issuer:       /CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Certificate serial:       01A00101C2B03BCB551FD294DE678E79930A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
Manifest number:          0921
Signing time:             Fri 14 Aug 2026 16:01:27 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:27 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:27 +0000
Files and hashes:         1: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl (hash: U0pXh/ZWrtYlZr8wpFHKl4/NBrS23Jy137fmC94myDs=)
                          2: ZW49T-EF9sD4oMGX0teIq89-wdQ.roa (hash: ecFVWg/f7sqDB7B5E7OkA3m4Sw9Gn9wf9T3KAIQS1B8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:c2:b0:3b:cb:55:1f:d2:94:de:67:8e:79:93:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
        Validity
            Not Before: Aug 14 16:01:27 2026 GMT
            Not After : Aug 15 16:01:27 2026 GMT
        Subject: CN=0a1fa620824f3679edf9a713231c7d8c72f802df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3a:bb:a8:ae:a1:12:4b:38:c5:08:4a:f4:ae:
                    48:bd:bb:b4:be:88:a7:68:09:8f:b5:33:37:9e:d5:
                    65:c8:fd:71:75:20:fd:e1:e0:33:8c:0a:15:54:6e:
                    ad:15:51:ad:f4:ed:ea:ba:a3:c4:f3:64:e0:4a:29:
                    c2:60:ca:69:41:28:e6:3f:09:2d:21:3a:bb:c3:0e:
                    c3:c4:3a:60:7a:cb:48:81:20:f1:0a:07:b8:a4:94:
                    4e:53:d5:eb:2c:59:f7:e5:4d:04:5a:2b:6d:f6:1a:
                    67:42:ad:85:0a:22:ac:5f:b0:67:8e:34:99:b5:59:
                    1a:6a:15:3f:af:0b:e5:5c:b2:7c:ca:ae:3e:de:c7:
                    ae:ff:c8:bf:f2:2c:6a:2e:26:3f:e8:ed:f8:87:31:
                    1c:31:4a:be:01:9f:c3:a6:29:22:2d:3a:02:12:4a:
                    01:10:41:a6:17:b6:56:c1:95:e4:8b:d7:70:01:a6:
                    10:26:30:35:8f:94:28:a8:6c:ef:c0:5a:67:b4:e6:
                    65:7b:9d:32:83:4d:91:5d:74:34:e4:06:17:28:cb:
                    23:7c:e1:0c:1a:b2:a9:34:ad:b3:5d:64:75:eb:68:
                    59:f3:c1:40:ff:49:48:9d:01:4b:17:14:46:4f:fb:
                    66:3c:ff:9d:de:fd:2a:d4:09:9b:ca:d3:23:54:7f:
                    1c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:1F:A6:20:82:4F:36:79:ED:F9:A7:13:23:1C:7D:8C:72:F8:02:DF
            X509v3 Authority Key Identifier:
                keyid:D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:8d:67:37:a2:2c:7e:73:96:5a:8f:1e:87:82:b7:80:0a:06:
         08:60:1c:f3:b2:c8:ec:5a:f6:f0:cc:66:43:b3:1e:2e:ab:da:
         12:d5:09:ae:6f:df:ac:5d:63:e9:59:0b:a9:a3:6b:e6:66:1b:
         e7:c0:84:cf:e8:3a:bc:14:08:ff:c1:20:16:25:ca:cb:5a:9e:
         90:d1:b7:92:70:6f:8d:ce:7e:1e:29:ba:8d:e8:a9:d5:22:aa:
         a1:1c:c6:76:71:12:a6:8a:96:21:dc:29:d8:34:56:44:41:72:
         4e:dc:a9:44:a1:f0:6f:61:47:cc:af:31:98:18:cc:a2:cc:86:
         bd:a0:36:d1:c5:be:5a:1b:64:43:6b:f3:06:05:2e:e2:f5:c2:
         01:1a:c9:b3:d9:f6:af:4a:f7:fa:92:dc:a7:2a:90:62:65:2f:
         6b:08:e9:90:29:e4:bb:fa:e5:63:00:60:e9:78:39:29:89:b8:
         a5:e7:0d:af:30:86:de:5d:65:87:5d:4d:71:76:13:9f:4f:4b:
         4b:c6:2a:35:13:d1:d8:77:4b:a0:f4:87:8e:09:91:7f:ac:1f:
         62:57:aa:4b:24:e6:d8:ce:02:43:5b:e3:00:33:f7:63:09:4e:
         2a:0c:1a:4a:fc:f8:ca:69:c7:8e:c2:8c:d5:a4:30:c5:29:be:
         1d:21:76:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABAcKwO8tVH9KU3meOeZMKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MDEyZmFmOTgyNzVhZTRmM2Y4ZDg3ZjA4NGVlNGZmODQy
MGM0ODUwHhcNMjYwODE0MTYwMTI3WhcNMjYwODE1MTYwMTI3WjAzMTEwLwYDVQQD
EygwYTFmYTYyMDgyNGYzNjc5ZWRmOWE3MTMyMzFjN2Q4YzcyZjgwMmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzq7qK6hEks4xQhK9K5Ivbu0voin
aAmPtTM3ntVlyP1xdSD94eAzjAoVVG6tFVGt9O3quqPE82TgSinCYMppQSjmPwkt
ITq7ww7DxDpgestIgSDxCge4pJROU9XrLFn35U0EWitt9hpnQq2FCiKsX7BnjjSZ
tVkaahU/rwvlXLJ8yq4+3seu/8i/8ixqLiY/6O34hzEcMUq+AZ/DpikiLToCEkoB
EEGmF7ZWwZXki9dwAaYQJjA1j5QoqGzvwFpntOZle50yg02RXXQ05AYXKMsjfOEM
GrKpNK2zXWR162hZ88FA/0lInQFLFxRGT/tmPP+d3v0q1AmbytMjVH8cUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAofpiCCTzZ57fmnEyMcfYxy+ALfMB8GA1UdIwQY
MBaAFNgBL6+YJ1rk8/jYfwhO5P+EIMSFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mNjdhYTgtNTFjMi00M2IyLWIwMjIt
NmQ1NjBkZWJmN2IzLzEvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9mNjdhYTgtNTFjMi00M2IyLWIwMjItNmQ1NjBkZWJmN2Iz
LzEvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh41nN6Is
fnOWWo8eh4K3gAoGCGAc87LI7Fr28MxmQ7MeLqvaEtUJrm/frF1j6VkLqaNr5mYb
58CEz+g6vBQI/8EgFiXKy1qekNG3knBvjc5+Him6jeip1SKqoRzGdnESpoqWIdwp
2DRWREFyTtypRKHwb2FHzK8xmBjMosyGvaA20cW+WhtkQ2vzBgUu4vXCARrJs9n2
r0r3+pLcpyqQYmUvawjpkCnku/rlYwBg6Xg5KYm4pecNrzCG3l1lh11NcXYTn09L
S8YqNRPR2HdLoPSHjgmRf6wfYleqSyTm2M4CQ1vjADP3YwlOKgwaSvz4ymnHjsKM
1aQwxSm+HSF2Gw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:28 2026 by rpki-client