Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft
File:                     yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft (raw, json)
Hash identifier:          VIZRMG8rZ/oDwmBgITfyF7d26OJvKD8HlU/FCWoYkgg=
Subject key identifier:   52:AC:A3:29:55:16:56:0D:4B:9C:13:0C:92:6F:02:15:C3:34:B4:06
Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
Certificate issuer:       /CN=c8d5e37178d8524c72660a1d796165999e586622
Certificate serial:       01A001DD6C78DACB8B31EFEC8AED32B47026
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft
Manifest number:          175F
Signing time:             Fri 14 Aug 2026 20:01:23 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:23 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:23 +0000
Files and hashes:         1: 2Rt9Gwr4sjkr8DA_k8J0_h0v0S4.roa (hash: tqZC3K8qhKl5fCuSFTCvvWh/uoUIwg2YeD8aanIXDKI=)
                          2: G6JvpqCYvPpC7VM1ZZPSfJgdNhc.roa (hash: D1iE+lUItdHWGUL+J972PCDTzMoGyX6bUifXJiUpjwY=)
                          3: ivio5KeVWRux6XlRxWuFL231juo.roa (hash: Em/PVIA83JxuedRO9ip2PoK/WCsTEwUOVUS8akfMdh8=)
                          4: lUtDTycr7tmHl8som-NIOGSL4hQ.roa (hash: bob91L00C+zBJmnNvfIjHOpV1SfQVQs/iVPuHdwEzf0=)
                          5: tWOuO39d71f5m4fAGnZWNgBEmoQ.roa (hash: 9CQk4BPxr4B6xZlS3j9hWqhPr4OQvnm1ZyCmYYoOxCM=)
                          6: yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl (hash: fPDKuuFLn3eFWAChlIiW7R7GWFVDGROLb4oPN8OHQ/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:6c:78:da:cb:8b:31:ef:ec:8a:ed:32:b4:70:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622
        Validity
            Not Before: Aug 14 20:01:23 2026 GMT
            Not After : Aug 15 20:01:23 2026 GMT
        Subject: CN=52aca3295516560d4b9c130c926f0215c334b406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:06:ee:8f:9d:b5:d6:14:fd:b6:4f:c4:be:f9:
                    aa:36:91:eb:b5:91:c3:75:28:0d:34:83:42:65:86:
                    8c:c9:e1:69:42:2b:8c:7f:4d:ce:95:7d:6d:d1:77:
                    44:5e:b8:a7:a4:02:7a:4d:ef:94:d8:f0:a7:c2:24:
                    bc:73:2a:8e:0d:59:35:75:64:74:94:53:02:94:97:
                    08:c8:47:c5:b3:b8:d2:84:8c:c1:3f:a0:49:0b:6e:
                    47:79:6b:c3:16:91:2e:c7:4a:b0:21:85:db:d3:f8:
                    ea:46:17:ce:47:6a:6c:a0:19:40:8d:70:82:ba:e3:
                    ea:0f:db:b7:b9:f3:cb:99:b4:77:99:e2:d2:f8:02:
                    27:b2:66:66:ae:15:eb:14:83:9f:83:cb:6b:b0:80:
                    4d:7d:fe:86:7e:ba:38:f1:6a:b6:62:1d:81:0d:c2:
                    e2:8b:78:00:88:52:34:2b:d6:08:c3:46:56:af:e5:
                    cd:7a:46:d8:44:cf:ef:52:1c:e8:e4:0c:d4:13:fe:
                    e7:b3:63:28:98:ba:6b:c9:73:0e:94:61:52:c5:2e:
                    b4:3d:cc:c7:3e:26:d0:b8:36:26:35:85:50:b9:52:
                    0c:e9:1a:a9:35:d6:44:20:09:6c:d5:93:71:ee:19:
                    25:9c:d1:21:45:c0:5b:00:71:1f:db:64:71:af:02:
                    a3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AC:A3:29:55:16:56:0D:4B:9C:13:0C:92:6F:02:15:C3:34:B4:06
            X509v3 Authority Key Identifier:
                keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:51:26:25:51:7d:7d:3c:0f:eb:27:74:d6:a9:5d:c4:d2:0b:
         a9:a2:cc:70:3e:88:4a:a7:7f:d6:5d:06:b0:28:5e:c1:9b:69:
         2b:9d:71:6b:9d:36:c4:b8:d7:2f:5d:bb:04:64:ee:09:09:87:
         3e:4f:b5:c1:f0:e0:8f:8e:f6:b4:81:38:2f:75:36:d8:b4:28:
         47:24:5b:61:83:14:4c:69:67:c6:8f:99:e9:d1:c3:77:e5:47:
         80:5f:21:1d:70:6f:a2:47:ff:e9:2d:d9:27:18:1e:7f:c3:ab:
         f2:1d:37:14:66:10:c5:0d:44:1e:aa:71:17:4b:c1:75:0f:c2:
         41:6a:f1:16:08:07:47:ec:f1:31:4e:44:18:af:19:b9:db:63:
         5d:8d:56:8e:8c:3e:ba:10:87:59:e1:e6:2b:7e:7b:70:b8:94:
         bc:68:8c:d4:f2:60:a4:5b:3f:bf:3e:85:bb:41:e1:84:3e:8a:
         60:e1:e6:7c:56:7f:e8:b1:51:a6:80:54:c3:36:98:c2:e5:59:
         99:1f:df:6b:b7:f3:91:05:fb:ab:ae:44:ab:a4:7d:1a:be:f6:
         c3:a8:ef:c0:aa:6b:59:90:e6:f1:28:b5:6b:e2:bf:4d:00:be:
         39:c3:b5:20:42:3a:02:28:a4:85:85:73:33:34:4b:8b:57:e7:
         28:5f:2e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:33:50 2026 by rpki-client