Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.mft
File:                     ApMPjGiMBNF0M6K5xySbxiW84xY.mft (raw, json)
Hash identifier:          65zbSutEu9eSPUYYVrMdP5Mn8020Z8r7gQqX1FB5jdc=
Subject key identifier:   59:4F:1E:7D:1E:1F:AA:DC:DF:6E:BA:DF:66:71:18:65:AE:37:BB:F8
Authority key identifier: 02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16
Certificate issuer:       /CN=02930f8c688c04d17433a2b9c7249bc625bce316
Certificate serial:       01A002140DB8DFAD6996A1B858BE4D65E8ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.mft
Manifest number:          1A05
Signing time:             Fri 14 Aug 2026 21:01:03 +0000
Manifest this update:     Fri 14 Aug 2026 21:01:03 +0000
Manifest next update:     Sat 15 Aug 2026 21:01:03 +0000
Files and hashes:         1: 14ynEoJXV6cGESEueCUwh87gUXg.roa (hash: JZTxhgcbHYTEiHxAG17P9Cv6dpEw0XIS5Wi97I1GPsQ=)
                          2: 2ZltyCHDVI3o8f35qb479SDHuLI.roa (hash: zdh1zWwx2K8ElbVNeH4pG3Lkf0uwVj+CGjtuVDmvtEY=)
                          3: 4KH5oPqlph7SdgPsUcEksiUn8vI.roa (hash: lkUeA2Dm3n5cyMOdG1B7Cdcwz6ExvSxL9MH87e90v8c=)
                          4: ApMPjGiMBNF0M6K5xySbxiW84xY.crl (hash: pOSEqigOJGCvgYMN+6ZEQlIOsbf70byjI+nmhQypNZU=)
                          5: MuW1vBLnQsOOOxKeFnBgdQx4Agc.roa (hash: 9v3FzvgOk0G6DAUkUFkW2Culw+ELff9ofWV2w3FNrHo=)
                          6: ZRIHFb09Mm1K55dH2vncQglBaXI.roa (hash: WFUjrCrkcCkKZQJsNV3ho4q8qDbHnlkrC4J5Z75DuBs=)
                          7: wWTX7M2skLtK6c09950us11Gw7s.roa (hash: dUde1BEXiGue0SJ6on321asNs1mJmZR7Exs/hdG2AFw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:14:0d:b8:df:ad:69:96:a1:b8:58:be:4d:65:e8:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02930f8c688c04d17433a2b9c7249bc625bce316
        Validity
            Not Before: Aug 14 21:01:03 2026 GMT
            Not After : Aug 15 21:01:03 2026 GMT
        Subject: CN=594f1e7d1e1faadcdf6ebadf66711865ae37bbf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:68:89:c3:88:8d:29:f3:66:c9:df:92:a6:3c:
                    fa:70:2f:f3:1d:f1:8d:de:c8:5d:0a:7e:3d:01:35:
                    68:dc:55:c7:e2:96:67:8d:bb:25:f9:cf:67:74:0f:
                    a9:c6:8c:67:9e:34:a7:f2:1c:72:22:3e:8b:4a:c3:
                    5f:60:be:b3:38:0a:f5:b6:49:e3:fb:3e:5d:1a:84:
                    ec:6e:f0:26:8a:78:b6:30:f0:86:56:87:b3:5d:45:
                    e1:35:ce:e3:68:94:bc:cc:f8:07:b4:19:ac:31:ba:
                    5b:f8:8e:0f:1a:30:21:e5:73:18:6c:fb:0c:cc:1e:
                    48:fd:73:9a:20:59:71:32:96:a1:3b:16:7c:59:8f:
                    ff:b3:bf:b7:b2:01:d6:91:34:46:da:25:20:30:c5:
                    cd:ab:11:86:2f:d6:91:f0:99:00:c8:4d:8c:cd:45:
                    e3:88:a8:ff:45:22:13:57:68:3a:71:b3:af:b8:12:
                    2f:bf:08:3a:cc:56:a8:2b:93:aa:41:62:55:b9:36:
                    48:b9:66:86:f9:c9:51:79:ec:4f:59:a8:7e:8f:79:
                    a8:0b:fd:32:72:9d:9e:39:8b:e1:7f:c9:49:e3:93:
                    bc:ea:ae:62:8e:6e:ee:05:6b:c8:58:58:aa:da:30:
                    99:22:e5:07:84:51:ef:bc:a2:7f:fd:3e:63:2c:06:
                    b4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4F:1E:7D:1E:1F:AA:DC:DF:6E:BA:DF:66:71:18:65:AE:37:BB:F8
            X509v3 Authority Key Identifier:
                keyid:02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:1b:85:50:4a:d2:75:40:cb:04:92:46:14:f5:84:81:1d:77:
         a8:d6:28:7d:a6:8a:19:0a:42:dc:c0:38:47:bf:95:96:c6:10:
         61:92:b6:96:62:3a:bb:b4:1a:97:66:94:1c:3e:ec:ca:4e:d0:
         70:56:44:e8:1a:a8:19:97:99:d0:3b:5e:1e:97:5a:d0:2a:e2:
         96:b6:3e:9f:d7:fc:11:59:a7:00:d1:b7:f1:0e:5b:a6:2b:e6:
         b9:ba:45:88:51:3b:4c:68:90:b0:12:f4:bc:37:85:e6:84:5d:
         2d:37:27:31:64:01:30:f1:3c:16:ad:2e:c9:cc:44:7e:61:79:
         cf:df:8c:44:3d:e0:bf:a2:3b:fa:1f:18:12:42:86:d0:5d:e2:
         3e:f9:d4:29:52:2c:38:6e:c3:05:e4:1b:7e:e4:a9:b3:5e:6b:
         eb:fd:09:e7:35:5f:62:5b:88:92:da:08:63:29:8c:61:92:b8:
         d8:cd:00:09:e2:a1:27:ca:fb:04:ac:1f:88:bc:71:cd:82:c0:
         a3:88:35:00:59:88:dc:44:ec:5b:1e:24:82:d1:ad:d7:ac:dc:
         43:dd:eb:91:7f:ad:27:ff:a4:2a:bc:a3:8a:c6:e0:a1:69:ba:
         22:00:67:dd:ca:70:ab:af:de:b0:26:05:b6:c1:94:43:ff:48:
         1e:38:b1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:09:37 2026 by rpki-client