Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
File:                     84BJvoAaE244erwUSY5IYETZYng.mft (raw, json)
Hash identifier:          LXDhK5/fKOE9ux4I9+RZMm9J+h7gp3Lb6V7Io1OTqOM=
Subject key identifier:   2B:64:1B:8F:5D:27:45:EA:CE:A2:94:8B:40:B1:A8:C2:3D:5A:E7:21
Authority key identifier: F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78
Certificate issuer:       /CN=f38049be801a136e387abc14498e486044d96278
Certificate serial:       01A00093D5687FA568BDE3C849B60C979942
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
Manifest number:          074F
Signing time:             Fri 14 Aug 2026 14:01:23 +0000
Manifest this update:     Fri 14 Aug 2026 14:01:23 +0000
Manifest next update:     Sat 15 Aug 2026 14:01:23 +0000
Files and hashes:         1: 5x6UPD5taDgKQlJm7HkMlrw0h5w.roa (hash: FXsrx/TuiFu9Wy2N3XRLZaoBhfDNCrBq2rlJC6w/nRk=)
                          2: 84BJvoAaE244erwUSY5IYETZYng.crl (hash: xrjn+jHuJrZWOex/pjPer4EEpkg1SQZ6cH1hdNoesz0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:93:d5:68:7f:a5:68:bd:e3:c8:49:b6:0c:97:99:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f38049be801a136e387abc14498e486044d96278
        Validity
            Not Before: Aug 14 14:01:23 2026 GMT
            Not After : Aug 15 14:01:23 2026 GMT
        Subject: CN=2b641b8f5d2745eacea2948b40b1a8c23d5ae721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9b:6a:0b:5e:01:26:58:57:ba:81:5d:3f:bc:
                    72:7c:78:9c:0c:74:ec:78:f7:c5:0a:65:66:98:d1:
                    bd:b9:03:b9:1b:76:93:ce:26:e7:ed:89:92:ae:e2:
                    ee:14:36:b5:4f:db:b9:85:a8:4c:d3:a8:71:9e:04:
                    18:d8:69:b6:fb:ac:56:83:09:0f:f4:0f:94:bc:1b:
                    69:40:b7:d5:52:30:fc:7d:99:d3:a5:d8:e2:fb:01:
                    84:06:0c:d8:73:f0:62:7a:68:8a:79:ae:f8:4d:9a:
                    10:1f:c8:76:86:51:5a:f5:b2:a7:86:d8:eb:59:ea:
                    cf:05:e9:63:62:10:be:df:ee:ef:b4:8a:e3:c5:ee:
                    1f:fd:c9:21:55:0e:09:0a:31:85:5a:22:49:a8:52:
                    e3:11:c2:5c:04:ad:53:d3:24:1c:d8:c5:f4:ab:6c:
                    87:00:21:cc:d7:4f:bb:32:df:bc:7e:19:31:5c:16:
                    82:37:ef:17:d3:f9:cf:09:e4:9c:82:84:dd:ab:4a:
                    db:24:92:10:17:24:69:52:93:74:2c:9c:62:8f:bd:
                    01:87:79:a6:04:63:2d:d9:0a:65:fe:3a:91:53:b5:
                    d2:e2:48:a9:20:6b:b3:81:b9:8b:cb:ff:e7:68:d5:
                    e6:01:71:ef:1c:aa:d0:b0:3b:3e:80:af:a6:d1:16:
                    47:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:64:1B:8F:5D:27:45:EA:CE:A2:94:8B:40:B1:A8:C2:3D:5A:E7:21
            X509v3 Authority Key Identifier:
                keyid:F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:69:21:5a:18:26:4f:66:2a:66:a2:9f:43:40:bf:cb:d5:68:
         23:fd:c0:7a:88:2e:ac:19:08:89:d8:57:99:6e:8c:ec:f2:77:
         f8:68:c6:09:af:4b:9b:88:83:20:b3:22:11:e5:e0:9a:8d:c3:
         8a:28:44:a1:b4:89:bc:50:d6:5a:06:5c:23:cb:84:32:ad:85:
         26:33:0e:f1:f3:94:e2:b0:57:b5:cf:93:84:a9:b9:c2:ca:9a:
         af:5f:90:78:ea:ba:ee:6a:a2:5e:87:31:b5:98:43:e8:ec:b9:
         ba:90:62:0c:79:ae:65:8a:52:51:45:1a:4e:b2:2b:6d:95:c2:
         dc:95:59:3e:20:bb:44:67:6f:f5:cb:19:3d:c2:fb:66:cc:2e:
         8b:3d:20:71:ba:f3:8e:04:d2:04:98:a5:97:4c:ff:d8:e5:74:
         7e:15:97:18:20:d7:f9:9c:fe:3f:62:38:24:92:51:24:22:f5:
         fb:93:83:17:ac:f0:b7:fc:99:54:20:3a:98:e5:44:d5:b9:1f:
         4c:9a:69:90:f0:2e:36:2e:f0:f4:f9:d0:47:8d:84:d7:a3:81:
         48:24:53:bc:a1:d5:66:1f:3d:e5:3f:3d:56:3a:8a:ff:5d:df:
         8a:6d:60:1a:ab:2b:13:83:1c:27:84:98:90:f6:1b:ac:a5:bc:
         d6:47:3c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:32:06 2026 by rpki-client