Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.mft
File:                     menPNJG22eJ1TLU4hFwHPKUnhco.mft (raw, json)
Hash identifier:          QB4vnvsbIwHawpKG4vmLWc6t9jyAlG+pCd2YUYs/3gs=
Subject key identifier:   DA:D1:19:27:3D:DD:BB:09:BC:27:00:2B:18:59:C0:1A:D0:5A:45:85
Authority key identifier: 99:E9:CF:34:91:B6:D9:E2:75:4C:B5:38:84:5C:07:3C:A5:27:85:CA
Certificate issuer:       /CN=99e9cf3491b6d9e2754cb538845c073ca52785ca
Certificate serial:       01A010E23CD041A0C8E8F82391F44D6E6B36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/menPNJG22eJ1TLU4hFwHPKUnhco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.mft
Manifest number:          82
Signing time:             Mon 17 Aug 2026 18:00:57 +0000
Manifest this update:     Mon 17 Aug 2026 18:00:57 +0000
Manifest next update:     Tue 18 Aug 2026 18:00:57 +0000
Files and hashes:         1: menPNJG22eJ1TLU4hFwHPKUnhco.crl (hash: hpTKOSKgScLMy5L+IFvkpT8rFVw5pwKqTwWVrw7YHm8=)
                          2: zj7l-XB4ir-Br4qiRjHhOvxnx2E.roa (hash: hJIkYZoYjwX+UQUpvmn9CWFY8wR0zPivjXLUKJl5hsQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/menPNJG22eJ1TLU4hFwHPKUnhco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Aug 2026 18:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:10:e2:3c:d0:41:a0:c8:e8:f8:23:91:f4:4d:6e:6b:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99e9cf3491b6d9e2754cb538845c073ca52785ca
        Validity
            Not Before: Aug 17 18:00:57 2026 GMT
            Not After : Aug 18 18:00:57 2026 GMT
        Subject: CN=dad119273dddbb09bc27002b1859c01ad05a4585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:93:77:53:d8:d8:a0:56:71:58:1f:a7:d8:4e:
                    d9:e4:05:28:d7:76:c8:16:e5:23:44:0e:e6:b3:4f:
                    55:5d:bf:25:5f:ce:6b:4c:62:18:cb:3a:24:63:95:
                    00:e2:3d:a6:4a:88:fc:7a:15:9d:4d:ba:c0:ba:b3:
                    2d:c6:a7:38:4d:8c:55:d8:29:b3:dc:81:a9:37:69:
                    b7:40:d5:e3:6d:27:37:f2:ed:37:93:a4:1a:ba:42:
                    6d:8f:f6:89:74:ac:26:72:25:de:31:97:45:55:27:
                    25:7c:a4:0f:60:b2:4d:b6:10:63:1f:5c:12:5b:83:
                    da:3a:94:cd:18:5e:d2:04:3b:ac:eb:86:2d:b9:36:
                    08:88:7d:02:2d:d3:73:b7:8d:1f:b9:e1:e2:ad:2b:
                    9e:a1:e0:5b:6c:d3:41:e6:f9:29:fc:99:c6:97:7b:
                    56:e6:78:2f:e7:bf:61:3e:9a:39:e0:a7:51:b2:dd:
                    2e:af:b1:7d:6e:63:a1:5a:d8:45:58:56:0e:08:d8:
                    2f:e8:f6:e6:48:81:d0:2f:2c:48:fd:aa:27:b4:17:
                    87:8d:53:8e:64:2b:83:3c:b7:b9:8a:4b:2c:32:10:
                    13:40:1a:f7:d6:ce:b8:6f:bc:92:d8:34:4d:99:90:
                    c2:51:a4:45:65:2b:e8:e3:4f:be:39:bd:82:e1:56:
                    5b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D1:19:27:3D:DD:BB:09:BC:27:00:2B:18:59:C0:1A:D0:5A:45:85
            X509v3 Authority Key Identifier:
                keyid:99:E9:CF:34:91:B6:D9:E2:75:4C:B5:38:84:5C:07:3C:A5:27:85:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/menPNJG22eJ1TLU4hFwHPKUnhco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:e9:07:42:8d:08:57:5a:0f:65:46:53:66:c9:79:41:78:40:
         73:2d:69:45:8b:9e:38:0d:4b:c8:c5:31:0a:ea:cf:0a:37:d9:
         56:16:6f:0c:db:bf:6f:70:df:11:58:20:1a:aa:5f:d2:df:31:
         bc:15:6a:de:21:ec:c0:1e:11:f9:f5:d7:cc:e1:fb:f3:ee:0f:
         d8:f2:3e:7a:bc:a7:7c:65:31:d6:ba:53:47:d3:0c:89:f5:fa:
         72:3d:53:b7:94:a9:e7:b4:0f:4b:d1:e8:0d:94:6f:5e:76:3e:
         c0:c6:60:6e:f6:32:d9:ff:4b:56:54:18:16:b2:98:95:ff:f3:
         17:91:5c:21:d6:25:c2:c8:c1:5d:61:a6:2c:cb:4d:5d:1c:12:
         00:dd:f1:67:9a:e2:45:9b:7d:41:06:e9:b7:4d:c3:95:91:be:
         4d:d7:9a:82:61:2a:7f:02:46:9b:3f:2d:6b:49:0a:b9:b0:7e:
         c5:d2:6c:89:62:02:c7:c5:aa:b6:1a:00:cc:4f:67:2a:b1:53:
         8d:2d:1b:f3:b6:6e:3c:da:8e:47:fb:1d:df:9e:54:1c:1e:6f:
         05:71:37:43:57:9a:99:5f:6b:b7:99:11:6d:f7:43:97:b5:44:
         4b:bc:68:3d:1d:2a:fd:5a:0a:32:e6:09:e3:3f:80:a7:2d:d2:
         1a:cc:f1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 01:08:19 2026 by rpki-client