Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.mft
File:                     sMnhFmeJWbipR4_Op8o8BgMQIWI.mft (raw, json)
Hash identifier:          /ImcNI6sXuTJtqEete9Hw5bHRqhdxhUAxN8Q7JGi1cY=
Subject key identifier:   EE:90:0A:D5:58:F3:7A:F7:AD:4C:BB:93:FD:52:E8:57:12:8C:46:46
Authority key identifier: B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62
Certificate issuer:       /CN=b0c9e116678959b8a9478fcea7ca3c0603102162
Certificate serial:       01A0262A17EFF85D25DBA07FF5DE77D9E228
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.mft
Manifest number:          13D1
Signing time:             Fri 21 Aug 2026 21:11:27 +0000
Manifest this update:     Fri 21 Aug 2026 21:11:27 +0000
Manifest next update:     Sat 22 Aug 2026 21:11:27 +0000
Files and hashes:         1: SOiERy2FzpjBOJscmjZUT2oXCyo.asa (hash: I8iKKxNhfuhsMLpyqDcsPliv9eTPu4ZuRNf7dFDTu3k=)
                          2: XUGY9TbOMBX49Z8u90RGUe-ExLs.roa (hash: qtTspg26ND5GYRKyrYjwXIvA6gCRcdmehMVXE9EcA5s=)
                          3: sMnhFmeJWbipR4_Op8o8BgMQIWI.crl (hash: 6dQsdnwgbSiesO7J++NfxMCNU77VUJyILHE0wWBNPt0=)
                          4: tBEHmQUA9wv-B4hV2QHqO9SODXk.roa (hash: aLs0te6iLKHmfZqVmVELFzycohNIlwaqk2DMQCBUAIw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Aug 2026 16:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:26:2a:17:ef:f8:5d:25:db:a0:7f:f5:de:77:d9:e2:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0c9e116678959b8a9478fcea7ca3c0603102162
        Validity
            Not Before: Aug 21 21:11:27 2026 GMT
            Not After : Aug 22 21:11:27 2026 GMT
        Subject: CN=ee900ad558f37af7ad4cbb93fd52e857128c4646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ee:e6:f5:63:4c:7a:27:b8:41:4b:32:50:39:
                    ce:ff:e2:0b:f8:52:f2:a1:dd:1a:55:18:e1:51:85:
                    9d:8a:19:b3:5e:85:ee:30:37:7b:c0:69:79:9e:a2:
                    e7:81:b2:39:f7:e8:79:b2:3b:55:bd:50:72:4d:f2:
                    f9:1a:f7:10:a7:2b:8d:7f:7a:00:66:d4:d5:4b:a2:
                    6a:f8:26:11:91:fc:4f:d7:4c:18:ef:f6:e5:eb:32:
                    4f:67:e8:62:45:59:6e:16:8c:5a:e0:a8:ff:eb:86:
                    97:0d:98:3d:77:80:36:1d:27:34:f6:af:dc:a3:d7:
                    8d:2e:b8:31:e6:fb:77:7a:7a:5f:47:de:d3:26:51:
                    24:b1:ac:b7:67:1c:68:d9:75:c6:83:f2:01:05:04:
                    e6:a0:5d:5b:81:25:ef:7d:be:77:1e:44:8b:34:1b:
                    28:cd:29:76:fa:b7:bd:b4:65:6f:75:2e:91:8f:20:
                    86:88:34:42:5e:bb:33:1f:d7:ab:7c:aa:38:70:8d:
                    71:f5:08:1e:42:17:8d:35:e8:cb:48:db:00:1e:11:
                    8d:aa:26:72:16:4a:e6:b6:ef:97:73:d9:6c:32:c3:
                    72:3d:3d:51:51:7c:95:c6:f4:56:0d:8c:94:33:fa:
                    9b:05:83:25:fb:41:25:fa:57:93:f4:2a:d4:c0:82:
                    7d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:90:0A:D5:58:F3:7A:F7:AD:4C:BB:93:FD:52:E8:57:12:8C:46:46
            X509v3 Authority Key Identifier:
                keyid:B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a9:78:52:a4:c3:d9:61:5f:86:57:dd:50:4d:04:a9:da:02:
         00:b9:03:b2:0c:70:20:1f:3e:cf:d8:27:14:01:06:ea:ba:c5:
         b3:52:55:8d:c6:7f:da:aa:b2:d0:ef:12:d2:a6:4f:8b:f6:a0:
         98:53:cb:00:12:ff:ad:26:f9:2c:3b:0d:15:c2:98:13:4f:60:
         8a:be:fe:90:32:4a:80:c9:89:7c:8e:c8:c7:34:7c:28:52:bd:
         94:cd:8f:b9:35:4d:29:aa:97:a5:23:19:fc:54:a4:23:45:e2:
         3d:ab:da:61:39:71:ee:f8:d7:ab:63:6a:5b:5b:45:cc:2f:54:
         35:72:92:af:75:9b:a3:63:a8:e1:50:ca:1a:88:eb:a3:c7:53:
         7b:cb:5e:bc:7b:ad:1f:d1:1c:ee:cf:a2:cf:46:8e:23:8a:86:
         08:38:4c:52:9d:02:eb:b9:7b:8d:08:5b:b1:a2:d5:74:77:3b:
         06:f3:b1:7e:d3:a4:8b:9f:31:64:49:7e:4f:b8:15:1e:7c:4a:
         9e:4a:1e:ea:b1:5f:01:3c:ee:4b:3d:70:72:46:36:8e:0c:63:
         b8:f5:d5:8c:27:b2:c1:4b:87:49:81:f4:2c:aa:0d:27:a1:f6:
         e2:04:28:5e:cb:2c:87:e6:ba:ce:f5:7d:24:2f:a4:c4:7a:0c:
         f1:8e:04:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:10:11 2026 by rpki-client