Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft
File:                     ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft (raw, json)
Hash identifier:          n5NsFM/XF43mbZctHEP6QSgqul716yhUxWmKdSLOGqA=
Subject key identifier:   A2:EA:F9:EC:6B:D8:47:81:51:AB:AB:7E:FA:41:14:01:31:E0:BD:0E
Authority key identifier: 85:AD:D8:EA:AE:B3:A4:78:D7:E5:DF:3E:7E:E1:C3:23:F1:66:BF:28
Certificate issuer:       /CN=85add8eaaeb3a478d7e5df3e7ee1c323f166bf28
Certificate serial:       01A0208C6AE9E9EDDD3D802DB54F8BB9F696
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft
Manifest number:          080E
Signing time:             Thu 20 Aug 2026 19:01:08 +0000
Manifest this update:     Thu 20 Aug 2026 19:01:08 +0000
Manifest next update:     Fri 21 Aug 2026 19:01:08 +0000
Files and hashes:         1: MvxuGFgJO1HcqJcQXHExSwR9U5A.roa (hash: gwjNOond7GjnBlbK7xaPErigbWlHmn1g1Fd3dZwf6oE=)
                          2: anEMLhBSR-ZUhDs4y9V3c82TLb4.roa (hash: JlsU25C/lCNOkItP54ekDC6SLLrLG7JIzKd/WFTWKEE=)
                          3: ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.crl (hash: pCKxLAr8Tn71a5U3sOjCxDVZb/0iLCZ1PzlsuDJ4rEQ=)
                          4: wim6z6Qps0aBjMJXEvJ79OHVt2I.roa (hash: Xvtl1HpjZETCKdBHr+BV103OhtUw84OetTQurPvOKE8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 13:32:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:20:8c:6a:e9:e9:ed:dd:3d:80:2d:b5:4f:8b:b9:f6:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85add8eaaeb3a478d7e5df3e7ee1c323f166bf28
        Validity
            Not Before: Aug 20 19:01:08 2026 GMT
            Not After : Aug 21 19:01:08 2026 GMT
        Subject: CN=a2eaf9ec6bd8478151abab7efa41140131e0bd0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:27:2d:0f:0e:c4:fa:fb:11:0f:8f:84:df:5f:
                    e4:ec:e1:5d:41:a0:26:f2:1f:d5:62:4c:3a:62:ba:
                    5b:46:e8:2c:03:9d:ea:63:98:f9:d7:0f:f6:cd:34:
                    4b:09:03:04:ae:12:ec:11:64:10:56:88:e9:4a:c9:
                    68:66:fb:0c:55:79:98:9c:90:67:1a:2a:89:65:59:
                    b2:cc:38:6b:cb:de:5f:76:81:db:12:14:47:de:6b:
                    a9:16:b1:f5:1f:e8:c9:1c:4e:5d:c2:e0:39:c3:2a:
                    ba:7b:fa:a6:e2:67:07:48:4d:9f:24:60:5b:03:85:
                    6f:68:54:61:a3:46:b6:65:4d:ed:e1:b0:61:93:fc:
                    5b:e7:bc:99:8e:5b:ed:6a:3a:bf:fc:bf:ca:5d:88:
                    14:cd:e6:19:3b:02:0c:b8:66:10:f7:dc:e6:cf:b7:
                    6b:aa:bd:bc:b5:11:8b:1b:05:82:01:e7:4d:72:47:
                    29:c1:6d:34:06:e9:7e:11:af:12:cb:d6:52:02:e6:
                    fe:4a:16:41:41:f2:b8:eb:9d:91:cb:fc:be:70:00:
                    f5:4b:a3:23:f4:70:4d:dd:77:c7:9c:1f:75:1b:a0:
                    44:ed:99:f3:0a:5d:bd:27:c7:e7:8f:bf:f5:8a:92:
                    ad:23:2e:76:ed:22:74:fd:64:57:17:fa:e4:1c:12:
                    cb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:EA:F9:EC:6B:D8:47:81:51:AB:AB:7E:FA:41:14:01:31:E0:BD:0E
            X509v3 Authority Key Identifier:
                keyid:85:AD:D8:EA:AE:B3:A4:78:D7:E5:DF:3E:7E:E1:C3:23:F1:66:BF:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:5e:85:09:7b:90:2a:45:16:81:07:fd:38:c5:e4:2c:a8:60:
         65:54:97:11:29:70:dc:ab:d0:f1:2f:59:c4:81:76:64:49:36:
         f4:fe:42:b1:f3:c8:a4:ca:b7:98:1d:fa:65:6d:df:14:ea:9e:
         a2:7e:0e:7e:f1:d9:d6:b1:f0:cb:46:29:26:13:4e:6c:24:9f:
         83:0a:57:dd:f8:cd:7a:6a:4e:63:34:0e:26:07:6d:bb:51:b5:
         7b:86:18:ba:f0:76:cd:1f:24:2b:12:88:f6:e2:54:b0:42:c5:
         96:f4:dc:85:5c:53:3b:94:eb:6f:18:ad:fd:c6:91:8b:3b:21:
         22:55:3d:75:bd:b3:5d:1c:a9:70:7e:d0:18:e2:58:2f:cf:35:
         f7:33:ec:eb:7e:7a:09:26:89:05:82:b5:62:e0:eb:78:8a:b2:
         f0:01:23:ec:fc:33:c1:c4:12:a4:c2:6e:81:ba:d6:56:fc:ce:
         14:26:49:cb:8d:a0:77:47:a7:cc:b6:45:aa:74:0f:26:a3:e1:
         49:36:c5:e1:b1:34:94:96:c2:45:db:f8:0a:2e:ee:b8:04:ea:
         48:fc:4a:20:75:da:eb:66:f6:fe:8f:7d:00:1f:ad:d2:01:04:
         fb:27:84:14:a3:6f:ca:17:93:1b:2b:57:26:d7:2a:d7:78:37:
         ed:0c:43:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:39:00 2026 by rpki-client