Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
File:                     SVbzCE2TEO-hvAfvMfk0spQfED4.mft (raw, json)
Hash identifier:          9JOSG7ddfrQe5VUVT3o7TxnPCvBDiGDR6Z2NsVPEyos=
Subject key identifier:   E1:5B:DA:EC:AA:A7:34:46:D9:86:9B:2E:C0:40:3F:93:38:4C:7F:F8
Authority key identifier: 49:56:F3:08:4D:93:10:EF:A1:BC:07:EF:31:F9:34:B2:94:1F:10:3E
Certificate issuer:       /CN=4956f3084d9310efa1bc07ef31f934b2941f103e
Certificate serial:       01A0024ACD8C6FB0C7C1B75D13C90488F5DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
Manifest number:          19FE
Signing time:             Fri 14 Aug 2026 22:00:51 +0000
Manifest this update:     Fri 14 Aug 2026 22:00:51 +0000
Manifest next update:     Sat 15 Aug 2026 22:00:51 +0000
Files and hashes:         1: 992ueHAMwJapVg3_GmGNX2NMidk.roa (hash: Sz2VdX1lXBUkLwnFivqLQpnj70LlExAPX1th350BNR8=)
                          2: SVbzCE2TEO-hvAfvMfk0spQfED4.crl (hash: 5U0ifRhpOMpaGM4jcha92HukntjjOD62L67n8pni2Ao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4a:cd:8c:6f:b0:c7:c1:b7:5d:13:c9:04:88:f5:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4956f3084d9310efa1bc07ef31f934b2941f103e
        Validity
            Not Before: Aug 14 22:00:51 2026 GMT
            Not After : Aug 15 22:00:51 2026 GMT
        Subject: CN=e15bdaecaaa73446d9869b2ec0403f93384c7ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:21:59:d6:35:96:99:53:06:32:35:a6:8d:21:
                    49:c8:4c:f2:e1:07:fe:73:2c:11:d0:24:a6:f1:c4:
                    54:50:26:b7:25:56:9c:5f:35:57:52:51:08:6a:aa:
                    60:a7:dd:11:20:44:b9:3e:01:1c:2e:03:39:62:3d:
                    97:ec:a0:cd:fb:b7:3b:31:53:20:91:3e:c1:29:d9:
                    b2:71:86:8c:a4:1b:5e:56:10:f3:66:b7:a0:9c:e5:
                    15:1e:2b:42:bc:32:f9:7d:ea:f4:d8:5d:ad:cf:58:
                    c4:4d:4f:9f:58:d9:de:96:5e:e5:22:76:08:48:d7:
                    de:60:6c:d4:fe:01:fe:5e:a2:dd:cf:7c:77:f2:d4:
                    f7:d4:b5:6e:33:41:60:26:b4:88:b0:09:99:8f:c1:
                    0f:95:ad:5d:e2:f3:a2:40:d4:ae:53:19:e6:64:94:
                    03:ef:77:15:c3:f1:4d:50:99:1b:7c:4a:98:8b:3d:
                    6e:2e:8a:49:31:f9:c9:49:83:e9:bf:fa:56:1b:58:
                    03:2e:ed:31:fa:02:59:27:8c:98:a3:ff:61:ef:45:
                    bb:d2:7f:f9:23:38:92:e8:06:e1:e9:13:5a:02:61:
                    c0:bb:ef:f8:b3:db:19:cc:aa:44:08:07:5d:8a:bd:
                    e1:5f:ac:6e:5c:b0:11:e2:4c:31:fe:32:fa:db:52:
                    d9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:5B:DA:EC:AA:A7:34:46:D9:86:9B:2E:C0:40:3F:93:38:4C:7F:F8
            X509v3 Authority Key Identifier:
                keyid:49:56:F3:08:4D:93:10:EF:A1:BC:07:EF:31:F9:34:B2:94:1F:10:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:d0:b6:2f:ca:f0:c1:47:74:5c:ff:98:ae:79:a3:af:32:ef:
         6c:46:ce:fd:13:7d:60:87:50:63:57:b9:5f:2a:90:fe:a0:78:
         71:2d:12:36:89:89:49:d2:d9:47:fa:ec:cd:d8:d7:7a:a5:72:
         62:b8:20:30:33:b2:55:6c:74:a3:ce:c2:c7:96:8d:1c:36:c3:
         65:2a:79:e6:81:ae:d7:84:67:e5:7d:eb:a5:fb:61:c2:bb:54:
         94:da:f5:ed:bd:66:d7:25:ee:0e:7e:27:6f:b5:92:1c:44:59:
         e9:79:ad:34:14:40:06:6f:88:e4:03:12:fa:73:dd:32:03:8c:
         4f:56:4c:09:5a:98:93:c9:64:b9:2c:e6:5d:22:d1:4d:b5:8e:
         b1:e5:a1:cf:13:51:7d:78:ed:f6:05:ec:1f:43:41:69:fe:f6:
         41:b5:77:ea:d1:c1:a1:23:f5:e3:ab:6f:5e:8e:9a:b5:65:72:
         fc:1b:f2:75:b4:64:a9:bb:d7:ba:d2:9b:f7:1c:06:1c:de:d3:
         6e:14:b0:cb:fd:f8:55:72:18:02:8f:13:5c:94:c3:bb:af:e5:
         20:84:f6:b6:32:aa:d9:52:41:bf:76:71:93:97:b3:62:64:c3:
         b3:c5:1d:87:82:3e:bf:b3:b2:d5:28:40:1b:b6:13:ef:3b:2f:
         32:8a:2f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:14:42 2026 by rpki-client