Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft
File:                     jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft (raw, json)
Hash identifier:          RAvD5igRUAriHVwHg1J4ePkIsfwpvaNDegJ7AQkXArQ=
Subject key identifier:   DE:78:64:F1:FA:0B:CE:A2:C8:E3:73:90:B5:72:A7:37:F7:9F:3C:C6
Authority key identifier: 8C:02:9F:B1:8E:19:C5:67:72:44:05:7E:DA:38:C6:3D:C1:8D:A1:2A
Certificate issuer:       /CN=8c029fb18e19c5677244057eda38c63dc18da12a
Certificate serial:       01A002EFE6B0F4DC5236FFD91DE021D7C6CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft
Manifest number:          05E7
Signing time:             Sat 15 Aug 2026 01:01:11 +0000
Manifest this update:     Sat 15 Aug 2026 01:01:11 +0000
Manifest next update:     Sun 16 Aug 2026 01:01:11 +0000
Files and hashes:         1: 3SvuzLztH7kaYqpigx8jbNPhEro.roa (hash: jRC8rlwTfMhG8lXkzGvIt38V+oAm4+j9qe4aEosOOZM=)
                          2: jAKfsY4ZxWdyRAV-2jjGPcGNoSo.crl (hash: c3Hy5X3q1u+64je5oVR4da1OBZyGi5SUpeESxRHTEAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 01:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:ef:e6:b0:f4:dc:52:36:ff:d9:1d:e0:21:d7:c6:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c029fb18e19c5677244057eda38c63dc18da12a
        Validity
            Not Before: Aug 15 01:01:11 2026 GMT
            Not After : Aug 16 01:01:11 2026 GMT
        Subject: CN=de7864f1fa0bcea2c8e37390b572a737f79f3cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:af:49:2f:31:7a:2a:d4:2a:22:79:2b:e2:5d:
                    cc:1d:8a:70:24:a7:91:89:31:a6:c1:40:1b:3b:75:
                    e9:ca:b3:a3:70:0a:50:4c:ee:fb:e1:20:37:2a:0d:
                    8b:66:1a:1a:fe:25:62:c6:18:69:a8:3b:48:0d:98:
                    00:ce:e1:10:7a:cc:1f:2d:f4:d7:7e:3b:19:be:1b:
                    b7:0c:32:22:b5:28:8a:c3:20:75:bc:3d:9d:ac:91:
                    fc:bc:25:ce:df:4e:10:8f:d4:55:e8:3f:81:f3:9c:
                    e0:c7:1b:ce:19:d0:51:7d:93:fb:84:bd:37:38:ec:
                    0f:d1:91:5c:24:57:07:33:c3:d3:d0:64:3f:d2:9a:
                    ca:8e:54:1a:10:9f:59:10:4b:c0:01:e3:d0:62:22:
                    af:2a:c1:88:cd:94:a1:fd:8a:5c:d1:0c:90:1b:91:
                    0b:60:1d:c7:99:86:49:ab:a0:70:69:0e:99:9b:3a:
                    35:65:1c:7f:40:4a:f6:6a:03:5e:3c:25:c3:48:76:
                    a8:93:18:a1:c1:61:31:9e:73:2c:68:7c:fd:21:4d:
                    af:25:2a:d5:55:86:85:b7:92:8f:ff:a1:db:3b:4f:
                    e8:93:96:47:a0:6b:0b:30:ab:a9:f4:ed:f0:19:e4:
                    4c:4c:97:db:44:9a:de:a1:22:89:4b:41:7a:35:aa:
                    14:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:78:64:F1:FA:0B:CE:A2:C8:E3:73:90:B5:72:A7:37:F7:9F:3C:C6
            X509v3 Authority Key Identifier:
                keyid:8C:02:9F:B1:8E:19:C5:67:72:44:05:7E:DA:38:C6:3D:C1:8D:A1:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:18:b1:82:b7:b1:02:fb:94:38:54:13:ed:a2:48:ff:86:64:
         d3:68:20:16:a6:3b:d3:19:cc:ea:c3:fd:43:fd:b3:30:70:e4:
         44:14:87:51:f9:da:11:2e:26:00:23:fc:d9:2d:f1:75:d2:e4:
         aa:e2:08:9f:41:6d:c7:f2:57:13:9e:09:4a:25:6d:ff:8e:fd:
         3c:e8:1f:dd:65:61:64:63:42:d9:e8:cc:0f:2f:f7:f6:6c:56:
         f7:fa:be:65:bd:08:b4:6c:28:86:26:76:d1:71:47:e7:43:ed:
         c0:87:72:e3:44:e3:a6:47:c1:11:44:a1:17:6d:3d:52:98:f2:
         0b:30:f3:5a:45:35:9f:74:aa:33:a6:0e:fb:ea:a2:d9:d3:b8:
         d2:3f:1e:a7:3f:8e:28:a4:5d:13:c9:94:22:f4:7c:14:fd:33:
         9d:e8:24:c2:54:ef:5e:72:73:21:c6:b1:01:4a:30:69:33:f8:
         9f:2d:d7:55:df:da:18:38:c8:71:0e:15:5e:d3:d2:ff:9b:81:
         f1:13:6c:0c:5e:de:da:fd:86:ac:9e:f4:1f:4e:7a:ed:04:51:
         e1:8a:0d:e7:06:60:25:24:ec:1d:cb:cb:4f:2f:f2:52:04:dd:
         7e:22:7d:a7:07:b2:85:5a:cc:f4:ce:26:4e:5d:c3:91:bd:90:
         ed:4d:5d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:22:46 2026 by rpki-client