Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/czFVtC-vxzVab8gJx9nM9bL4zcI.mft
File:                     czFVtC-vxzVab8gJx9nM9bL4zcI.mft (raw, json)
Hash identifier:          ovAfaLPF50DyUOXeg7zsgAAsrX40rCzYvgx5FhkUysU=
Subject key identifier:   95:DB:63:4C:21:EF:A1:1E:91:50:7F:ED:25:D7:CA:09:60:C1:9A:82
Authority key identifier: 73:31:55:B4:2F:AF:C7:35:5A:6F:C8:09:C7:D9:CC:F5:B2:F8:CD:C2
Certificate issuer:       /CN=733155b42fafc7355a6fc809c7d9ccf5b2f8cdc2
Certificate serial:       01A00213D46ECDC99164211FB8EE7470BAE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/czFVtC-vxzVab8gJx9nM9bL4zcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/czFVtC-vxzVab8gJx9nM9bL4zcI.mft
Manifest number:          0929
Signing time:             Fri 14 Aug 2026 21:00:48 +0000
Manifest this update:     Fri 14 Aug 2026 21:00:48 +0000
Manifest next update:     Sat 15 Aug 2026 21:00:48 +0000
Files and hashes:         1: 5-xO46xG92m4RLESqBYUlz1rTO0.roa (hash: VW7h/KCsNr8SieeOMajNaHxkUL9nYiq4PR2CnWkp8G8=)
                          2: czFVtC-vxzVab8gJx9nM9bL4zcI.crl (hash: 7JJYoBnCw4yRUbr4PzgdAW1prZ+rKB3kXF6+r/YAHiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/czFVtC-vxzVab8gJx9nM9bL4zcI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/czFVtC-vxzVab8gJx9nM9bL4zcI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/czFVtC-vxzVab8gJx9nM9bL4zcI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 21:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:13:d4:6e:cd:c9:91:64:21:1f:b8:ee:74:70:ba:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733155b42fafc7355a6fc809c7d9ccf5b2f8cdc2
        Validity
            Not Before: Aug 14 21:00:48 2026 GMT
            Not After : Aug 15 21:00:48 2026 GMT
        Subject: CN=95db634c21efa11e91507fed25d7ca0960c19a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bd:2a:a9:01:2d:48:4d:e0:1a:fd:a3:0d:eb:
                    8e:e9:70:29:56:86:fa:bf:7f:22:17:08:f4:65:5e:
                    56:76:93:88:95:e2:a1:d1:d7:25:ee:ec:01:d5:00:
                    31:c6:e4:e5:93:2d:86:fd:62:c8:a5:96:f3:b1:c6:
                    7b:c8:46:c5:cc:7b:7c:cd:13:24:b8:5a:28:37:b2:
                    c3:70:15:87:cb:b0:e1:3c:41:95:5d:dc:66:f0:41:
                    6f:46:a5:47:33:9e:ca:9b:5c:28:fa:8b:74:b1:11:
                    f2:b2:38:9e:0f:3e:6a:55:f7:6e:92:8f:55:75:b4:
                    d9:61:d4:bf:6d:83:22:27:e2:53:eb:e6:70:3f:88:
                    f8:84:26:7a:53:04:58:8f:6e:1a:fc:2d:b1:92:12:
                    ed:78:5e:e8:00:fd:31:9d:e9:fc:d2:95:d7:ef:e9:
                    44:24:75:70:e7:3e:02:40:eb:2e:81:d0:5b:fd:a4:
                    00:8b:73:c8:a0:49:cc:1f:38:31:11:79:7e:8c:33:
                    8a:22:70:a9:21:dc:a2:8b:7d:32:84:c8:09:80:bc:
                    3f:db:27:60:b2:e0:3f:26:b1:d2:a4:58:54:98:43:
                    e6:04:f3:c9:92:c1:93:a3:2c:2f:eb:ba:5a:92:3c:
                    00:d0:6b:a5:e9:21:9c:b8:71:e6:3f:13:34:d9:3e:
                    31:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:DB:63:4C:21:EF:A1:1E:91:50:7F:ED:25:D7:CA:09:60:C1:9A:82
            X509v3 Authority Key Identifier:
                keyid:73:31:55:B4:2F:AF:C7:35:5A:6F:C8:09:C7:D9:CC:F5:B2:F8:CD:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czFVtC-vxzVab8gJx9nM9bL4zcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/czFVtC-vxzVab8gJx9nM9bL4zcI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/czFVtC-vxzVab8gJx9nM9bL4zcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:d3:58:7f:51:c9:3d:48:9c:d1:82:6e:99:da:68:dd:0e:e6:
         56:19:23:36:01:cd:4c:05:53:5f:67:fa:1f:5c:48:d9:a8:e9:
         0c:7d:39:f3:ef:db:28:91:00:70:71:2e:38:6d:f7:5e:7f:6f:
         fb:a7:0e:96:bf:18:ec:65:73:26:54:92:11:66:86:83:36:88:
         28:3c:dd:b3:1e:3f:e4:d4:40:ac:30:9d:32:6b:8b:e1:d9:fd:
         2a:07:f1:a8:f1:95:53:e5:4d:c4:da:f5:7c:ad:89:d6:76:6b:
         ae:7b:a1:91:7c:4e:9d:4a:6f:4a:19:35:7d:70:05:8e:88:8f:
         02:7d:65:89:78:6c:67:2f:63:c8:ba:3d:7c:5c:c8:b3:ce:1f:
         fe:51:7f:db:90:02:16:45:a5:70:3d:53:a5:c3:31:c3:41:0a:
         f7:31:4f:90:07:2e:91:8b:84:ce:3c:ac:1e:15:a9:af:b8:0c:
         d2:a9:99:df:60:55:56:1d:da:87:4c:56:e3:84:14:f4:8a:14:
         37:d7:0b:8f:66:3c:eb:50:10:c1:32:23:77:7f:9c:1c:39:80:
         dc:38:76:47:16:da:7a:62:2d:c6:02:db:c7:a0:42:56:b8:a4:
         44:93:5c:74:e1:6a:65:75:c1:5a:93:0d:34:9d:8d:06:5e:a6:
         6e:96:bd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:04:44 2026 by rpki-client