Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.mft
File:                     A_JvJX_M8HUxzX5_6EFhtP9emmM.mft (raw, json)
Hash identifier:          8w8ZeJbC9M5krL7LphVG80JoXsg3hR0Hg092JesA4aA=
Subject key identifier:   28:22:50:47:CF:9B:C8:13:86:19:53:D5:55:DE:B7:37:E4:D8:18:95
Authority key identifier: 03:F2:6F:25:7F:CC:F0:75:31:CD:7E:7F:E8:41:61:B4:FF:5E:9A:63
Certificate issuer:       /CN=03f26f257fccf07531cd7e7fe84161b4ff5e9a63
Certificate serial:       019FF759DD6364F784E66CC3DAE9D2EC9EE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_JvJX_M8HUxzX5_6EFhtP9emmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.mft
Manifest number:          0FAA
Signing time:             Wed 12 Aug 2026 19:01:29 +0000
Manifest this update:     Wed 12 Aug 2026 19:01:29 +0000
Manifest next update:     Thu 13 Aug 2026 19:01:29 +0000
Files and hashes:         1: A_JvJX_M8HUxzX5_6EFhtP9emmM.crl (hash: EEA0c6ouEA2mkUX0tGkunADTwkH440Wtk+rmYG62Tzs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_JvJX_M8HUxzX5_6EFhtP9emmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 16:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f7:59:dd:63:64:f7:84:e6:6c:c3:da:e9:d2:ec:9e:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f26f257fccf07531cd7e7fe84161b4ff5e9a63
        Validity
            Not Before: Aug 12 19:01:29 2026 GMT
            Not After : Aug 13 19:01:29 2026 GMT
        Subject: CN=28225047cf9bc813861953d555deb737e4d81895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2a:5c:6b:57:f2:63:59:65:c1:72:73:8e:cf:
                    08:c3:58:55:92:c5:c8:c7:93:fe:82:6b:ee:bf:26:
                    c8:59:d0:3d:46:5b:33:e1:bd:4f:a2:35:74:5a:7b:
                    90:fa:c2:71:44:a6:5d:57:b7:08:09:13:f0:dc:fd:
                    a4:56:e0:94:4a:cf:0b:ba:0e:5c:c9:2d:64:71:ba:
                    1e:35:43:c0:58:a9:a9:47:ad:34:1f:39:8a:84:62:
                    c5:55:8f:80:6e:4c:ab:18:ca:89:3f:76:28:e0:21:
                    73:76:3f:3c:ce:de:db:39:41:ef:7e:7b:90:d4:10:
                    da:30:47:13:1e:20:e9:72:59:4e:8d:c3:25:63:0e:
                    4f:4b:4a:cc:a6:a4:da:b6:62:63:57:ac:83:57:e1:
                    c4:e9:c7:bd:61:fd:4f:49:ba:d2:fa:8b:a9:a7:16:
                    ca:c2:f4:ae:be:79:29:49:26:b2:70:9d:b8:c6:d5:
                    d8:13:d4:17:de:ef:65:52:1d:f8:19:ef:22:a9:a9:
                    85:5b:e6:77:75:90:44:eb:10:59:f8:d9:72:94:fd:
                    92:b6:1f:6c:c0:ac:e8:e7:41:f6:c9:c4:4b:81:2e:
                    ac:18:1a:b7:b8:9e:55:dc:d3:12:81:a9:dd:48:36:
                    1b:7d:c4:73:a0:d5:c5:60:db:c6:17:10:1e:14:04:
                    9d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:22:50:47:CF:9B:C8:13:86:19:53:D5:55:DE:B7:37:E4:D8:18:95
            X509v3 Authority Key Identifier:
                keyid:03:F2:6F:25:7F:CC:F0:75:31:CD:7E:7F:E8:41:61:B4:FF:5E:9A:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_JvJX_M8HUxzX5_6EFhtP9emmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:15:6d:f9:9b:a0:ec:d7:44:fb:3b:bc:4b:5d:98:ff:5c:30:
         b0:9d:82:35:c4:f2:07:9a:0e:1c:78:70:2b:0f:26:d7:1b:2f:
         96:3c:fd:cc:0e:c0:5c:98:88:29:09:12:1a:7e:9e:bc:73:2d:
         2e:1f:3c:81:c9:a0:4a:69:9a:8e:ab:4b:5a:47:11:94:ba:70:
         b8:92:4f:39:f8:85:a7:0f:c9:52:64:7f:93:b9:3c:94:4d:a9:
         ad:3a:cb:4c:d3:db:a7:91:d6:9e:b8:d5:46:e3:ae:32:96:d8:
         51:b4:47:e7:56:3b:a6:93:06:10:8f:64:0b:0c:cd:a5:8e:7a:
         1c:0c:de:80:8e:61:83:01:5a:4b:36:fd:60:aa:86:18:a9:c2:
         23:1b:97:8b:7c:72:6a:89:7a:65:0a:ca:e6:21:b6:8c:95:14:
         b6:a9:c3:94:2c:0b:b3:aa:b3:bf:e0:bd:c7:83:b4:f7:7b:ef:
         76:cc:8d:c2:1b:0a:5a:98:b3:c7:92:65:51:06:78:74:52:dd:
         2a:a6:bc:59:d1:3c:f0:9c:bd:3b:15:d7:6c:2a:3b:fe:97:27:
         92:bc:3a:9a:15:77:f8:40:93:7d:34:74:a9:0d:c0:c6:e9:8a:
         af:04:68:43:25:56:8a:a4:60:e7:8a:80:d9:be:17:c9:d2:03:
         a7:a2:ab:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/3Wd1jZPeE5mzD2unS7J7hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZjI2ZjI1N2ZjY2YwNzUzMWNkN2U3ZmU4NDE2MWI0ZmY1
ZTlhNjMwHhcNMjYwODEyMTkwMTI5WhcNMjYwODEzMTkwMTI5WjAzMTEwLwYDVQQD
EygyODIyNTA0N2NmOWJjODEzODYxOTUzZDU1NWRlYjczN2U0ZDgxODk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSpca1fyY1llwXJzjs8Iw1hVksXI
x5P+gmvuvybIWdA9Rlsz4b1PojV0WnuQ+sJxRKZdV7cICRPw3P2kVuCUSs8Lug5c
yS1kcboeNUPAWKmpR600HzmKhGLFVY+AbkyrGMqJP3Yo4CFzdj88zt7bOUHvfnuQ
1BDaMEcTHiDpcllOjcMlYw5PS0rMpqTatmJjV6yDV+HE6ce9Yf1PSbrS+ouppxbK
wvSuvnkpSSaycJ24xtXYE9QX3u9lUh34Ge8iqamFW+Z3dZBE6xBZ+NlylP2Sth9s
wKzo50H2ycRLgS6sGBq3uJ5V3NMSgandSDYbfcRzoNXFYNvGFxAeFASdIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgiUEfPm8gThhlT1VXetzfk2BiVMB8GA1UdIwQY
MBaAFAPybyV/zPB1Mc1+f+hBYbT/XppjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQV9KdkpYX004SFV4elg1XzZFRmh0UDllbW1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny81NDE3ZTQtZDBiOC00MzA0LWFiMjYt
NGE5OTQwZTAwMzY2LzEvQV9KdkpYX004SFV4elg1XzZFRmh0UDllbW1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny81NDE3ZTQtZDBiOC00MzA0LWFiMjYtNGE5OTQwZTAwMzY2
LzEvQV9KdkpYX004SFV4elg1XzZFRmh0UDllbW1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbRVt+Zug
7NdE+zu8S12Y/1wwsJ2CNcTyB5oOHHhwKw8m1xsvljz9zA7AXJiIKQkSGn6evHMt
Lh88gcmgSmmajqtLWkcRlLpwuJJPOfiFpw/JUmR/k7k8lE2prTrLTNPbp5HWnrjV
RuOuMpbYUbRH51Y7ppMGEI9kCwzNpY56HAzegI5hgwFaSzb9YKqGGKnCIxuXi3xy
aol6ZQrK5iG2jJUUtqnDlCwLs6qzv+C9x4O093vvdsyNwhsKWpizx5JlUQZ4dFLd
Kqa8WdE88Jy9OxXXbCo7/pcnkrw6mhV3+ECTfTR0qQ3AxumKrwRoQyVWiqRg54qA
2b4XydIDp6KrIg==
-----END CERTIFICATE-----
Generated at Thu Aug 13 01:40:32 2026 by rpki-client