Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.mft
File:                     g2gKwOhPwS_HIje4rtjl7YX43r0.mft (raw, json)
Hash identifier:          3y8TDcKIKEVCPEBu1Kq65zpGW1CpZ9GBWYXNGanpqCY=
Subject key identifier:   3F:94:BF:34:D7:0E:AB:F6:93:AE:16:F4:88:98:DA:83:AC:00:EE:0C
Authority key identifier: 83:68:0A:C0:E8:4F:C1:2F:C7:22:37:B8:AE:D8:E5:ED:85:F8:DE:BD
Certificate issuer:       /CN=83680ac0e84fc12fc72237b8aed8e5ed85f8debd
Certificate serial:       01A001A6301760415DA2898CC151773BAB73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g2gKwOhPwS_HIje4rtjl7YX43r0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.mft
Manifest number:          1992
Signing time:             Fri 14 Aug 2026 19:01:03 +0000
Manifest this update:     Fri 14 Aug 2026 19:01:03 +0000
Manifest next update:     Sat 15 Aug 2026 19:01:03 +0000
Files and hashes:         1: g2gKwOhPwS_HIje4rtjl7YX43r0.crl (hash: TuQNsM7vZ78M6i4gUS5LbZqRtSEPkXjXmjK5b3hnrJA=)
                          2: l1E4OBre5rkDnwWns4RNTN9td_0.roa (hash: m7rZxzIS6jYBXFfEZZ7rvjd/kVyrJu8LndSLzgWjvY0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g2gKwOhPwS_HIje4rtjl7YX43r0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a6:30:17:60:41:5d:a2:89:8c:c1:51:77:3b:ab:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83680ac0e84fc12fc72237b8aed8e5ed85f8debd
        Validity
            Not Before: Aug 14 19:01:03 2026 GMT
            Not After : Aug 15 19:01:03 2026 GMT
        Subject: CN=3f94bf34d70eabf693ae16f48898da83ac00ee0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:98:96:9e:6d:ee:ea:4d:ed:01:3b:5b:5e:ce:
                    78:ae:5e:c0:73:2c:95:44:fe:13:ae:ee:df:d9:aa:
                    75:13:f7:5e:40:ed:7d:0a:e9:44:9f:75:5c:fe:71:
                    83:9e:7b:56:34:34:55:f2:1f:6d:47:96:e0:bb:56:
                    a0:82:df:6b:3e:40:3c:b1:0d:31:b4:28:20:15:c4:
                    48:80:2a:d9:86:8a:7c:05:37:48:b9:d2:4c:b0:57:
                    7c:5b:1a:51:88:e3:f6:79:3d:61:e7:eb:94:c3:85:
                    1a:c1:0b:10:35:f9:47:d5:90:0a:f9:b9:c7:96:cb:
                    73:d6:6e:7f:34:d9:8b:d9:b9:88:41:b0:eb:6a:b3:
                    30:25:b6:59:97:5b:d2:58:9d:c2:c7:2c:d9:59:a4:
                    cc:7b:eb:a0:72:65:34:e4:4a:13:89:2b:1a:1c:af:
                    d3:15:42:b9:3c:db:e8:e9:ee:28:9b:f8:dd:d6:3e:
                    34:4b:5d:e5:95:42:41:5f:6d:f3:54:70:29:9e:0c:
                    35:5a:f3:c3:17:ff:32:e3:b4:03:ea:dd:af:40:ab:
                    f0:32:42:0d:65:06:0b:59:09:bb:c6:6f:23:8a:7e:
                    51:1d:92:69:4a:c6:fe:18:81:1c:22:1c:8a:6a:aa:
                    b7:53:7e:c6:1c:ef:63:e6:7b:65:74:38:9c:19:12:
                    c4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:94:BF:34:D7:0E:AB:F6:93:AE:16:F4:88:98:DA:83:AC:00:EE:0C
            X509v3 Authority Key Identifier:
                keyid:83:68:0A:C0:E8:4F:C1:2F:C7:22:37:B8:AE:D8:E5:ED:85:F8:DE:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2gKwOhPwS_HIje4rtjl7YX43r0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:97:73:01:8e:45:94:fe:31:c0:06:3b:62:68:21:62:f0:e7:
         c7:ab:57:e6:a3:10:c7:a4:a6:0f:a0:97:a9:c6:ed:b9:60:6b:
         0e:7b:6f:b4:83:b6:04:a9:78:90:09:da:63:d8:c9:61:5c:27:
         2c:d5:cc:2c:2c:1d:e2:11:54:b5:a8:6c:55:34:7b:38:85:2f:
         3e:39:a2:d3:51:0c:42:f7:f4:76:14:2a:bd:ae:5f:26:f8:90:
         d3:64:ce:2c:a1:dc:ad:72:75:7c:18:5a:c5:3d:2c:18:71:76:
         a7:6d:54:23:f5:12:83:73:19:1e:f9:d9:f5:09:28:8f:6f:75:
         d3:ab:7b:8c:ad:28:da:ff:4c:2f:d8:6b:95:f2:b6:92:7c:7b:
         d4:c2:54:8a:00:0c:0c:2d:61:39:83:9f:84:d3:e6:13:cf:65:
         f3:76:30:2b:af:f5:db:94:83:99:78:ed:24:81:b3:00:85:bb:
         e7:7b:db:35:8c:48:76:c7:9a:b3:23:27:77:1f:7d:fd:0a:06:
         75:42:e0:a7:ff:21:66:3d:58:57:6b:6d:24:b1:ed:3a:6f:42:
         b1:da:9e:ca:35:fa:88:63:6d:fd:12:11:3f:33:4e:6b:9e:44:
         be:73:6a:8a:13:b0:6a:6c:e3:ac:7f:06:ad:44:15:3c:69:12:
         46:43:03:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:27:48 2026 by rpki-client