Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
File:                     inK2D1-0kwAWzrhgzBdKUxNfFhY.mft (raw, json)
Hash identifier:          S+XLQovVHrhoAeBB10xg4ec/W2SuxKFUhvdWDkCtr/g=
Subject key identifier:   96:19:39:EA:C7:FB:2B:BF:3D:01:56:F1:6C:0D:07:4A:F3:B1:4A:02
Authority key identifier: 8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
Certificate issuer:       /CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Certificate serial:       01A030DB0E70AE3F317596156B715B08A001
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
Manifest number:          1A20
Signing time:             Sun 23 Aug 2026 23:00:57 +0000
Manifest this update:     Sun 23 Aug 2026 23:00:57 +0000
Manifest next update:     Mon 24 Aug 2026 23:00:57 +0000
Files and hashes:         1: 0CV2CgZdkDgFEaSWQttpAjPrLnQ.asa (hash: 5B/cG9WFC5Dp/KeCcEnHIm8JElPEiHwNBSkNYqyo5vI=)
                          2: KMNQmTy4JK0pd0HJKR0ES1MMj1s.asa (hash: LX7RRii6wd+61k4sqO6j2ZnNt8KGtnrTVWIStG+Obzs=)
                          3: cSJtDg9vgEHyxl9pdyznOaSGrWg.roa (hash: 76q9DQ4PdJdy77vI2HX3g1+OVo3qLamEUqimf88VMZA=)
                          4: inK2D1-0kwAWzrhgzBdKUxNfFhY.crl (hash: k50T8YF9mZAo1z9t2Al3ueltqc9MAvEYQhih4iB2IzQ=)
                          5: nyn8nP7M60E_Gz5chelL2mp7sBg.roa (hash: no7cv4ijMcaVa1AjDdpe2zKmm1N/3cLT1g+7PMJ12Ew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Aug 2026 22:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:30:db:0e:70:ae:3f:31:75:96:15:6b:71:5b:08:a0:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a72b60f5fb4930016ceb860cc174a53135f1616
        Validity
            Not Before: Aug 23 23:00:57 2026 GMT
            Not After : Aug 24 23:00:57 2026 GMT
        Subject: CN=961939eac7fb2bbf3d0156f16c0d074af3b14a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c9:f7:05:aa:13:ad:3f:02:77:94:86:1e:50:
                    c2:9a:e5:7c:a3:a5:a1:14:6f:1a:5d:90:d9:08:34:
                    f2:d1:53:6e:4a:50:9b:b2:97:e4:2c:06:14:ed:94:
                    10:cd:5b:8c:28:01:c4:c4:70:6d:54:bc:ae:83:84:
                    64:ea:9e:f6:3c:ba:0b:a1:91:18:c3:85:b7:ce:f5:
                    2a:0f:4d:f6:8f:3e:e9:9c:f6:d5:33:41:16:f3:f6:
                    ae:a5:05:3b:e1:23:de:47:e0:78:4e:3d:9d:63:41:
                    f1:a4:76:d5:46:24:a6:33:34:d9:60:f4:3a:d3:59:
                    0e:ee:8e:42:55:b2:64:be:d3:d0:6b:d4:31:c3:1e:
                    d8:83:b6:18:8e:f9:95:5d:d1:b6:7e:a3:b5:cb:d4:
                    b5:a6:31:b0:34:41:05:10:2d:d2:f1:92:35:b2:a0:
                    57:00:cc:83:40:a0:ca:e4:60:9d:85:a0:99:87:1c:
                    5a:6f:26:0f:fd:74:cd:b9:be:ea:d7:dc:23:88:c4:
                    be:08:b7:f2:2b:42:0e:cc:e2:1d:0c:5d:d5:34:37:
                    1b:22:24:9a:94:7f:cb:d3:02:08:83:61:bf:68:34:
                    21:53:e3:6b:d0:f9:9b:f8:28:c0:2c:58:66:c7:b8:
                    05:6c:bf:41:6d:55:5f:b2:34:ee:fe:4d:62:9a:dd:
                    6e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:19:39:EA:C7:FB:2B:BF:3D:01:56:F1:6C:0D:07:4A:F3:B1:4A:02
            X509v3 Authority Key Identifier:
                keyid:8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:f9:e2:cb:f9:0b:42:c5:65:5d:d8:e2:80:09:d9:9c:74:ba:
         bb:6b:b6:7c:ef:b4:e2:8a:71:a9:3d:92:1a:e4:9e:31:21:92:
         b6:d9:48:58:98:b3:c3:38:8b:7f:8e:6b:04:42:db:b4:17:48:
         2d:96:bf:01:97:57:fd:ac:6a:82:b2:b8:e1:bd:79:cf:74:6b:
         f5:a6:a3:16:58:92:06:50:7b:c2:94:d6:cc:3d:74:fd:c4:b2:
         91:10:88:d9:35:14:3f:34:1a:a2:f9:2d:b5:d7:f0:02:23:1c:
         80:d1:6f:4c:2a:fe:04:57:23:a8:57:53:aa:b8:ce:b1:1e:1e:
         b7:06:12:8e:21:95:8d:a3:06:00:32:e9:6a:e3:a9:94:36:4a:
         a8:84:10:c5:3b:e9:59:5f:00:bc:8d:f2:f9:ac:b2:49:c6:37:
         b9:75:d1:0b:d8:6e:e3:d5:6a:14:fd:5e:c4:ad:b5:c9:28:dc:
         f5:fb:63:f0:2c:59:c1:52:8e:21:e6:cd:aa:42:b0:d4:a8:00:
         f0:6b:7f:a6:e6:09:2c:4a:b8:b9:02:45:c5:09:5e:b2:49:c2:
         31:ad:96:aa:e5:a2:3e:c5:dd:39:d8:b1:a8:87:30:dd:43:47:
         0a:dd:4b:05:7f:90:8d:71:95:77:d9:f3:ca:87:0e:47:c2:95:
         3b:bc:88:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 05:36:16 2026 by rpki-client