Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft
File:                     tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft (raw, json)
Hash identifier:          O11XLB4UtLMhZ6P4pvN+ub/bPd2BSGCOZA71Qzo9HpU=
Subject key identifier:   C2:6F:14:90:D2:55:C3:F2:AE:41:C7:62:34:07:DB:03:37:26:B7:76
Authority key identifier: B4:36:C0:F0:EC:8B:BE:DF:0F:60:84:4D:FE:4F:E9:39:36:9A:4B:40
Certificate issuer:       /CN=b436c0f0ec8bbedf0f60844dfe4fe939369a4b40
Certificate serial:       01A02732C0E85849D9EA20AB7F546EA7C68C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tDbA8OyLvt8PYIRN_k_pOTaaS0A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft
Manifest number:          0745
Signing time:             Sat 22 Aug 2026 02:00:32 +0000
Manifest this update:     Sat 22 Aug 2026 02:00:32 +0000
Manifest next update:     Sun 23 Aug 2026 02:00:32 +0000
Files and hashes:         1: lf0Q27_M7GFPEsgVcJVVxoAfXUM.roa (hash: sqE0Hw0Q3FI2WcAgCLh44TsVF/QN+tcFx9NnmWdf0g0=)
                          2: tDbA8OyLvt8PYIRN_k_pOTaaS0A.crl (hash: DTupxaDPzIdIbcqpy7wOENZdYxYukKiUPYXNVAD3K9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tDbA8OyLvt8PYIRN_k_pOTaaS0A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:27:32:c0:e8:58:49:d9:ea:20:ab:7f:54:6e:a7:c6:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b436c0f0ec8bbedf0f60844dfe4fe939369a4b40
        Validity
            Not Before: Aug 22 02:00:32 2026 GMT
            Not After : Aug 23 02:00:32 2026 GMT
        Subject: CN=c26f1490d255c3f2ae41c7623407db033726b776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2e:82:c0:a0:7a:6e:e5:a9:20:c7:64:d8:ee:
                    dd:a1:35:67:d2:ad:71:c5:90:59:08:42:0c:3a:e0:
                    41:a2:a8:42:70:c0:9d:da:b4:ae:7d:26:8b:69:db:
                    a7:77:08:ab:7a:12:e6:da:9e:bd:bb:8b:41:ac:29:
                    79:4a:ed:96:33:80:97:de:7e:1b:59:ad:28:8f:ff:
                    b3:75:2d:10:40:d5:12:eb:e3:8d:4e:6b:42:6a:0a:
                    a0:ec:71:80:5d:e8:5a:69:41:8c:96:54:0b:c5:81:
                    a5:b6:e8:64:8b:76:5e:89:1f:5a:f7:32:68:d4:4f:
                    bb:5d:a3:ed:20:44:32:b5:d8:ce:fb:2c:a7:fb:c5:
                    6c:5b:8d:92:63:3a:9d:fb:77:88:51:39:79:71:46:
                    55:de:0a:75:ea:20:7d:03:60:48:66:7d:6f:35:05:
                    ab:04:ab:4e:fd:cb:f3:83:81:d3:c4:17:10:d9:48:
                    29:79:5f:25:b0:c5:eb:fe:fc:34:4d:06:c5:2f:59:
                    76:d1:04:7e:d5:b7:4d:67:f6:e2:83:6e:6a:68:b0:
                    21:3b:87:2f:ea:d5:20:0e:ee:a6:fa:29:4d:eb:ee:
                    96:4c:b1:c5:5c:87:00:02:1d:b6:14:48:77:c6:3f:
                    f1:f4:21:19:c1:e2:2d:db:c9:d1:32:d9:4b:3b:56:
                    3e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6F:14:90:D2:55:C3:F2:AE:41:C7:62:34:07:DB:03:37:26:B7:76
            X509v3 Authority Key Identifier:
                keyid:B4:36:C0:F0:EC:8B:BE:DF:0F:60:84:4D:FE:4F:E9:39:36:9A:4B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDbA8OyLvt8PYIRN_k_pOTaaS0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:c2:18:5f:f7:75:7f:9f:01:e1:a7:ee:18:47:e3:7d:1c:f0:
         d7:d2:aa:34:a8:9e:8d:b4:4c:2b:b4:45:e8:fd:43:cb:95:3f:
         f6:f0:64:ec:68:51:4a:23:78:4c:4d:f3:ec:68:98:97:44:f0:
         86:d6:de:d7:83:37:1f:29:49:42:06:f0:cc:61:ff:93:97:73:
         bc:38:7b:46:57:36:15:ab:d0:07:b4:1b:32:32:3f:97:96:d4:
         e1:9d:20:1c:a0:93:52:27:9b:b0:23:12:6e:88:b1:cb:ec:44:
         dc:23:f8:dd:d3:08:60:30:a7:ba:d6:35:27:b3:90:a2:a8:2b:
         b1:64:94:fd:f5:4c:5f:90:da:6b:05:83:57:0f:44:c3:1b:23:
         fc:56:71:bc:d8:63:9e:a5:5a:fd:22:4c:84:4b:43:11:3d:be:
         f4:c1:14:a4:eb:69:41:c4:a6:2a:96:a0:a8:65:29:25:c2:b6:
         fd:d5:10:9b:58:59:3d:24:79:79:5d:6c:e4:fe:8e:99:90:fa:
         a9:ab:16:ed:ea:d9:fe:21:0b:cc:11:5d:fe:7b:a0:2b:84:01:
         0f:e9:2c:14:fd:c5:e7:33:d0:35:15:d1:7b:20:b3:f5:68:74:
         31:6c:97:09:fa:ed:f9:6c:99:48:32:97:ae:56:e8:ea:bb:89:
         3d:52:64:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:02:39 2026 by rpki-client