Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
File:                     xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft (raw, json)
Hash identifier:          XrrbRqytLa3JdfX9tOOaOB1/lxElalrJX4vZJbawWG0=
Subject key identifier:   5F:BE:4F:2A:99:20:EA:A5:91:C0:72:6B:5E:FE:5E:6C:D7:C9:17:C5
Authority key identifier: C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
Certificate issuer:       /CN=c576ba0c098dc472186223c91e7def5216e239f1
Certificate serial:       01A0035E675E73FD11FB2DC9813BA834D12F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
Manifest number:          08F7
Signing time:             Sat 15 Aug 2026 03:01:53 +0000
Manifest this update:     Sat 15 Aug 2026 03:01:53 +0000
Manifest next update:     Sun 16 Aug 2026 03:01:53 +0000
Files and hashes:         1: D93aVb7wrIXUaG1-CC-3JUagYOE.roa (hash: /8ReYoccQ/vVAZ/EZIZ9ttYSoWEPANiLCShHLXPhYb0=)
                          2: xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl (hash: H9nuaRzuLsBxUnnuwzdQ68XwUjyjy09lBTvha8ytMks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 03:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:5e:67:5e:73:fd:11:fb:2d:c9:81:3b:a8:34:d1:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c576ba0c098dc472186223c91e7def5216e239f1
        Validity
            Not Before: Aug 15 03:01:53 2026 GMT
            Not After : Aug 16 03:01:53 2026 GMT
        Subject: CN=5fbe4f2a9920eaa591c0726b5efe5e6cd7c917c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:da:14:18:25:66:ac:0c:98:b8:6f:6c:32:cf:
                    f4:fd:73:61:f0:fc:91:66:f0:83:3c:0e:2d:4e:35:
                    16:6c:1c:7b:3d:95:2f:26:67:11:4d:fe:b5:95:1a:
                    ef:2a:cc:bf:b1:ae:13:bd:da:f8:3e:7e:00:43:e8:
                    7f:cd:29:c2:a4:12:40:46:ff:bd:68:20:0d:88:9f:
                    23:cd:1a:39:e6:7b:cb:5b:dd:b3:a2:a8:fd:b7:e1:
                    8b:24:13:14:1e:c8:4e:d5:b0:5d:f9:55:e8:0c:ca:
                    36:4e:57:49:a0:6f:d0:9a:9c:fe:54:96:24:0b:27:
                    db:a0:a0:ed:62:0d:16:5e:df:66:26:7f:59:24:17:
                    41:67:47:00:01:2a:c6:78:52:6f:e8:0e:2c:cd:63:
                    42:bf:66:8f:57:74:df:23:b7:08:91:b2:b9:49:9c:
                    0c:b4:21:7a:f1:9f:c9:2c:2e:1c:a9:01:ad:94:0e:
                    c8:b0:ac:b4:f7:0c:d2:7d:ea:d9:35:b3:20:ee:7b:
                    58:75:a9:70:57:76:25:95:f1:48:a3:43:b6:70:45:
                    b2:54:d6:95:c2:ef:15:df:50:9f:bc:6a:ab:d2:c1:
                    af:e0:c8:0d:2e:8d:64:01:36:f5:aa:28:72:7c:e4:
                    6a:d8:6d:7d:5a:11:79:1d:ce:51:2d:26:12:6c:fa:
                    30:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:BE:4F:2A:99:20:EA:A5:91:C0:72:6B:5E:FE:5E:6C:D7:C9:17:C5
            X509v3 Authority Key Identifier:
                keyid:C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:89:ad:8e:35:d2:72:79:e5:00:83:12:b6:b2:52:fa:a2:03:
         60:b2:6e:b6:76:be:60:a8:48:d0:b8:73:8e:d8:24:e0:c9:b1:
         51:59:93:4b:e0:07:cf:52:47:d8:6b:36:a9:f8:fc:f1:0f:c3:
         21:68:4d:37:c4:ef:26:84:31:8a:eb:3d:9c:ec:92:98:4e:98:
         4a:d2:db:d6:cc:53:78:be:b9:a9:96:82:0b:be:fc:84:a0:70:
         04:98:05:10:f7:e5:ef:73:7e:5b:a8:2d:36:0a:e1:ed:d9:82:
         b2:4d:71:02:d9:f7:58:2a:52:29:c8:6a:b2:d8:b3:7f:59:97:
         d4:63:ef:75:f3:9c:94:64:fd:2f:92:82:a6:72:49:5a:a0:24:
         9b:d2:c5:60:0d:1e:64:2d:ea:59:af:cb:1b:57:e7:51:f3:ec:
         6b:14:41:68:92:c9:cd:33:1e:fa:8a:69:da:0a:76:b9:f3:73:
         f6:47:91:ae:e0:f8:83:21:4c:88:2d:e9:c8:47:fc:0b:1b:9a:
         5a:4d:b9:16:49:fb:56:a9:73:9b:9d:06:83:75:2f:a1:e0:f5:
         65:22:fa:81:86:38:ad:dc:2f:ff:a0:71:8f:71:ce:da:aa:27:
         93:cd:b9:39:b1:30:c7:1d:e4:ba:29:7f:8d:b4:7e:e9:7e:8b:
         bd:6d:96:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 12:53:17 2026 by rpki-client