Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
File:                     _u_5L8n-U1R7fjvh-DYIgJxFZsk.mft (raw, json)
Hash identifier:          HdLKhozbbEI27wPiHbPKoLCth/GkP5t0AIUHTzWYJec=
Subject key identifier:   47:D7:D4:18:84:57:C9:93:EF:F2:BF:05:E2:A0:08:9D:99:F1:D9:EF
Authority key identifier: FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9
Certificate issuer:       /CN=feeff92fc9fe53547b7e3be1f83608809c4566c9
Certificate serial:       01A02733B72BBA8F15F24D6844D7C3458379
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
Manifest number:          0AAE
Signing time:             Sat 22 Aug 2026 02:01:35 +0000
Manifest this update:     Sat 22 Aug 2026 02:01:35 +0000
Manifest next update:     Sun 23 Aug 2026 02:01:35 +0000
Files and hashes:         1: Dr3OacsNKO2WTdv7Q8llg_soZvA.roa (hash: KbhoDJ9dQsBvDj3nKAtLQGpRyI1OX7thvD73xgl+H2g=)
                          2: _u_5L8n-U1R7fjvh-DYIgJxFZsk.crl (hash: Y9huHNg/E51V/p2jriEklANDCooI+x7SHgv8mgsowY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:27:33:b7:2b:ba:8f:15:f2:4d:68:44:d7:c3:45:83:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feeff92fc9fe53547b7e3be1f83608809c4566c9
        Validity
            Not Before: Aug 22 02:01:35 2026 GMT
            Not After : Aug 23 02:01:35 2026 GMT
        Subject: CN=47d7d4188457c993eff2bf05e2a0089d99f1d9ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:eb:02:8c:5e:52:f4:a7:a1:64:4a:ea:9c:38:
                    57:73:50:cb:bf:cc:e4:ee:5b:51:98:4b:f8:c7:04:
                    f0:29:3e:2f:8a:d3:f4:71:26:2f:67:a1:78:9f:58:
                    3f:d0:fa:bd:ad:f1:67:79:fb:48:e4:3a:86:f3:e0:
                    7b:d4:f6:24:6d:ab:43:19:72:b9:35:8f:59:fc:4a:
                    63:4a:b3:a0:2d:b4:7f:19:5e:c5:e4:dc:6e:f0:e8:
                    f4:1b:2f:e9:6b:55:7c:fd:8e:bf:15:aa:92:7c:02:
                    bd:f6:c6:28:fa:82:93:21:56:d8:7a:2d:cb:fc:be:
                    b5:ca:44:e7:4e:0c:57:ee:89:b4:09:06:e0:6a:77:
                    c6:8d:97:cf:d0:19:45:a3:4b:c1:10:c5:19:62:11:
                    bf:4a:a6:e9:c4:09:11:61:82:98:e1:71:ed:11:9c:
                    5a:d9:8f:14:ee:84:63:98:85:44:b9:22:d1:aa:45:
                    31:22:4b:68:f2:c3:1c:eb:84:26:f4:63:ac:8a:fb:
                    0e:be:db:58:56:01:06:89:1f:49:e9:dc:7a:32:5d:
                    a9:37:e3:f3:48:30:bd:64:b2:9a:4c:89:cc:e1:ef:
                    01:9a:49:7b:f7:ee:a8:08:48:85:bd:9f:28:d5:e8:
                    47:0c:08:bb:8c:5a:8f:6f:6f:d6:99:3b:7e:b1:1f:
                    d1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D7:D4:18:84:57:C9:93:EF:F2:BF:05:E2:A0:08:9D:99:F1:D9:EF
            X509v3 Authority Key Identifier:
                keyid:FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:4e:20:c3:4b:d9:33:3c:07:2c:b0:30:b0:09:a6:d8:5d:a9:
         c0:dd:18:6b:e1:a2:d5:38:66:56:f8:47:9a:2c:77:db:c3:96:
         c6:b0:d4:93:5c:7a:c1:a9:44:a4:62:27:81:19:06:fc:b6:c2:
         a4:18:2c:40:4c:cc:94:e8:bb:8c:9e:6d:13:0b:56:e7:80:c7:
         90:90:0e:da:30:e1:20:e2:1c:1e:d2:88:7e:37:e1:86:57:f2:
         8f:e4:01:19:66:71:d3:51:fa:de:10:fe:4c:94:1a:57:cd:10:
         a5:0c:0c:8b:98:76:ce:d7:e6:d8:41:12:30:69:c8:f7:98:84:
         9a:5d:ed:c6:96:a2:07:89:39:56:95:a0:97:7d:b3:d7:09:ac:
         84:b0:0f:0b:88:bb:69:72:2c:46:57:de:3d:3a:bd:b2:1b:f1:
         fc:90:ed:3b:5d:76:39:ac:1f:3f:a0:5a:d7:71:7b:48:fc:c7:
         42:20:bb:41:c1:0e:18:75:19:21:18:3f:b3:73:d3:30:ad:fd:
         06:e4:32:3c:34:62:e8:e4:c4:b0:58:f6:d6:32:c6:21:f7:47:
         65:7a:18:ea:1e:e6:12:87:98:4f:08:fc:44:51:e2:6e:02:89:
         e3:29:f1:4e:0d:9f:71:00:65:7b:70:02:d4:24:71:fb:1b:bf:
         3e:2e:5f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 09:03:56 2026 by rpki-client