Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
File:                     8nisvMRvEz79OT9RFg_bt2B-HhY.mft (raw, json)
Hash identifier:          JhKI2VnQItqVm7xjQryrR8Jut9Rci5XufFqEASDp/5I=
Subject key identifier:   6F:0C:90:A4:F6:EE:1F:DC:8B:66:89:FE:0C:9D:25:82:AA:EC:40:D5
Authority key identifier: F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
Certificate issuer:       /CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Certificate serial:       01A0024ADE658F14ECBFB749B033F6866829
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
Manifest number:          13C6
Signing time:             Fri 14 Aug 2026 22:00:56 +0000
Manifest this update:     Fri 14 Aug 2026 22:00:56 +0000
Manifest next update:     Sat 15 Aug 2026 22:00:56 +0000
Files and hashes:         1: 2hKU1NYjNBDhpco5HEAK3um-kbE.roa (hash: YhjeByYxX6wVLssUtZI4v3Qulxa9a1zwl57K6O3z8yo=)
                          2: 8nisvMRvEz79OT9RFg_bt2B-HhY.crl (hash: EIniJSWb9tCcl8+kWlmqHS2zz13befWiDFJzJXuKNg8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4a:de:65:8f:14:ec:bf:b7:49:b0:33:f6:86:68:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f278acbcc46f133efd393f51160fdbb7607e1e16
        Validity
            Not Before: Aug 14 22:00:56 2026 GMT
            Not After : Aug 15 22:00:56 2026 GMT
        Subject: CN=6f0c90a4f6ee1fdc8b6689fe0c9d2582aaec40d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8c:4e:85:db:52:d7:28:12:32:f5:47:73:b8:
                    0f:c3:11:c2:76:19:a5:bd:91:db:92:11:77:d4:f5:
                    7c:92:17:de:69:96:bb:6f:c8:62:7b:20:a5:17:4b:
                    74:20:81:fe:cf:a6:aa:31:71:51:28:8a:80:7e:a6:
                    13:61:0b:b5:d4:70:8a:f8:97:7f:c3:4e:a6:28:5e:
                    2b:ef:4a:1a:08:2c:f3:e3:8a:94:1e:58:ad:12:c2:
                    eb:09:94:df:01:11:cc:2a:b4:93:19:e1:35:84:70:
                    04:7c:36:a0:60:74:d9:1a:f3:20:58:8b:97:32:b1:
                    63:12:93:38:88:97:79:d5:66:1c:a7:1d:7e:3a:9e:
                    50:3a:b3:31:6b:6e:f2:ab:42:a6:4b:f6:09:80:18:
                    dd:15:17:f0:94:f5:db:dd:b6:91:6d:01:c5:ef:79:
                    24:6a:0b:21:42:fa:7f:f4:02:a1:2a:91:25:93:27:
                    34:e5:14:46:1f:c0:b6:f7:83:95:51:ff:f1:8f:e9:
                    c0:d3:a4:7f:af:8f:ad:f9:b6:fb:ab:5c:cf:1b:22:
                    71:d9:e7:b0:e7:2f:2b:a9:c1:da:5b:3b:26:7a:03:
                    ae:67:35:30:dd:fd:17:03:dc:2c:cf:6e:1e:04:c0:
                    40:70:27:20:9f:fa:5f:cb:0d:7b:c6:fc:0d:aa:77:
                    32:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0C:90:A4:F6:EE:1F:DC:8B:66:89:FE:0C:9D:25:82:AA:EC:40:D5
            X509v3 Authority Key Identifier:
                keyid:F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:83:19:1b:0a:15:f2:35:d9:80:66:1d:5c:07:ff:7c:42:73:
         25:d5:17:0a:5e:b4:5f:f7:c9:fc:54:4f:14:ad:43:af:2f:91:
         f0:87:47:82:11:a2:78:7e:b1:ca:72:a5:84:14:4f:33:46:43:
         00:23:4a:ce:e0:09:ed:0f:88:4c:e7:cb:5e:84:88:45:2b:58:
         bf:38:96:59:e0:33:96:2a:8f:c6:0c:8b:42:07:ef:12:f4:fe:
         20:b4:a5:9c:97:98:dd:40:2f:20:26:a4:f0:b3:5d:41:2f:17:
         79:72:25:24:e3:01:ba:b7:d1:fb:36:87:bb:55:67:7e:e1:98:
         01:00:4f:1f:57:46:35:82:2e:ff:92:b9:64:6d:e4:a2:bd:76:
         4d:67:d5:fc:62:5c:06:f1:ae:5c:d7:93:d2:bf:f8:ab:a2:66:
         39:86:7f:e9:23:b1:ba:ad:74:45:41:8a:01:20:0c:ba:a1:1f:
         a9:45:90:8a:2b:d0:64:6e:4c:19:d5:cc:57:8d:31:3b:fc:50:
         f8:54:97:a9:7d:71:32:85:07:70:6a:29:e6:27:ee:3f:7c:86:
         1b:06:66:bf:44:45:4b:34:7b:f0:96:5e:da:7c:40:7e:3d:26:
         3d:52:b9:12:27:c8:c9:af:f9:93:6c:de:80:81:fb:30:6d:ac:
         08:48:7b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:12:26 2026 by rpki-client