Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
File:                     axnRvKx1IxLsTeb1vTmszjKra9Y.mft (raw, json)
Hash identifier:          h6IQtFf18qCfEiIYbzQbImA+cbTIx/dgblEDZopKC6U=
Subject key identifier:   8C:CA:C4:E1:2B:64:44:B8:47:59:0D:60:36:18:17:83:44:FB:FA:D2
Authority key identifier: 6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6
Certificate issuer:       /CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6
Certificate serial:       01A003CBA904C9A41A83461F0275C784552F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
Manifest number:          17F7
Signing time:             Sat 15 Aug 2026 05:01:13 +0000
Manifest this update:     Sat 15 Aug 2026 05:01:13 +0000
Manifest next update:     Sun 16 Aug 2026 05:01:13 +0000
Files and hashes:         1: URIXovot20BpTLwGW5N6pOlLgy4.roa (hash: wvN6iNM+Z86YXZPPdosS4TWVox9d1Df0z+4sQXyWazA=)
                          2: axnRvKx1IxLsTeb1vTmszjKra9Y.crl (hash: yeZxeh7W6cgzZXbqLw1GxS1UN2GV30oR32fKa5ZRqhA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:cb:a9:04:c9:a4:1a:83:46:1f:02:75:c7:84:55:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6
        Validity
            Not Before: Aug 15 05:01:13 2026 GMT
            Not After : Aug 16 05:01:13 2026 GMT
        Subject: CN=8ccac4e12b6444b847590d603618178344fbfad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f7:0d:83:0f:57:e4:48:ec:91:ae:b0:ef:7e:
                    88:dd:85:71:b9:ee:02:e5:49:dd:b2:23:a9:4a:9a:
                    e7:a7:88:20:81:27:52:dd:89:b1:df:f0:42:00:1c:
                    ce:a7:3d:8a:50:88:d0:6c:6b:78:07:9d:c6:a4:a4:
                    33:70:79:e8:a1:9b:b5:53:f7:97:3e:c7:71:2a:a3:
                    b1:eb:06:f9:27:36:33:57:8c:cb:fc:21:52:fa:df:
                    60:c5:75:cd:86:93:2b:f0:3a:1c:bf:2b:45:80:2d:
                    82:c5:86:8b:3c:28:88:43:e2:db:2c:b6:ae:a7:bf:
                    54:c0:7d:b3:87:1e:1b:68:f5:b1:f0:78:cc:a8:a8:
                    b8:3d:d7:4f:c7:68:e2:74:83:b5:33:81:c0:77:6b:
                    25:55:95:6a:89:61:db:cc:5e:f9:db:a4:f5:c7:ef:
                    82:0e:63:ab:e7:a4:7f:e9:12:f7:1a:a5:61:b2:57:
                    a7:e9:dc:23:1d:5f:54:0d:08:d1:99:00:52:f3:61:
                    f4:a4:aa:3f:3e:91:b9:ea:b1:0f:55:5d:eb:88:89:
                    4b:be:ad:f5:36:81:04:64:4f:d2:fb:b2:84:39:26:
                    16:01:aa:42:46:ca:6d:7e:88:f5:1e:c2:89:df:28:
                    20:02:5f:18:74:95:7d:f5:76:b9:aa:95:ad:ef:30:
                    e7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CA:C4:E1:2B:64:44:B8:47:59:0D:60:36:18:17:83:44:FB:FA:D2
            X509v3 Authority Key Identifier:
                keyid:6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:58:47:58:87:61:dd:fd:6a:bf:4f:c0:e7:3c:99:7c:df:bd:
         71:2b:29:06:fb:36:c7:6c:3e:97:87:77:16:df:c5:19:22:5e:
         78:e6:b2:8e:7e:5c:01:2c:00:f9:ec:2a:1e:f5:34:8a:04:2a:
         ea:53:01:48:90:18:ee:1f:b2:8e:43:94:b6:6b:eb:83:a9:34:
         50:3f:c7:48:d5:1b:34:24:6c:75:5b:2a:2c:a7:d4:02:25:cb:
         20:f1:ec:e2:ee:f3:55:0e:86:b3:b3:36:17:e2:3c:37:c0:bd:
         7a:2a:74:68:db:4e:41:b5:54:14:f5:84:bb:00:b1:f4:a5:9e:
         0c:09:90:2e:be:58:4b:24:50:8a:8c:c7:99:72:19:7c:bf:9a:
         7c:d0:9a:15:67:62:cb:34:11:0a:b3:68:25:da:56:85:ad:f5:
         00:f6:a9:45:56:69:7f:90:6f:4b:ff:f4:29:e6:2c:d4:53:4e:
         7c:96:50:5a:54:ed:07:06:e8:a0:c2:ed:20:9f:83:5b:ec:4e:
         86:c0:5b:95:d7:1b:df:68:e5:ee:68:3a:86:8c:55:09:aa:d7:
         32:24:7e:c5:bd:20:b6:e3:ad:92:03:f9:c2:f1:5b:55:37:1c:
         b5:b6:14:16:32:1e:de:19:79:79:45:ab:6e:b3:59:1b:7e:79:
         0b:16:40:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:45:02 2026 by rpki-client