Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
File:                     MnVXzyJinQWKURSWWy-d-O9NtpA.mft (raw, json)
Hash identifier:          a5kC8yUC928ko6pk9DEHGe9FT5OVfAHzE6hfu4d8GEg=
Subject key identifier:   DB:D1:49:17:8B:C4:A0:44:54:87:0B:98:73:B0:8C:B6:23:0D:BB:E1
Authority key identifier: 32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90
Certificate issuer:       /CN=327557cf22629d058a5114965b2f9df8ef4db690
Certificate serial:       019FF9B646DC18C947E5F9662E4CB9E806D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
Manifest number:          10E3
Signing time:             Thu 13 Aug 2026 06:01:40 +0000
Manifest this update:     Thu 13 Aug 2026 06:01:40 +0000
Manifest next update:     Fri 14 Aug 2026 06:01:40 +0000
Files and hashes:         1: FnV4siConvZq8mk9CbOlR5a9DjI.roa (hash: IZ5c3lykfIm9IkvU3L26cQr7DSQZqq6fwwu8m+5tYDw=)
                          2: MnVXzyJinQWKURSWWy-d-O9NtpA.crl (hash: VzJXzJLtUfapJQG/sI7lbiSKtxfzB58ErR6u/ksfGBM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 06:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f9:b6:46:dc:18:c9:47:e5:f9:66:2e:4c:b9:e8:06:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=327557cf22629d058a5114965b2f9df8ef4db690
        Validity
            Not Before: Aug 13 06:01:40 2026 GMT
            Not After : Aug 14 06:01:40 2026 GMT
        Subject: CN=dbd149178bc4a04454870b9873b08cb6230dbbe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5f:fd:2e:5b:8b:f0:6d:ca:97:e1:df:cb:60:
                    e3:c5:26:be:03:58:f4:b4:8a:07:01:d8:1d:30:91:
                    5a:1e:b3:c6:dd:cc:c3:9b:9d:08:bd:c7:50:18:c9:
                    77:cf:ad:90:b3:11:12:63:eb:87:6a:89:65:72:d8:
                    c7:2d:b6:74:27:8e:6b:a5:ee:bf:76:8c:f2:4c:bb:
                    55:88:bd:3b:b4:40:3d:04:9f:17:89:8c:2e:25:3c:
                    9f:d4:c2:d8:01:d7:88:d5:e1:ad:15:c0:e4:e4:cc:
                    6b:08:17:3b:bd:b2:fc:67:ea:df:17:66:9d:da:46:
                    18:91:76:5e:e5:9f:ee:ed:5b:43:7f:f2:60:ee:8e:
                    13:da:83:0d:14:72:2c:2a:81:64:47:84:30:15:42:
                    91:ae:70:ca:e0:31:ae:b3:58:0a:66:69:77:8a:3a:
                    a6:d1:85:9e:2d:77:c7:2b:1a:50:40:6f:38:80:b9:
                    ef:60:98:08:ec:7f:72:17:9c:e4:5d:4a:d0:c5:3b:
                    45:d9:82:20:d6:da:37:23:76:f6:d7:6e:e4:fc:90:
                    ad:5d:83:cd:c2:0e:ab:da:bc:3d:dd:ec:d0:e9:20:
                    f1:d4:5b:22:fc:af:8c:e0:e3:b0:c9:cb:43:1d:80:
                    86:e2:60:22:2a:1f:b4:3c:c5:27:c4:a9:02:c0:75:
                    a6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D1:49:17:8B:C4:A0:44:54:87:0B:98:73:B0:8C:B6:23:0D:BB:E1
            X509v3 Authority Key Identifier:
                keyid:32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:cd:97:ae:af:3f:4c:39:65:80:d8:20:1f:94:6a:51:b1:d6:
         34:d7:cc:63:78:6c:73:58:c2:62:8d:aa:b3:0a:a1:4a:eb:67:
         18:5f:e2:51:fb:86:58:be:5c:3b:95:4a:9a:56:cf:d6:e7:23:
         b3:a2:d3:d0:1e:1a:05:23:a5:10:0b:f7:97:41:b6:36:a9:8d:
         96:d0:51:57:76:35:78:9c:d5:76:40:48:c8:6a:2c:bd:e1:4c:
         2d:be:31:c6:e0:e4:0b:cc:51:a4:84:1b:4e:24:1c:eb:ee:83:
         2f:bc:bf:ce:03:ec:c2:2e:02:64:5b:8b:ea:dc:71:8b:a2:8c:
         31:74:3e:22:f1:08:21:47:f1:00:b0:34:95:5a:96:be:35:00:
         0d:02:2b:e1:c7:3a:5a:14:ca:9a:fc:3f:54:34:77:8f:e2:a1:
         70:10:39:00:0a:d3:01:20:af:f8:8c:95:1e:ad:db:29:0c:c6:
         4e:df:8f:df:65:48:dc:c1:6d:a0:96:df:9b:16:44:45:b5:55:
         36:88:be:1b:ff:c3:07:a3:2a:fc:f0:83:0c:09:5f:94:de:9b:
         5f:9c:51:71:c7:ab:c4:f5:69:03:2e:ce:76:1f:b1:17:bc:c4:
         50:84:64:c4:e1:fa:d9:81:82:2b:c0:5d:27:e1:c2:88:3e:6f:
         87:f1:15:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 15:57:58 2026 by rpki-client