Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
File:                     B5602MZfOntFTKKl5fZAlOnYi9M.mft (raw, json)
Hash identifier:          MgzFh3YWeO4l2fFs5LZ6Ewf4myNCAo4fVuocpyF2py8=
Subject key identifier:   7F:C1:79:2E:60:C0:37:C3:17:23:54:23:12:34:32:DA:27:ED:BF:69
Authority key identifier: 07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3
Certificate issuer:       /CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
Certificate serial:       01A0016F295738A7A07BB5588EE4BFF2804B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
Manifest number:          1A04
Signing time:             Fri 14 Aug 2026 18:00:57 +0000
Manifest this update:     Fri 14 Aug 2026 18:00:57 +0000
Manifest next update:     Sat 15 Aug 2026 18:00:57 +0000
Files and hashes:         1: B5602MZfOntFTKKl5fZAlOnYi9M.crl (hash: O6/RWVOGx4qsSClmd9dgnuQEwMRvXT3XbwgBBCieioI=)
                          2: UG82JYjOL5Jql3nxWvN-Xh4Nr4A.roa (hash: 05+0vfIPDLVFjVB3L2D7iJWPXu6x5fdq82fKXp61A0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:29:57:38:a7:a0:7b:b5:58:8e:e4:bf:f2:80:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
        Validity
            Not Before: Aug 14 18:00:57 2026 GMT
            Not After : Aug 15 18:00:57 2026 GMT
        Subject: CN=7fc1792e60c037c317235423123432da27edbf69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:11:00:01:ed:92:99:f5:f8:26:af:53:e9:11:
                    1e:33:bf:e9:44:6a:f4:1d:3b:3d:d1:f1:4a:5a:a2:
                    a8:54:f8:c7:b3:d8:22:3b:fc:bb:39:3a:e6:7e:b3:
                    c0:e8:c0:b7:11:cb:69:55:36:6e:b2:27:89:3d:ea:
                    fb:55:df:5c:27:d2:a9:6a:38:ea:1c:89:60:e9:5b:
                    63:dd:20:61:8f:01:55:a2:c3:f2:3e:41:eb:70:16:
                    1c:13:5b:49:63:4b:90:57:aa:f9:fd:df:b5:58:fd:
                    9f:9c:78:7b:bd:90:e9:fd:de:60:13:93:7b:cc:31:
                    f0:c3:6a:62:98:60:c0:53:ab:4e:5a:09:92:5f:2f:
                    94:fa:da:37:92:be:d1:5e:c0:7a:31:a8:26:83:bb:
                    30:c3:78:01:45:e5:00:2a:5e:77:e5:66:63:d5:77:
                    08:8a:51:1e:53:fc:8a:95:f0:39:e7:d5:22:b3:f1:
                    f0:a3:98:dc:c7:20:95:46:ed:18:b7:75:db:ea:36:
                    52:52:26:50:c3:1d:63:e6:69:f3:81:de:f4:9a:16:
                    20:80:04:4c:36:58:21:c8:8a:4f:2e:71:72:59:03:
                    73:45:47:08:eb:cb:01:47:f8:ae:90:5e:12:20:a6:
                    78:23:54:64:a2:7f:65:73:1d:85:91:65:24:1a:96:
                    31:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C1:79:2E:60:C0:37:C3:17:23:54:23:12:34:32:DA:27:ED:BF:69
            X509v3 Authority Key Identifier:
                keyid:07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:34:9a:01:41:56:00:eb:4a:6f:a6:47:43:35:81:17:19:aa:
         aa:67:92:41:6d:da:27:e5:4c:ec:af:b4:7e:c8:60:1d:c0:02:
         7f:d8:0d:50:7f:62:ac:7d:13:19:ae:b1:a4:b2:8c:cc:8c:88:
         40:58:b3:f3:e4:de:31:f4:ed:2b:30:64:21:e6:ea:cd:d3:92:
         c2:2c:dc:b7:41:14:bf:cf:c2:0b:ed:d9:f6:8c:89:c7:fd:87:
         6b:75:0d:e9:94:44:af:94:ba:1a:57:61:30:d4:59:93:70:32:
         f3:7b:84:64:c3:6e:3c:f1:09:95:94:72:3e:29:36:13:8b:a9:
         d1:df:27:f1:98:e4:a9:ec:79:71:48:db:cf:e6:4a:75:14:96:
         4c:23:bf:13:0d:a7:2e:83:7a:5b:7c:7c:97:5b:12:8f:e8:9d:
         65:ac:46:bb:c2:5f:01:16:3c:42:b9:09:78:db:31:91:0c:b6:
         c3:0b:42:a8:fd:9b:32:ae:37:d2:ab:e5:d7:7b:d1:fd:18:f9:
         7c:85:3a:a3:3f:29:44:5c:55:44:db:2f:dc:a0:4e:97:8c:9b:
         ae:ca:92:27:60:8b:0f:f6:f9:91:76:5d:a4:0b:7c:c0:96:54:
         8a:12:73:2b:5c:7a:28:32:ab:8d:79:d7:33:d3:14:c2:f2:da:
         72:76:b2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:21:06 2026 by rpki-client