Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
File:                     CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft (raw, json)
Hash identifier:          kBleVM//uuAj02SMyvMVUGNTYj9X8Y06bf9Tf8f5+Xg=
Subject key identifier:   B1:BC:AD:51:50:6A:95:68:5B:1F:D3:5B:FD:0E:8F:AB:1A:CE:54:B4
Authority key identifier: 09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
Certificate issuer:       /CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Certificate serial:       01A00282473840BA267B3769AB5ECC07AACA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
Manifest number:          1A00
Signing time:             Fri 14 Aug 2026 23:01:27 +0000
Manifest this update:     Fri 14 Aug 2026 23:01:27 +0000
Manifest next update:     Sat 15 Aug 2026 23:01:27 +0000
Files and hashes:         1: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl (hash: UPyCd755+IgfxRPfPoUYnci06QIsyVBxGP0jefGlZBU=)
                          2: WnQNBeJ77W1lWNnHWWSvM1zW9Ss.roa (hash: 4WNmsHvXiTbK61q93ojoVESn4x/SoVpSfuMXeeNjBw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:82:47:38:40:ba:26:7b:37:69:ab:5e:cc:07:aa:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
        Validity
            Not Before: Aug 14 23:01:27 2026 GMT
            Not After : Aug 15 23:01:27 2026 GMT
        Subject: CN=b1bcad51506a95685b1fd35bfd0e8fab1ace54b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ef:94:0f:6a:ac:98:f7:c2:e5:60:01:13:ac:
                    e5:b9:55:b7:50:48:30:1a:ef:40:a4:3f:b5:45:f4:
                    31:3a:6b:10:82:80:7b:37:15:14:9d:cb:23:e3:6a:
                    c8:16:00:0d:bf:f6:40:09:03:a2:b5:ff:e7:db:6c:
                    9d:ca:71:f8:26:63:16:1b:0d:18:67:b0:d9:41:55:
                    f7:e5:ac:2d:64:e9:a3:ab:dc:bd:28:f3:83:c2:18:
                    42:49:55:c1:2a:ca:fb:a8:f0:8f:44:7c:ae:1d:e0:
                    35:f6:2d:df:7a:8d:a6:18:2e:84:69:10:8e:b1:f7:
                    60:d0:b4:06:3f:bc:e8:dc:30:78:40:a3:cb:45:dd:
                    46:15:32:68:7a:8c:49:f5:b4:8d:18:42:42:ec:56:
                    67:de:b0:33:dc:29:a4:4c:e6:a1:f1:ff:2d:d0:40:
                    e3:33:43:0a:a1:03:ed:e8:05:7e:4d:23:7e:bc:ef:
                    27:dd:86:83:72:e2:d6:76:8c:88:e8:b8:91:f1:6e:
                    37:5a:ce:ee:5f:0d:72:aa:82:a8:bc:9b:61:98:9f:
                    aa:21:72:73:84:7f:08:6c:27:55:b2:ba:b0:e0:8d:
                    06:c7:da:c7:01:a0:13:6f:18:1b:96:3f:d5:b8:9a:
                    28:70:37:9a:a3:20:bb:0c:22:9a:e5:59:00:c6:60:
                    43:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BC:AD:51:50:6A:95:68:5B:1F:D3:5B:FD:0E:8F:AB:1A:CE:54:B4
            X509v3 Authority Key Identifier:
                keyid:09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:cc:78:7e:3f:36:c4:d8:c8:17:d9:9d:d5:56:0a:b9:bd:47:
         37:fb:51:d6:38:c6:72:30:ca:14:95:f8:71:f0:7f:34:a2:72:
         9d:89:75:0c:5c:b0:73:93:a8:65:bc:fe:af:25:6f:81:fd:42:
         92:ee:b2:08:89:36:aa:af:08:34:26:30:fa:4b:48:5d:30:81:
         e6:6a:70:ed:d4:d1:5c:e7:e2:d3:25:85:f6:94:01:ab:57:e3:
         18:be:3e:75:79:01:bd:3f:93:1c:c9:ec:38:ed:94:9a:ea:66:
         80:7a:f7:4c:bd:bc:92:7e:5e:c9:4d:45:5f:69:44:60:55:6a:
         0c:aa:73:34:e8:8f:99:bd:96:4e:17:5f:c1:47:99:c8:03:dc:
         ea:ab:8b:24:9e:0c:b1:1e:d8:f5:eb:15:14:ed:f6:bf:fa:23:
         53:3d:e7:fc:9d:a6:a4:46:50:c5:7c:ad:7e:0d:24:49:0a:9e:
         d7:fb:80:a2:c3:90:60:0a:ab:8a:98:c6:3a:89:aa:fd:ba:a2:
         d5:78:51:f7:55:fc:bc:f2:92:b8:b3:01:c5:2e:cd:35:12:aa:
         57:8a:9d:18:c4:5b:06:2e:23:38:91:b8:60:99:1a:a7:34:0a:
         d9:a4:bd:9e:44:d4:08:c4:f6:e8:bf:ad:db:62:71:69:7c:b8:
         e3:c0:56:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACgkc4QLomezdpq17MB6rKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NGVhMWNmNGZkYzM0NzVjMWYyOGQ2MTFjMWYxOGZlMDI3
YzEwOTgwHhcNMjYwODE0MjMwMTI3WhcNMjYwODE1MjMwMTI3WjAzMTEwLwYDVQQD
EyhiMWJjYWQ1MTUwNmE5NTY4NWIxZmQzNWJmZDBlOGZhYjFhY2U1NGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsO+UD2qsmPfC5WABE6zluVW3UEgw
Gu9ApD+1RfQxOmsQgoB7NxUUncsj42rIFgANv/ZACQOitf/n22ydynH4JmMWGw0Y
Z7DZQVX35awtZOmjq9y9KPODwhhCSVXBKsr7qPCPRHyuHeA19i3feo2mGC6EaRCO
sfdg0LQGP7zo3DB4QKPLRd1GFTJoeoxJ9bSNGEJC7FZn3rAz3CmkTOah8f8t0EDj
M0MKoQPt6AV+TSN+vO8n3YaDcuLWdoyI6LiR8W43Ws7uXw1yqoKovJthmJ+qIXJz
hH8IbCdVsrqw4I0Gx9rHAaATbxgblj/VuJoocDeaoyC7DCKa5VkAxmBD9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLG8rVFQapVoWx/TW/0Oj6sazlS0MB8GA1UdIwQY
MBaAFAlOoc9P3DR1wfKNYRwfGP4CfBCYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1U2aHowX2NOSFhCOG8xaEhCOFlfZ0o4RUpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9lYWUzZDctZWVlOC00MjFlLTgwZDkt
OTgyY2NlODY4ZmZhLzEvQ1U2aHowX2NOSFhCOG8xaEhCOFlfZ0o4RUpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9lYWUzZDctZWVlOC00MjFlLTgwZDktOTgyY2NlODY4ZmZh
LzEvQ1U2aHowX2NOSFhCOG8xaEhCOFlfZ0o4RUpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU8x4fj82
xNjIF9md1VYKub1HN/tR1jjGcjDKFJX4cfB/NKJynYl1DFywc5OoZbz+ryVvgf1C
ku6yCIk2qq8INCYw+ktIXTCB5mpw7dTRXOfi0yWF9pQBq1fjGL4+dXkBvT+THMns
OO2UmupmgHr3TL28kn5eyU1FX2lEYFVqDKpzNOiPmb2WThdfwUeZyAPc6quLJJ4M
sR7Y9esVFO32v/ojUz3n/J2mpEZQxXytfg0kSQqe1/uAosOQYAqripjGOomq/bqi
1XhR91X8vPKSuLMBxS7NNRKqV4qdGMRbBi4jOJG4YJkapzQK2aS9nkTUCMT26L+t
22JxaXy448BWhg==
-----END CERTIFICATE-----
Generated at Sat Aug 15 01:11:59 2026 by rpki-client