Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft
File:                     49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft (raw, json)
Hash identifier:          5zfC1DVI7aAj3miEkEux4kDnC/Pmy9Ly+/KAmdQNSbE=
Subject key identifier:   63:5E:20:58:94:02:56:F9:C0:C5:52:E9:43:8E:0F:81:A1:7D:1D:12
Authority key identifier: E3:D2:2C:01:78:46:56:D4:F5:66:6E:77:03:48:1A:2F:70:84:E4:F9
Certificate issuer:       /CN=e3d22c01784656d4f5666e7703481a2f7084e4f9
Certificate serial:       01A02C900BDF4224941C0EAD82884219B0B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/49IsAXhGVtT1Zm53A0gaL3CE5Pk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft
Manifest number:          0207
Signing time:             Sun 23 Aug 2026 03:00:32 +0000
Manifest this update:     Sun 23 Aug 2026 03:00:32 +0000
Manifest next update:     Mon 24 Aug 2026 03:00:32 +0000
Files and hashes:         1: 49IsAXhGVtT1Zm53A0gaL3CE5Pk.crl (hash: 37Hnn0lBZJYiBhePCv2lwGaMXJYnGM+SxfXSF5TqqUQ=)
                          2: KIZ8Qo_Osa0eeRKHpCezFEWpt38.asa (hash: BUCO47iMjOX10Oz4gqlvyalBtDL8T56NMGskn473Wu8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/49IsAXhGVtT1Zm53A0gaL3CE5Pk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Aug 2026 02:32:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:2c:90:0b:df:42:24:94:1c:0e:ad:82:88:42:19:b0:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3d22c01784656d4f5666e7703481a2f7084e4f9
        Validity
            Not Before: Aug 23 03:00:32 2026 GMT
            Not After : Aug 24 03:00:32 2026 GMT
        Subject: CN=635e2058940256f9c0c552e9438e0f81a17d1d12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:66:6c:a9:17:88:d5:63:65:c9:25:e3:76:9f:
                    6d:3a:b6:42:28:61:04:6f:8c:93:e9:ef:2a:f3:9a:
                    7c:78:44:9a:6e:0c:ae:7b:1f:ef:f5:e4:e5:3e:0e:
                    f8:2f:9a:9f:2c:0a:bd:18:d5:61:84:85:09:f3:ac:
                    26:02:c1:e9:88:d2:86:98:67:8d:b6:04:36:9e:46:
                    a3:ff:ae:e4:25:6c:ee:f4:da:6b:28:db:fd:5c:cc:
                    5a:9a:8b:12:df:cc:27:57:e4:e2:f5:6d:ea:d2:c5:
                    a9:8a:0e:d2:ce:ab:ec:d5:73:59:95:14:d2:fc:f0:
                    20:ad:58:bd:43:b8:9e:14:4f:ac:45:8e:65:04:25:
                    0b:00:b0:30:91:16:65:69:82:cd:65:98:bc:cc:20:
                    71:3e:b2:ed:f8:4a:3c:c1:f6:cf:9e:ff:03:2f:8e:
                    96:46:15:86:44:6d:ee:a1:27:6a:16:06:4e:60:16:
                    7e:de:a6:4c:e0:0e:ac:5f:6d:e8:7e:4d:bf:e3:9a:
                    2e:27:4e:41:60:65:9c:aa:98:64:65:41:c4:d1:72:
                    95:3d:d3:de:af:3e:f3:c5:fb:78:65:4d:1b:21:b4:
                    68:9f:1a:a8:43:ad:5c:55:a2:bb:de:bf:69:8a:30:
                    33:61:ef:10:12:a8:de:26:34:67:d5:30:7a:79:d8:
                    8f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5E:20:58:94:02:56:F9:C0:C5:52:E9:43:8E:0F:81:A1:7D:1D:12
            X509v3 Authority Key Identifier:
                keyid:E3:D2:2C:01:78:46:56:D4:F5:66:6E:77:03:48:1A:2F:70:84:E4:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49IsAXhGVtT1Zm53A0gaL3CE5Pk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:64:80:91:c8:54:d9:75:f1:4f:24:5b:47:9f:0b:b7:81:ef:
         c5:27:e8:63:16:fd:b0:8a:ef:e5:b2:ea:cc:e0:6a:97:17:83:
         b1:c3:21:af:e4:26:f6:c7:bf:6f:e4:86:4c:df:71:9c:83:7c:
         6a:3d:65:da:49:25:7a:d7:ba:a8:03:e4:3b:be:e8:60:18:a4:
         29:65:ee:ee:d2:0e:9d:fb:e1:8b:d6:c1:f5:bc:1c:fb:19:72:
         52:8f:8d:34:63:d7:bd:f3:66:e2:7a:55:6e:e9:ad:75:89:02:
         0f:71:77:cd:2c:9c:5c:83:a8:99:a9:1e:c9:8b:a8:22:84:0e:
         88:7f:28:2f:0f:8c:7f:f8:81:2f:6d:56:49:30:46:40:5c:d5:
         f1:39:f4:e5:43:e3:26:b2:77:f2:1d:2a:10:8d:cd:3f:d8:fd:
         da:47:36:f6:37:36:35:58:69:b0:2c:08:c6:27:3c:a2:37:0f:
         ad:46:3e:4b:0f:55:86:ee:e6:82:84:56:c1:95:44:50:33:2b:
         1e:be:1d:e7:c9:8e:f7:da:77:b2:3a:77:d5:a2:fc:1d:31:77:
         85:c0:5a:4e:f9:eb:ac:8b:fc:d4:75:cc:38:43:64:13:c4:c7:
         3a:88:6f:59:13:86:79:49:1f:1a:27:f2:ce:5b:11:9e:8f:06:
         83:1b:a9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 05:16:04 2026 by rpki-client