Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
File:                     4uevc8B6V4KvJINOvdt0qciXxP8.mft (raw, json)
Hash identifier:          AsHazfwdwuYeCOkAnICwa2RVzZKrm1xoP4XmcVURCds=
Subject key identifier:   29:2F:D3:D8:1D:1E:07:BD:CF:A2:7F:88:9E:7D:92:C9:6C:71:E6:B5
Authority key identifier: E2:E7:AF:73:C0:7A:57:82:AF:24:83:4E:BD:DB:74:A9:C8:97:C4:FF
Certificate issuer:       /CN=e2e7af73c07a5782af24834ebddb74a9c897c4ff
Certificate serial:       019FF9B5A419A8D49F31E7776E80A769241B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
Manifest number:          0657
Signing time:             Thu 13 Aug 2026 06:00:58 +0000
Manifest this update:     Thu 13 Aug 2026 06:00:58 +0000
Manifest next update:     Fri 14 Aug 2026 06:00:58 +0000
Files and hashes:         1: 4uevc8B6V4KvJINOvdt0qciXxP8.crl (hash: NPOG9oay8QCq6iVZngk/qxghzrSPaWWWM8JnTjzNsTg=)
                          2: O4YiRIWBlabnpHM7xKFcaOrOaKI.roa (hash: ayodsdmBoAdUSEjYUyXeYrwcQDz8Nad0uAG3lrZysIY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f9:b5:a4:19:a8:d4:9f:31:e7:77:6e:80:a7:69:24:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e7af73c07a5782af24834ebddb74a9c897c4ff
        Validity
            Not Before: Aug 13 06:00:58 2026 GMT
            Not After : Aug 14 06:00:58 2026 GMT
        Subject: CN=292fd3d81d1e07bdcfa27f889e7d92c96c71e6b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:80:e1:88:a7:82:21:26:35:36:55:52:be:d7:
                    ab:13:ae:19:a6:bf:6d:27:d1:c0:64:21:8b:aa:85:
                    46:c6:2f:f1:b6:cb:9f:b0:02:24:15:01:d9:c2:75:
                    85:ce:61:22:fe:08:8e:6c:46:f4:cc:70:84:2c:3a:
                    2e:ca:1b:23:cc:ce:de:c4:3e:f2:5c:4a:b2:28:76:
                    fa:5f:9e:13:34:d0:41:ee:c8:4f:dd:d5:b8:f8:e8:
                    3b:39:8e:4b:f9:55:3d:82:9e:41:ba:b7:b6:7a:3c:
                    b9:db:e3:fd:da:5a:71:c7:30:58:f7:77:ad:56:8a:
                    5b:42:19:b7:09:c0:99:dd:49:31:3f:45:e9:0c:18:
                    f8:d9:49:c1:84:22:6f:e0:af:83:62:25:8b:93:f1:
                    77:63:9c:80:79:8e:ce:52:40:ba:3b:db:96:17:7a:
                    b6:fb:86:e4:a8:5d:63:51:68:81:cd:8c:85:1e:84:
                    c2:08:d7:39:a4:48:3b:df:45:af:78:49:de:e3:39:
                    fb:90:7d:02:e2:46:83:08:34:54:45:44:a2:03:35:
                    e3:a1:2a:a2:b9:3a:a2:43:e1:b9:09:64:4d:ce:49:
                    f8:62:55:57:f8:a3:17:20:45:33:9c:fa:47:11:7b:
                    ca:01:b4:bb:56:81:98:9c:6c:d7:93:59:ce:60:b7:
                    65:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:2F:D3:D8:1D:1E:07:BD:CF:A2:7F:88:9E:7D:92:C9:6C:71:E6:B5
            X509v3 Authority Key Identifier:
                keyid:E2:E7:AF:73:C0:7A:57:82:AF:24:83:4E:BD:DB:74:A9:C8:97:C4:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:c2:6c:70:8b:46:5f:65:0d:ab:34:6b:a1:23:d0:0d:38:1a:
         df:02:1a:b7:79:22:3a:33:dc:49:c5:7c:22:d3:cf:3e:51:71:
         0e:49:64:62:6d:94:7c:da:dc:31:0d:48:02:85:37:6b:2d:63:
         26:62:02:77:04:f3:4e:14:91:0c:5d:60:2a:8a:e2:89:30:97:
         17:96:9b:2c:56:24:b7:d4:59:e2:22:37:fe:88:64:59:85:90:
         24:57:b7:c1:96:4b:86:ed:51:16:58:f8:47:88:d3:88:20:0c:
         86:10:66:b2:d5:16:4b:6d:61:41:59:9f:81:93:36:28:89:30:
         92:05:7b:de:14:d8:47:95:b4:9f:b2:67:dd:d8:86:3b:80:3a:
         2a:01:90:4f:fa:06:44:54:78:ae:39:1f:34:45:a5:b0:90:10:
         d9:56:ff:4d:c7:08:81:2c:05:a5:0a:0e:4f:1c:c3:ad:23:2c:
         4e:67:fc:53:3d:97:87:0d:ca:c2:fe:ff:4a:55:47:24:51:e3:
         f6:64:9a:c0:08:3b:9e:8b:99:d2:62:4e:56:1c:b4:36:2c:60:
         05:4f:2b:73:d9:cb:fc:01:a4:56:72:03:35:c1:31:1e:2e:42:
         6a:37:30:11:e7:ff:a2:77:66:bc:37:c3:74:3e:da:dc:40:38:
         3b:c6:32:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:01:53 2026 by rpki-client