Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
File:                     B_65rg-oknBF-DQjdDxKc6J6dKc.mft (raw, json)
Hash identifier:          QxrF7vEQ7WFR5XcXxGyjb78JpUiMznGwDQsNrt+d/Gk=
Subject key identifier:   A8:92:3D:D5:BB:BF:B7:80:3D:67:CE:59:8E:9C:98:47:C0:37:DA:F1
Authority key identifier: 07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
Certificate issuer:       /CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Certificate serial:       019FFF499BDD6B2B251411B1C3D71F4D90A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
Manifest number:          1A02
Signing time:             Fri 14 Aug 2026 08:00:41 +0000
Manifest this update:     Fri 14 Aug 2026 08:00:41 +0000
Manifest next update:     Sat 15 Aug 2026 08:00:41 +0000
Files and hashes:         1: ABBwkEzotHssFvLAUqOqZl36BVo.roa (hash: dEDcIYfYDWYKiT/mjWB6IYlv7v5dgtX5b4iPv92zXw4=)
                          2: B_65rg-oknBF-DQjdDxKc6J6dKc.crl (hash: Y+KYAZIGIp3HD9RRnFRbvRG9f+ZRJwZMipb2v5QeoSQ=)
                          3: JxdVQlPabf5FpimKARBZDSKiNxU.roa (hash: iaX91Mhj2IG2/tYDP0MoHlwqtJyUmq2/acODPla0N8E=)
                          4: KtSkCkgQPN_jCjx_NpSrj0Cqf2k.roa (hash: Z7pmLe6ijXP6+y2mebYVp1P1jXZISWrSpz5NJdmd0Uo=)
                          5: dtKfjS2Cx153-9Bxv94dxO25icU.roa (hash: e1P0tOI8yTdnj97qKiJfMB6m74LROCBqW62mLe1obDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 00:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ff:49:9b:dd:6b:2b:25:14:11:b1:c3:d7:1f:4d:90:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
        Validity
            Not Before: Aug 14 08:00:41 2026 GMT
            Not After : Aug 15 08:00:41 2026 GMT
        Subject: CN=a8923dd5bbbfb7803d67ce598e9c9847c037daf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:26:32:1c:75:c6:ef:f6:1a:35:4f:dc:c4:85:
                    c4:43:71:c0:9a:44:bd:d4:47:ad:76:42:c1:9d:15:
                    cc:b7:2c:65:c2:a3:d4:24:5f:b9:fa:0d:02:8e:1d:
                    41:4a:e2:26:eb:54:06:20:84:bd:99:1c:a3:ff:21:
                    dd:d2:a4:f7:d8:fb:86:c0:a9:83:9e:a5:e9:32:d7:
                    c0:ed:8d:de:3a:dd:d2:bc:72:2e:08:06:9a:ff:86:
                    60:6f:53:e9:7e:fa:1a:78:2f:e5:e6:e0:c8:cc:8e:
                    f9:13:4a:cc:31:df:77:48:28:8c:95:0a:a8:46:ad:
                    18:64:b0:88:9c:b7:1d:e9:cd:90:cc:7d:95:6c:f1:
                    6c:23:2f:bd:27:6d:57:45:21:c0:95:c6:74:7c:30:
                    96:b3:87:ea:77:f1:6f:d5:e0:09:2f:b7:26:78:f3:
                    04:bc:0f:99:49:b8:bb:c9:33:0c:41:7b:41:95:4e:
                    ea:3a:05:aa:69:a4:fd:a4:aa:fb:7e:9f:fb:5c:fa:
                    bf:67:94:65:b0:2b:c1:91:a4:70:77:89:12:bc:d0:
                    05:2b:13:23:69:98:e3:1d:c0:d7:8b:36:f1:d1:1b:
                    ef:fb:34:ab:6b:4e:67:a2:fa:39:59:71:3e:98:b9:
                    1f:d1:8f:5f:b9:68:14:32:a4:d0:f0:43:b9:7e:da:
                    b4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:92:3D:D5:BB:BF:B7:80:3D:67:CE:59:8E:9C:98:47:C0:37:DA:F1
            X509v3 Authority Key Identifier:
                keyid:07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:bc:ff:85:e7:92:ff:7a:52:b4:c4:9f:73:2f:b7:a4:57:62:
         10:78:a9:65:a0:77:23:b9:38:ee:68:1f:62:86:40:3f:3f:06:
         af:f9:26:c6:ff:f9:ae:1a:a7:f2:45:c8:e6:5d:b2:f0:92:b4:
         4d:40:40:6b:8c:08:5a:0a:36:01:36:f8:fe:c4:e7:f8:a0:12:
         07:b3:c2:55:a5:a9:59:3f:0c:ce:56:60:8d:c7:a2:16:de:bf:
         46:f9:1e:dc:8e:ef:7b:44:ca:4b:dc:10:80:1e:ef:2e:99:3c:
         3a:4a:30:9d:77:0e:09:2e:23:e8:41:ef:6e:93:99:ba:8f:f0:
         70:cc:38:75:af:fe:e1:d2:0c:9e:4b:b3:d6:8e:86:66:9f:13:
         3b:00:c2:5d:5e:fd:d8:37:62:b2:9e:e9:09:9b:c1:87:35:8d:
         d4:31:16:8e:e1:c8:4a:b2:a5:9b:e9:6f:ac:6b:9b:7b:0d:d4:
         b0:8f:cb:66:9f:c9:72:8e:01:80:24:7e:a9:8d:93:72:68:00:
         72:72:c7:51:4f:e8:63:1a:76:9c:49:d6:50:86:2f:59:07:3d:
         9f:6e:e1:db:48:78:c9:a8:40:40:e4:cb:09:1e:60:44:45:22:
         2f:50:c1:cd:e8:8e:16:c2:93:53:62:40:40:65:f0:90:c6:05:
         f6:32:99:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:49:36 2026 by rpki-client