Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft
File:                     RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft (raw, json)
Hash identifier:          9xUlY+IHrB0QlgKqwVEso+ub0FC70PjRa8p4pXWwF58=
Subject key identifier:   86:55:07:DD:EC:2B:0F:44:B7:F6:58:E4:B1:D7:33:58:E7:65:11:D0
Authority key identifier: 46:F0:17:71:D1:CC:8F:D1:14:C4:6A:61:62:06:AA:4C:59:DB:DC:19
Certificate issuer:       /CN=46f01771d1cc8fd114c46a616206aa4c59dbdc19
Certificate serial:       01A02732E0CED6ACC8FB31D2A47EACBA162A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft
Manifest number:          0EA4
Signing time:             Sat 22 Aug 2026 02:00:40 +0000
Manifest this update:     Sat 22 Aug 2026 02:00:40 +0000
Manifest next update:     Sun 23 Aug 2026 02:00:40 +0000
Files and hashes:         1: RvAXcdHMj9EUxGphYgaqTFnb3Bk.crl (hash: fQ0GK+/E1+C19VxukR8feIwcQS9wwuPI8gPPJz0vv+c=)
                          2: sKVP7_JMXgsXmjjxFeQ2pbiZSww.roa (hash: Wqcj3vAf/zWfuQq+F6Z9N/hZLBl0tmkL1ZSY3Yzwl0c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:27:32:e0:ce:d6:ac:c8:fb:31:d2:a4:7e:ac:ba:16:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46f01771d1cc8fd114c46a616206aa4c59dbdc19
        Validity
            Not Before: Aug 22 02:00:40 2026 GMT
            Not After : Aug 23 02:00:40 2026 GMT
        Subject: CN=865507ddec2b0f44b7f658e4b1d73358e76511d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e2:30:74:08:81:cd:89:ce:5d:b2:25:fa:a6:
                    0b:f5:14:5e:c6:18:95:cd:97:9c:9c:65:85:96:e7:
                    43:b8:b4:da:08:c1:84:03:ac:96:22:83:fb:e2:43:
                    2b:af:22:34:a0:d5:f4:62:4b:ef:0d:65:61:00:cd:
                    f4:8f:15:f4:2f:7f:c7:d7:7c:0a:d8:23:36:21:1b:
                    c5:d2:33:5e:c4:2c:c4:2b:ec:d4:e7:79:ee:a7:dd:
                    c0:d1:68:ac:4c:e1:0f:bf:0e:b1:62:d7:7e:a5:8e:
                    2c:b9:b2:21:40:f7:5c:95:c5:d3:fa:98:8a:fa:9c:
                    f4:e2:e7:40:7b:08:6d:a7:16:b4:6b:2b:e5:a3:57:
                    e4:aa:d6:d9:99:ee:b9:71:f0:f3:3a:fa:4b:9c:be:
                    43:11:28:3d:c0:f5:97:4c:bc:6e:92:a8:13:1c:ef:
                    ca:69:99:9a:8a:75:98:a4:2d:a6:1c:c8:16:cf:98:
                    67:6d:56:27:1c:7c:a4:10:55:e5:57:f6:91:95:be:
                    d7:86:94:0e:0d:f6:31:dd:81:7f:df:97:09:f7:ff:
                    1b:4d:a8:58:02:d7:e6:a3:6d:15:f0:91:37:03:8b:
                    68:2f:60:72:08:a5:a0:18:4e:6d:f1:9d:8e:3a:f1:
                    83:24:76:50:7d:7e:f3:c5:f3:db:a5:31:fc:77:dd:
                    d6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:55:07:DD:EC:2B:0F:44:B7:F6:58:E4:B1:D7:33:58:E7:65:11:D0
            X509v3 Authority Key Identifier:
                keyid:46:F0:17:71:D1:CC:8F:D1:14:C4:6A:61:62:06:AA:4C:59:DB:DC:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:39:47:7c:3f:42:1f:a9:87:23:c8:b6:d4:9a:78:8b:d3:81:
         a6:41:06:a6:1a:ea:30:cb:ad:00:6b:2d:5e:66:19:98:ac:12:
         e7:05:c5:d1:6b:58:af:d0:be:39:1e:9e:f5:60:ee:69:bb:b9:
         a3:15:83:51:4b:e6:f6:fc:14:52:61:c8:ef:68:84:0c:c3:b6:
         71:c9:ef:df:d4:ff:2e:0a:d5:84:ea:3d:57:12:29:98:70:da:
         58:ff:57:0a:f8:e7:bc:5b:6f:42:b5:1e:af:e7:c2:d4:7b:2e:
         b5:18:1f:17:92:48:ab:95:6f:a5:46:4d:89:9e:44:a0:1f:82:
         8e:3d:ce:6e:7b:10:4b:13:0d:3d:f8:76:4b:80:51:9e:4d:0f:
         9f:98:58:a0:7e:d7:b2:d1:e3:bf:54:62:85:e2:71:56:54:47:
         2e:39:74:4e:04:8c:e7:af:a4:d3:4d:8d:05:12:4f:d4:e3:8a:
         55:41:d9:93:71:0f:f4:4d:37:e6:09:60:01:e6:13:ae:0b:b7:
         e3:f1:07:6e:97:7a:96:dc:9c:61:a4:cf:f7:73:88:3b:74:78:
         14:b8:32:72:f3:8c:8d:06:17:8e:ab:17:e2:02:7c:cb:cd:3f:
         bc:bf:32:f7:0d:93:75:52:72:74:95:fd:df:b1:18:57:6d:51:
         ad:76:39:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 06:49:31 2026 by rpki-client