Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
File:                     ES0MTxbciSISn_YFDiNVYjF1ZeU.mft (raw, json)
Hash identifier:          fmyrKynElxQm3c5xESYr/LLj7gdt7ifUhSoHr6gyI84=
Subject key identifier:   92:D5:C7:05:0F:50:71:AB:51:7E:D7:80:62:1F:31:6C:CA:2B:F5:D0
Authority key identifier: 11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5
Certificate issuer:       /CN=112d0c4f16dc8922129ff6050e235562317565e5
Certificate serial:       01A00102044E7197EC713FD1D9F0BE44A21E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
Manifest number:          1A02
Signing time:             Fri 14 Aug 2026 16:01:44 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:44 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:44 +0000
Files and hashes:         1: 6ZC-AU-L5WqpZGLxzGOhgHsE1Cg.roa (hash: UlcGyQuYQRtTD6A9l9CK5v44VAfVgy8O5yhh3y24c6s=)
                          2: ES0MTxbciSISn_YFDiNVYjF1ZeU.crl (hash: zlEeYTlvIFge6t5azH6qwFrgMu/W53LwwH48hiSQZ7w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:02:04:4e:71:97:ec:71:3f:d1:d9:f0:be:44:a2:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112d0c4f16dc8922129ff6050e235562317565e5
        Validity
            Not Before: Aug 14 16:01:44 2026 GMT
            Not After : Aug 15 16:01:44 2026 GMT
        Subject: CN=92d5c7050f5071ab517ed780621f316cca2bf5d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:95:78:86:58:7a:ff:8b:8b:3d:91:af:57:a3:
                    41:7f:e0:27:17:5e:74:ef:48:fb:c3:ea:fb:fb:05:
                    25:60:80:35:22:19:b4:93:88:58:02:e6:35:27:22:
                    ce:41:3e:cb:f6:81:c9:a3:4a:7a:b7:0f:41:36:11:
                    16:5b:fc:c6:4b:b3:0e:2f:a4:ce:7c:8e:2e:bb:b0:
                    39:fd:9c:da:f0:4e:f7:1c:c9:b6:21:39:de:9c:79:
                    8c:bc:c0:1e:41:87:e4:54:32:08:ea:38:30:d2:c0:
                    dc:9a:1f:d0:dd:96:d6:0c:de:fd:37:6d:8c:1e:33:
                    75:37:24:6f:19:9a:70:98:fb:8a:a3:d3:ba:43:c5:
                    10:1b:7f:db:1d:77:99:a2:72:f6:5c:5d:7f:91:d2:
                    c9:34:39:66:63:0d:85:01:29:3f:7e:94:2d:12:1d:
                    89:1d:16:fe:64:f7:c9:01:f5:91:83:a0:ee:ec:e9:
                    50:a6:06:51:3d:53:23:b4:00:b5:4e:82:e8:04:1f:
                    07:41:ac:6e:f5:23:c9:d5:6f:0c:55:7b:96:d6:02:
                    d1:3e:df:10:ef:a4:d3:31:30:9b:0b:08:99:45:ff:
                    fc:72:35:7c:da:29:77:51:b9:73:03:4a:f5:21:60:
                    18:0e:a9:2c:13:2f:d4:3d:bd:ae:c0:a3:99:b6:4b:
                    ce:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D5:C7:05:0F:50:71:AB:51:7E:D7:80:62:1F:31:6C:CA:2B:F5:D0
            X509v3 Authority Key Identifier:
                keyid:11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:51:28:35:a9:2a:9c:ac:b7:e4:e1:1b:d3:9b:f2:3e:2f:c5:
         52:8b:5d:dd:1e:a4:2b:22:9f:c8:b8:27:6c:1e:96:34:44:f7:
         f0:28:69:87:40:a8:da:b8:05:47:d5:e9:05:86:69:c3:79:27:
         64:e6:a3:e3:b2:af:96:94:2f:dc:e6:94:82:f8:2e:9b:f4:39:
         a6:41:92:c4:44:5f:31:ac:38:5a:0f:ec:59:73:41:af:29:02:
         b2:b1:06:5d:a6:f6:57:43:be:00:17:26:3a:5f:31:c2:fe:67:
         aa:d1:d8:d5:d3:56:69:c4:dc:20:3f:d7:2d:b1:5b:05:5e:c9:
         01:1b:61:38:c6:6b:2e:db:87:67:a4:95:8b:d1:f3:94:61:6c:
         02:30:b5:e4:fa:94:58:ef:f4:78:1d:83:c6:a3:68:2f:a0:10:
         b3:77:2c:96:19:0b:59:a8:d1:e1:b5:c6:0b:04:02:4f:53:ad:
         8c:96:91:a7:01:21:b3:c7:4d:a3:32:7c:68:5d:b4:9a:34:8e:
         36:c4:f8:d2:dc:84:3e:fa:a0:6a:13:f2:da:b4:af:53:ab:ba:
         1c:48:1f:d1:7f:b8:33:84:ee:e4:37:b1:50:a7:c9:36:de:d0:
         5d:78:08:ca:00:05:e2:1c:8a:83:10:79:7d:07:79:0d:ad:be:
         23:d5:a2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:28 2026 by rpki-client