Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft
File:                     r-us3hVZeiga4rspMG3E2m3Pt14.mft (raw, json)
Hash identifier:          X0zRGc+7fMX2D/ik8souzazNmdJo8865+wbgqm3iRcA=
Subject key identifier:   14:4C:E8:F1:0A:59:F0:EB:77:CB:30:4C:3C:A0:9D:B7:4F:A2:CE:D7
Authority key identifier: AF:EB:AC:DE:15:59:7A:28:1A:E2:BB:29:30:6D:C4:DA:6D:CF:B7:5E
Certificate issuer:       /CN=afebacde15597a281ae2bb29306dc4da6dcfb75e
Certificate serial:       01A03A4C822F16D35E6257DE4310FC72ED1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-us3hVZeiga4rspMG3E2m3Pt14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft
Manifest number:          0233
Signing time:             Tue 25 Aug 2026 19:01:27 +0000
Manifest this update:     Tue 25 Aug 2026 19:01:27 +0000
Manifest next update:     Wed 26 Aug 2026 19:01:27 +0000
Files and hashes:         1: jdSx0T-sdrzr500OOr7Atdy3Z4E.asa (hash: nbjDNb/jtcCfwpceFtypmGiC8RlKHHL0LGrtqS6ZCo8=)
                          2: r-us3hVZeiga4rspMG3E2m3Pt14.crl (hash: k2ZmEMo8njsbQnVQCwFairfW9+R1IxGOW+AxVV3PnNw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r-us3hVZeiga4rspMG3E2m3Pt14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Aug 2026 15:15:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3a:4c:82:2f:16:d3:5e:62:57:de:43:10:fc:72:ed:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afebacde15597a281ae2bb29306dc4da6dcfb75e
        Validity
            Not Before: Aug 25 19:01:27 2026 GMT
            Not After : Aug 26 19:01:27 2026 GMT
        Subject: CN=144ce8f10a59f0eb77cb304c3ca09db74fa2ced7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:95:20:ce:85:a7:92:8d:dd:21:a0:21:13:10:
                    50:b4:7b:b7:1c:55:2e:19:f7:97:64:04:1d:de:7b:
                    a2:42:47:40:ce:9a:5b:56:ae:ce:c5:be:b8:ec:02:
                    fe:5d:ba:9e:24:27:bb:a1:3e:d3:89:14:3b:0f:65:
                    a2:56:6a:0a:de:32:1b:47:f1:b3:9f:1e:d7:0d:1a:
                    61:9b:02:a5:31:50:b7:df:2b:7d:fc:08:be:49:c6:
                    5a:63:88:af:9a:3c:ff:16:35:97:e2:96:8a:5f:9a:
                    95:86:be:ca:19:56:23:0d:34:bf:e8:d2:88:1d:3e:
                    42:8a:7d:91:52:8f:4d:34:37:34:2d:13:7e:03:ac:
                    c7:6d:d0:d6:3a:5b:aa:bc:a8:21:c1:16:b6:fb:f5:
                    b0:14:c1:ad:b1:3f:2a:bb:07:27:fe:05:22:0f:e9:
                    15:73:75:6d:72:b7:3c:e4:61:9d:c0:3b:68:ea:79:
                    2f:02:cf:f1:f1:12:65:d9:06:fa:f0:d0:68:a5:52:
                    48:4b:19:bd:b2:16:9a:76:9e:7b:af:b4:5b:da:d5:
                    6a:d7:13:ae:b2:19:35:7c:8d:1c:e6:ea:88:12:a0:
                    f0:df:51:0b:02:04:21:9b:45:89:4d:d2:69:f7:bb:
                    b4:87:43:74:3f:16:10:33:fa:fe:41:af:32:82:f7:
                    92:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:4C:E8:F1:0A:59:F0:EB:77:CB:30:4C:3C:A0:9D:B7:4F:A2:CE:D7
            X509v3 Authority Key Identifier:
                keyid:AF:EB:AC:DE:15:59:7A:28:1A:E2:BB:29:30:6D:C4:DA:6D:CF:B7:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-us3hVZeiga4rspMG3E2m3Pt14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:d2:c0:e3:5b:65:fd:42:f4:09:12:29:3d:79:72:8c:17:79:
         1f:56:05:f7:8d:0d:42:71:46:47:aa:f0:ae:76:ff:81:d6:40:
         70:af:02:50:3e:ea:a5:8f:29:ee:fe:6b:aa:07:af:30:61:af:
         12:01:23:69:ff:12:8c:75:9e:4d:61:98:fb:a1:2d:85:9c:12:
         76:74:c1:9a:29:d5:b7:b4:f7:79:92:84:3b:55:ec:77:dd:fc:
         46:6e:d7:95:c2:33:53:c3:37:47:06:f0:03:00:be:a1:9a:5f:
         86:50:e2:b9:f9:7a:f8:18:54:a4:07:02:d1:55:df:28:ee:9c:
         d0:ed:60:8d:4d:0c:56:c2:14:16:49:c7:13:00:62:9e:c2:ec:
         f7:cf:77:c6:c4:75:46:8a:6c:92:20:6e:be:6d:df:90:90:96:
         17:db:5b:80:13:87:a0:ca:2a:22:b0:6a:cf:22:4f:68:f6:8f:
         20:4d:a1:c2:41:29:09:a6:68:c9:cb:7e:ce:49:06:8c:3f:55:
         0a:54:a9:a3:aa:24:d9:18:ff:b8:1a:9c:c4:1c:fd:5d:2a:de:
         b4:0a:6c:e7:38:2b:89:1c:41:46:7f:e2:69:2d:df:d9:db:e0:
         75:50:0a:15:bc:33:ec:d4:71:2f:5d:db:3d:3b:18:69:d9:7c:
         e9:e0:08:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 02:20:39 2026 by rpki-client