Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
File:                     31kIP69fArumaAmhoicuryboo3g.mft (raw, json)
Hash identifier:          WG6MYPfis0DWRly8ESKuMEzeMrHAC5DG9FUUbtGPHWw=
Subject key identifier:   00:FB:E8:AA:25:04:66:BE:F6:76:24:35:B6:0C:9E:D9:08:3F:04:59
Authority key identifier: DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78
Certificate issuer:       /CN=df59083faf5f02bba66809a1a2272eaf26e8a378
Certificate serial:       01A00137F8BE2608498BD2788680DFF12AF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
Manifest number:          1A01
Signing time:             Fri 14 Aug 2026 17:00:40 +0000
Manifest this update:     Fri 14 Aug 2026 17:00:40 +0000
Manifest next update:     Sat 15 Aug 2026 17:00:40 +0000
Files and hashes:         1: 31kIP69fArumaAmhoicuryboo3g.crl (hash: 5zvaV0PPpDrMp9v0cGKtjdb7pSsuCn4AvcJOX9jWE5E=)
                          2: bFzdMPznlOjSbXFpquaFvhugI8E.roa (hash: K3/O8FhhB6ddNanECmUzETBKUHzHCD/aSiUCGY1B2qk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:37:f8:be:26:08:49:8b:d2:78:86:80:df:f1:2a:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df59083faf5f02bba66809a1a2272eaf26e8a378
        Validity
            Not Before: Aug 14 17:00:40 2026 GMT
            Not After : Aug 15 17:00:40 2026 GMT
        Subject: CN=00fbe8aa250466bef6762435b60c9ed9083f0459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:97:e0:f2:a2:b6:da:90:ca:f1:fa:60:8a:f0:
                    a9:c7:cf:84:5f:df:09:f7:c1:f2:72:d7:cc:8b:6f:
                    f4:9a:41:b7:bd:9f:29:98:20:8d:2e:43:c8:ca:5c:
                    6d:30:4a:3c:c6:85:a9:46:8e:ee:f4:7f:af:a8:bb:
                    b6:ed:02:53:ef:22:0f:a1:dc:1b:d5:1b:75:c3:d2:
                    b4:26:93:3d:36:74:3b:7f:f4:7a:66:d2:c4:c5:dc:
                    a6:71:55:44:26:db:67:5a:e8:06:f3:ae:2e:65:3a:
                    ce:2c:d4:a4:fb:4e:8b:8c:5d:d2:d7:23:4c:16:e6:
                    05:b6:3f:94:50:2b:64:05:d3:d4:82:bd:be:c0:1a:
                    bd:ee:21:80:90:7c:3a:a9:46:3b:bf:d4:c1:71:b7:
                    44:c1:fa:30:ba:51:7c:20:21:39:e6:f9:c3:b7:c1:
                    b8:02:20:e7:15:73:77:c7:56:e4:35:da:1a:30:d0:
                    9d:f7:b5:9d:7c:93:f0:26:9f:47:52:2b:db:40:14:
                    b4:ea:48:41:43:17:4a:4b:51:a9:8f:90:70:0a:5b:
                    8f:c1:ff:41:4a:40:f8:21:cd:bd:1e:70:37:b4:1f:
                    b6:e1:b4:4b:c3:46:8d:a1:c7:3b:4f:9d:6a:95:14:
                    5f:f1:71:e0:c8:eb:de:6f:63:6f:a3:21:18:f1:37:
                    0b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FB:E8:AA:25:04:66:BE:F6:76:24:35:B6:0C:9E:D9:08:3F:04:59
            X509v3 Authority Key Identifier:
                keyid:DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:72:0a:c2:1f:c5:16:eb:40:04:9c:61:dc:0a:61:14:38:ee:
         31:40:6c:74:71:87:5c:26:02:05:0e:62:30:96:04:5e:6e:07:
         5b:46:c7:85:12:7c:90:ed:68:74:28:b9:41:2c:f9:cc:9c:30:
         b8:c8:e1:e5:d2:e7:89:cc:b7:6e:59:dd:f1:e2:8f:ba:b3:f5:
         e6:d6:4f:fe:1f:79:ff:8f:ea:7f:d3:7d:dc:31:a4:dd:69:3d:
         cb:e9:40:a4:a2:9e:32:a1:39:02:7e:fc:c8:02:a5:97:98:3f:
         52:24:4d:18:4a:7d:31:47:61:5d:24:4a:69:9a:70:c0:5c:b5:
         0f:cd:9e:2b:0c:36:ea:b9:5a:29:49:fa:b3:18:61:68:0d:1f:
         b5:9c:8f:4e:e7:3d:f2:98:d2:53:2d:f2:7e:b8:f1:74:4b:00:
         ef:8b:58:16:dd:01:40:df:62:0d:0f:fe:06:fc:74:f8:34:d6:
         e9:cc:b0:22:d4:d9:29:78:9f:1d:9e:42:24:7d:50:c9:b2:c0:
         0d:d6:9e:8d:51:e1:7d:ec:9e:54:47:8f:32:af:8a:89:23:da:
         32:95:03:43:6e:77:b6:07:91:0d:b4:fd:a1:34:30:74:42:bb:
         6a:83:ea:9c:de:a7:e4:38:f3:3d:85:19:20:05:4f:60:3f:eb:
         b2:d4:9c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:23:56 2026 by rpki-client