Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft
File:                     51ZNDMfaBfpYz72MKpQ1yzNizeI.mft (raw, json)
Hash identifier:          Zjc0RK972yejuPY7t3k3lcRB9Kb1GN+JcHdkNdOIMtQ=
Subject key identifier:   0B:0E:97:3B:0D:9D:F7:CA:81:9B:C6:24:60:70:D7:A1:A3:D3:78:D7
Authority key identifier: E7:56:4D:0C:C7:DA:05:FA:58:CF:BD:8C:2A:94:35:CB:33:62:CD:E2
Certificate issuer:       /CN=e7564d0cc7da05fa58cfbd8c2a9435cb3362cde2
Certificate serial:       01A000258735D1ABF78407F153487A9F7339
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft
Manifest number:          099A
Signing time:             Fri 14 Aug 2026 12:00:54 +0000
Manifest this update:     Fri 14 Aug 2026 12:00:54 +0000
Manifest next update:     Sat 15 Aug 2026 12:00:54 +0000
Files and hashes:         1: 51ZNDMfaBfpYz72MKpQ1yzNizeI.crl (hash: NP0bSofzpisAKN9oLTFTAuVKcvSsvyBEXj6BWICAPcE=)
                          2: n44f7QSdRCQiunlcmqHdl3w15uE.roa (hash: AjuubWqF9PqvZ/rZA7q3KWYt0VtrOQcS6lypZ6/PGG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 12:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:25:87:35:d1:ab:f7:84:07:f1:53:48:7a:9f:73:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7564d0cc7da05fa58cfbd8c2a9435cb3362cde2
        Validity
            Not Before: Aug 14 12:00:54 2026 GMT
            Not After : Aug 15 12:00:54 2026 GMT
        Subject: CN=0b0e973b0d9df7ca819bc6246070d7a1a3d378d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bf:1c:1d:0a:0f:72:2c:06:de:b0:53:d2:d3:
                    0c:4b:15:d2:6c:60:fc:9e:7a:92:7b:27:51:30:08:
                    5b:15:fe:ce:25:b6:9d:54:5d:63:5c:70:96:9d:fd:
                    0c:12:2a:81:3b:b8:41:de:b3:28:a9:c9:6b:07:68:
                    94:6c:d2:de:42:d3:70:ed:bc:da:2b:fa:49:a2:9e:
                    d7:5f:f7:a8:8c:56:64:f4:12:45:fe:23:0d:8f:1b:
                    7a:2a:5f:07:94:44:89:08:4e:0f:04:77:b9:8c:9a:
                    30:94:ea:f2:73:8e:92:63:80:22:e8:58:30:13:3b:
                    cb:92:68:84:7f:a5:00:a5:09:ab:4b:3a:93:bf:82:
                    6f:be:b6:72:0f:de:18:dd:48:96:e5:06:91:a5:34:
                    1e:54:71:f0:7f:10:08:7a:92:44:40:f5:7f:19:fc:
                    fa:d1:ec:50:e4:72:b2:c7:e8:27:cb:bc:01:95:27:
                    25:8e:0b:44:48:bf:46:5f:d2:04:de:3e:a8:99:0d:
                    53:dc:77:3f:4f:da:21:8a:cd:e7:60:2f:59:93:77:
                    e7:fb:cc:08:1f:a9:1a:89:22:d7:d5:43:0e:ff:b6:
                    57:c0:d0:b3:9d:30:c1:eb:ea:4e:34:b3:f0:bb:55:
                    ca:ac:3c:49:d8:6d:f9:e3:cd:af:ee:03:b3:d3:f8:
                    c0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0E:97:3B:0D:9D:F7:CA:81:9B:C6:24:60:70:D7:A1:A3:D3:78:D7
            X509v3 Authority Key Identifier:
                keyid:E7:56:4D:0C:C7:DA:05:FA:58:CF:BD:8C:2A:94:35:CB:33:62:CD:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:e0:c6:7f:b2:a9:4d:a2:3c:78:ec:3c:cb:38:1e:19:0e:e5:
         c9:89:34:c9:46:64:e8:c7:67:d1:e7:77:4f:b8:ad:5c:5b:f6:
         60:e0:08:7e:3b:46:f7:20:aa:3c:7c:a5:21:79:23:cd:2c:14:
         aa:42:ba:17:b4:3b:ba:12:29:c8:bf:99:0c:37:3f:46:4d:6c:
         42:8e:fb:9a:42:97:9c:f5:f3:a5:21:cf:0c:3d:9b:f9:61:cd:
         3d:7b:bb:c0:35:42:d9:cf:3f:7f:fb:c4:b5:db:05:31:40:aa:
         f9:99:c0:fe:4a:d9:aa:cb:b2:47:9a:d4:6a:0d:51:68:e4:87:
         2b:3e:ba:5c:4b:a9:90:8d:0c:e3:b7:10:2b:40:a7:f1:fc:9b:
         20:74:3f:15:6a:0a:f7:5f:c7:40:5b:97:bb:2e:77:b7:ef:0d:
         35:97:a3:62:7e:4f:45:4d:aa:ea:60:4e:5d:79:74:dd:25:bd:
         04:11:30:45:00:4a:b8:63:0d:c4:17:2e:40:d2:a8:44:ea:8a:
         be:06:dc:ac:4a:c2:dc:a5:ea:18:7c:30:75:5e:8c:ab:9d:af:
         5b:32:fe:5e:9a:e5:92:7a:a7:ea:d8:a1:78:2f:a2:55:99:ee:
         f9:68:22:e5:e5:9f:91:4a:64:c4:fb:59:f3:07:cd:99:5b:e8:
         8e:fb:ba:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:05 2026 by rpki-client