Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
File:                     B9dTNfd79CQJdid7HdDhm7I6jh0.mft (raw, json)
Hash identifier:          fKKJhYVJzK2d1KzSv6EK1nt0RP7VCBzmGXqxPfnpYBw=
Subject key identifier:   5B:FF:83:42:B1:BE:3C:82:5B:ED:2C:83:72:B6:5B:A4:65:22:D4:AE
Authority key identifier: 07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
Certificate issuer:       /CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Certificate serial:       01A001DD13B3F52E90883E01FF55E14E1EBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
Manifest number:          1A04
Signing time:             Fri 14 Aug 2026 20:01:00 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:00 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:00 +0000
Files and hashes:         1: B9dTNfd79CQJdid7HdDhm7I6jh0.crl (hash: L6BdURf5/Mp5eSZT2OGCT5SvETcRAvZGC7NUOoOhp5g=)
                          2: VuZOG8s543NfcGdXf57yIIrySJ8.roa (hash: Z7XKmPS1GYE3f8Q+rg/H8yChwaPlHaJspMgwTyoFFv0=)
                          3: sZxFDMEjV4E6bBsRgrZxjoy7_tk.roa (hash: zq0CNZddr6RR3XPpn+vNQeYgJJau/bg5D4OmfDaVY/s=)
                          4: tdeCucXFWGUBsGHwqe6hB6aeUEQ.roa (hash: enVyFjAXmV6jKlcwgcqYoRWX2/X4d1HEfq19dhiH9Q0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:13:b3:f5:2e:90:88:3e:01:ff:55:e1:4e:1e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
        Validity
            Not Before: Aug 14 20:01:00 2026 GMT
            Not After : Aug 15 20:01:00 2026 GMT
        Subject: CN=5bff8342b1be3c825bed2c8372b65ba46522d4ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2e:9d:39:c7:20:df:e9:f4:87:86:f8:46:68:
                    b6:92:62:49:4c:e1:f7:5e:38:ae:f7:55:31:f4:b0:
                    31:4c:54:56:2c:46:8d:42:33:96:34:cd:dc:c5:9d:
                    03:ad:a3:78:e0:12:78:0d:f2:15:67:d1:77:35:38:
                    59:a7:3e:18:4a:a1:27:a2:9d:36:75:48:f4:53:48:
                    5a:7e:8c:21:2c:ea:1b:12:19:65:b1:fb:08:3c:84:
                    83:f2:a8:ab:99:49:15:6b:45:71:9c:2a:ce:6e:b8:
                    90:0a:f6:4a:aa:76:a2:37:56:0b:0b:2b:25:df:51:
                    d9:e3:0c:47:01:6a:ac:ad:76:8f:7a:9f:27:95:89:
                    17:56:d0:67:05:a3:e2:47:b4:ed:98:df:ab:89:8b:
                    e4:f8:5b:3d:08:bf:ef:9f:8f:88:2f:ad:8f:bb:7b:
                    3b:21:20:07:61:93:ce:69:72:50:6b:41:24:9e:23:
                    ef:b3:b6:fa:67:cb:9b:aa:3d:52:bc:b4:51:69:17:
                    5c:c5:2f:19:fc:14:09:54:b1:51:ef:fc:c8:14:86:
                    fd:fd:00:eb:db:c9:5d:6c:01:97:a1:40:db:8f:99:
                    8d:b1:5c:01:8b:cf:bc:1d:67:73:d7:0e:fd:68:01:
                    82:c1:01:7c:93:79:af:2f:11:59:72:af:3d:00:ab:
                    df:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FF:83:42:B1:BE:3C:82:5B:ED:2C:83:72:B6:5B:A4:65:22:D4:AE
            X509v3 Authority Key Identifier:
                keyid:07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:19:be:02:2b:40:a6:10:23:90:ee:9f:79:57:d8:5e:af:b1:
         a6:c2:2d:fd:f0:42:03:2d:e0:f8:84:f9:85:b2:4b:52:91:be:
         74:a6:6a:f6:34:d6:2f:3f:22:91:a3:b2:20:f2:76:82:8b:5f:
         6d:a6:d0:5e:43:5e:7e:2d:08:99:2d:30:4d:78:aa:49:0d:27:
         7f:24:d1:38:9f:38:07:01:ac:d3:c0:29:96:dd:1e:5c:8d:41:
         ad:32:af:51:f2:08:58:f9:cf:30:8c:05:66:75:59:bf:71:87:
         2c:81:fe:f6:b8:aa:1a:07:fb:28:a1:f6:f3:ff:a5:d5:be:b2:
         b4:63:5a:53:2c:b1:dc:6e:ba:d4:94:65:a2:b5:b6:3d:9e:d4:
         eb:c3:9e:8a:e1:66:63:11:0c:38:76:cd:14:ab:22:00:34:d4:
         8f:2d:4d:b5:19:03:13:ec:da:b4:6d:a3:c0:32:e9:68:1b:27:
         a6:ce:0b:3b:44:27:1a:b4:17:dc:4d:ff:97:c5:c4:a8:10:33:
         05:78:79:ed:1e:55:36:5e:80:7c:38:08:f9:b6:38:f7:6a:4a:
         81:c7:32:ac:78:20:41:ec:b6:b4:56:eb:cb:79:59:10:35:18:
         5e:8d:56:e3:78:a8:89:63:8a:6b:df:94:e3:e2:cc:4f:be:61:
         b7:5a:3b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:12 2026 by rpki-client