Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
File:                     aspx8tn-K0nGdi89mg6L8zLf3tE.mft (raw, json)
Hash identifier:          u+lxaD70Qm6/Hl8VJVnU/OfmzDgGQ0vQNqRBKRXvzX8=
Subject key identifier:   5A:0D:37:39:02:90:7A:A2:47:4C:A9:A2:20:DA:02:49:9B:BF:69:73
Authority key identifier: 6A:CA:71:F2:D9:FE:2B:49:C6:76:2F:3D:9A:0E:8B:F3:32:DF:DE:D1
Certificate issuer:       /CN=6aca71f2d9fe2b49c6762f3d9a0e8bf332dfded1
Certificate serial:       01A002144503F4A05D1DA85762A245C93CA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
Manifest number:          13F2
Signing time:             Fri 14 Aug 2026 21:01:17 +0000
Manifest this update:     Fri 14 Aug 2026 21:01:17 +0000
Manifest next update:     Sat 15 Aug 2026 21:01:17 +0000
Files and hashes:         1: EgV1knG2q0851YdjwI9ZnxFusW8.roa (hash: TpL3ZZSNUe8HCulV7DZciQFP376Z50w7pD7Ztv0vOQ0=)
                          2: aspx8tn-K0nGdi89mg6L8zLf3tE.crl (hash: amuOL9yco9ESDwnmienNqVat+scfyrCeeip2Pnvi1Ec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:14:45:03:f4:a0:5d:1d:a8:57:62:a2:45:c9:3c:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aca71f2d9fe2b49c6762f3d9a0e8bf332dfded1
        Validity
            Not Before: Aug 14 21:01:17 2026 GMT
            Not After : Aug 15 21:01:17 2026 GMT
        Subject: CN=5a0d373902907aa2474ca9a220da02499bbf6973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:87:31:17:4d:c8:87:6f:29:4c:48:64:29:e9:
                    d2:1e:fa:ed:19:8f:70:df:bf:73:c1:f0:f4:f5:dc:
                    84:f8:7c:83:ad:d9:86:8a:1c:38:ac:f9:d6:9f:73:
                    5c:6a:95:75:fe:ef:8b:52:1b:3e:42:e3:91:41:13:
                    7b:0a:07:9f:8a:0f:2f:b6:32:4e:fa:94:11:9b:bb:
                    36:e0:56:fd:ea:8e:a7:2b:15:46:73:4f:da:81:f9:
                    50:a7:8d:4b:7b:30:a3:ef:ee:a6:43:a0:7f:27:e7:
                    b5:ba:e5:1a:73:a0:41:13:7a:42:c5:f5:b3:a7:74:
                    cd:ed:c0:c3:f2:3e:c7:15:7b:45:8a:b9:15:fc:ab:
                    0e:06:19:13:55:e4:3f:ab:8f:b9:76:73:4c:8c:de:
                    79:fe:20:05:18:b7:bf:a4:06:e1:b3:e5:67:c0:64:
                    15:38:ec:bb:5f:b0:f7:e8:ca:e5:44:6d:ce:54:b5:
                    69:f8:2a:23:58:c2:5b:e7:4f:f0:3a:3e:ed:4b:32:
                    fc:8c:80:d6:0a:3d:d8:b4:e9:d6:dc:dd:62:13:1d:
                    08:e0:8e:dd:7f:d7:11:ad:5f:34:11:a7:ff:2b:39:
                    30:89:49:d0:d3:a9:b0:31:94:75:b9:a8:24:0d:02:
                    ff:97:a5:59:50:e8:c8:be:84:cb:90:72:5f:3c:ef:
                    32:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:0D:37:39:02:90:7A:A2:47:4C:A9:A2:20:DA:02:49:9B:BF:69:73
            X509v3 Authority Key Identifier:
                keyid:6A:CA:71:F2:D9:FE:2B:49:C6:76:2F:3D:9A:0E:8B:F3:32:DF:DE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ac:98:2d:2b:19:8b:d9:d1:d3:96:65:e3:f1:c6:76:d3:41:
         17:43:6e:b7:03:3f:80:f5:f4:ec:11:63:3a:3d:e0:fe:91:0b:
         d8:91:4f:5a:42:43:62:f7:47:20:41:63:f1:c2:dc:a6:e6:47:
         13:4b:33:d3:b4:9b:3c:22:a7:23:e9:85:a7:56:cd:8c:e9:2d:
         da:29:f9:d2:36:37:32:fa:72:77:31:03:52:e7:97:2b:e6:8b:
         60:f4:ef:04:ae:ba:5e:8b:42:80:1b:56:2e:5d:71:c5:b8:4c:
         f1:d4:13:35:53:d4:8c:7b:83:cd:cd:fb:b8:fe:ba:5c:98:1f:
         2b:45:54:8b:00:b8:56:d4:a3:ba:41:ee:7b:79:38:e4:fe:0f:
         7d:5f:6d:8d:37:5e:cf:eb:a6:f0:cb:f5:8d:4b:8d:cd:07:27:
         2b:42:a0:5e:2c:b5:59:b1:fc:ab:97:d9:14:33:0a:6f:8b:6f:
         bb:bd:fb:c6:07:27:e8:4e:62:84:a8:27:76:09:89:7a:c9:57:
         c8:02:12:42:61:bf:02:9f:ce:92:1c:dd:f8:91:f4:b0:b3:ca:
         9b:44:dd:1d:d6:74:e0:8a:2f:0f:f0:00:bf:bd:e9:22:6b:5c:
         50:a2:81:0f:c1:95:91:4a:72:18:18:0e:32:e6:a3:61:87:86:
         9e:81:10:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:29:04 2026 by rpki-client