Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
File:                     rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft (raw, json)
Hash identifier:          GuccOPIhQBICtn/CKFdzxLv9XBf3rXAzkk7EakjknAs=
Subject key identifier:   3A:79:2D:0D:FB:FA:BF:D8:13:9C:3F:DF:1B:B4:29:9B:C9:9C:B6:D8
Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
Certificate issuer:       /CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Certificate serial:       01A004A751671B23BDBBA2BC5EC8A84FDF25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
Manifest number:          16D9
Signing time:             Sat 15 Aug 2026 09:01:09 +0000
Manifest this update:     Sat 15 Aug 2026 09:01:09 +0000
Manifest next update:     Sun 16 Aug 2026 09:01:09 +0000
Files and hashes:         1: HiiPQJYwHAaSYAVm8uTze8vCE9o.roa (hash: 2nziwQn2BDX70j1YJrz3ReJWO/lfYuKvlW5ZyhVZirs=)
                          2: KSdM6O1FKkRc_JqGqlUg5PGDzE4.roa (hash: l71hLYxyaBfjnzVG3OAC3KkLtPDUSTDHWl+YWeICYgs=)
                          3: RD3FrdJDiaSgh4hhQogjAnXqmq8.roa (hash: y0vVTwPbcsqwxMSYm4yZYZVCYuFlngknWzg7Heg5wGA=)
                          4: Zrny0yg3TVa-9PfRlD4jNDdwvaQ.roa (hash: KV55zi4mSfveBw4rPTBhd4Q9yfOZ75ZlhzyzEJkhajg=)
                          5: rW9d2jm-ltnfYKSiPsE7HRB1hZo.roa (hash: 5EPYMX4bCFhTuhRxbCYeuyqQ6i8l79Kij3J+8QpNg1Q=)
                          6: rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl (hash: gCCtbirPOCLslLh2oGZmL8MUIOhi275erbR2rJyj1sI=)
                          7: tbYt_1HgZu11ZUlS_9RFIWiny-Q.roa (hash: 0H367OeDFx32BeCSB2rFjNElX2FtZo0+OiydPHLocnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 09:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:04:a7:51:67:1b:23:bd:bb:a2:bc:5e:c8:a8:4f:df:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2
        Validity
            Not Before: Aug 15 09:01:09 2026 GMT
            Not After : Aug 16 09:01:09 2026 GMT
        Subject: CN=3a792d0dfbfabfd8139c3fdf1bb4299bc99cb6d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8b:e3:ad:bf:35:2b:96:3c:7d:e5:11:c2:23:
                    47:a7:34:e7:18:de:97:0b:f2:3c:3b:82:b4:27:60:
                    10:1f:17:5c:86:dc:4c:6c:f5:6d:2d:0e:15:f3:4d:
                    11:05:2d:f7:41:6b:a4:75:1f:cd:4c:4a:62:f8:8b:
                    39:09:d8:16:9e:6b:2c:ad:79:cc:63:ea:da:3b:50:
                    18:85:76:2c:12:a7:29:1f:e1:03:72:c9:6b:c0:24:
                    91:77:8a:5a:b1:dd:f2:64:ae:4e:b6:4e:dc:33:25:
                    86:45:04:12:bc:ca:fd:e7:16:97:73:fa:0c:5d:ac:
                    3b:e8:9d:6a:8a:1a:c9:d7:ab:e3:7a:21:6d:f8:29:
                    8a:79:f4:0f:dc:fd:45:15:f5:25:58:90:a6:2b:94:
                    4e:11:96:da:7b:41:93:59:54:df:df:8e:87:12:26:
                    08:f9:e3:16:bb:fd:74:de:f1:b6:cb:1e:09:72:56:
                    cc:e3:c0:83:a9:ee:6b:ac:dc:ea:18:72:5c:0c:0b:
                    ac:0f:4b:35:9b:70:85:af:c1:c1:0a:c6:cb:ec:8d:
                    75:df:da:2e:32:6e:fc:22:6f:38:00:dc:fe:70:73:
                    e9:c1:67:5e:7f:cc:70:4f:05:c6:2d:be:0e:54:a5:
                    86:2b:50:84:8c:6f:37:47:81:4b:5e:ee:90:48:7b:
                    f9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:79:2D:0D:FB:FA:BF:D8:13:9C:3F:DF:1B:B4:29:9B:C9:9C:B6:D8
            X509v3 Authority Key Identifier:
                keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:19:aa:e2:eb:7b:95:d9:32:8d:bd:44:43:c5:80:9e:62:21:
         99:0f:1f:69:df:9b:5f:6e:78:50:d6:b6:c1:c7:bc:9e:d3:57:
         e1:ea:a9:4d:98:d8:7c:17:22:49:64:6b:48:bd:4a:48:10:f9:
         b8:7b:16:42:1f:71:41:b0:3f:70:67:7b:25:2a:c9:cb:9d:f4:
         53:9c:cc:48:3c:90:02:21:6d:76:d7:df:52:86:5b:d9:c2:3d:
         35:b4:7e:1d:61:89:cb:3e:f1:2c:fd:6b:69:9c:d8:08:72:77:
         95:1c:e5:23:cb:e5:2b:77:f0:35:24:e0:04:df:c4:51:c4:ed:
         15:fb:cb:ad:e2:28:f9:90:a7:ca:ae:4b:1d:2e:c1:f9:1c:c7:
         48:1f:4b:87:d4:a7:92:25:09:77:c9:be:32:18:15:0e:93:a6:
         ec:9f:68:6e:fa:95:86:bd:c3:17:6f:d3:47:aa:85:9b:bb:ec:
         59:07:33:59:ee:86:c3:a1:15:0a:32:8d:05:20:bd:4d:5a:99:
         fb:d2:17:60:59:e0:51:fa:76:e8:d0:81:41:bf:01:13:07:b6:
         d8:68:e0:aa:68:d4:a2:07:48:2a:93:e1:03:66:b8:c2:ee:d3:
         ee:42:3a:fb:ae:39:0e:7a:42:58:ca:ef:89:9d:26:98:60:e3:
         e0:8f:ec:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAEp1FnGyO9u6K8XsioT98lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkOTY4MWYxNDRkYjE0MzBhYzMxNWM4MzA2ZTFjMTQ3MzBj
NWZlYzIwHhcNMjYwODE1MDkwMTA5WhcNMjYwODE2MDkwMTA5WjAzMTEwLwYDVQQD
EygzYTc5MmQwZGZiZmFiZmQ4MTM5YzNmZGYxYmI0Mjk5YmM5OWNiNmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4vjrb81K5Y8feURwiNHpzTnGN6X
C/I8O4K0J2AQHxdchtxMbPVtLQ4V800RBS33QWukdR/NTEpi+Is5CdgWnmssrXnM
Y+raO1AYhXYsEqcpH+EDcslrwCSRd4pasd3yZK5Otk7cMyWGRQQSvMr95xaXc/oM
Xaw76J1qihrJ16vjeiFt+CmKefQP3P1FFfUlWJCmK5ROEZbae0GTWVTf346HEiYI
+eMWu/103vG2yx4JclbM48CDqe5rrNzqGHJcDAusD0s1m3CFr8HBCsbL7I1139ou
Mm78Im84ANz+cHPpwWdef8xwTwXGLb4OVKWGK1CEjG83R4FLXu6QSHv5+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDp5LQ37+r/YE5w/3xu0KZvJnLbYMB8GA1UdIwQY
MBaAFK2WgfFE2xQwrDFcgwbhwUcwxf7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclphQjhVVGJGRENzTVZ5REJ1SEJSekRGX3NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80MDViNWYtOGQyNi00ZWUzLWI4N2Yt
YTNhMTNlM2E3ZDgwLzEvclphQjhVVGJGRENzTVZ5REJ1SEJSekRGX3NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy80MDViNWYtOGQyNi00ZWUzLWI4N2YtYTNhMTNlM2E3ZDgw
LzEvclphQjhVVGJGRENzTVZ5REJ1SEJSekRGX3NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUBmq4ut7
ldkyjb1EQ8WAnmIhmQ8fad+bX254UNa2wce8ntNX4eqpTZjYfBciSWRrSL1KSBD5
uHsWQh9xQbA/cGd7JSrJy530U5zMSDyQAiFtdtffUoZb2cI9NbR+HWGJyz7xLP1r
aZzYCHJ3lRzlI8vlK3fwNSTgBN/EUcTtFfvLreIo+ZCnyq5LHS7B+RzHSB9Lh9Sn
kiUJd8m+MhgVDpOm7J9obvqVhr3DF2/TR6qFm7vsWQczWe6Gw6EVCjKNBSC9TVqZ
+9IXYFngUfp26NCBQb8BEwe22GjgqmjUogdIKpPhA2a4wu7T7kI6+645DnpCWMrv
iZ0mmGDj4I/s7w==
-----END CERTIFICATE-----
Generated at Sat Aug 15 13:44:10 2026 by rpki-client