Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft
File:                     C6VqvctPbwyGuDLswT9eJJch1vg.mft (raw, json)
Hash identifier:          svSabVWYNy8VZRStZCSpNADranrPLaBz+3AaCvPcuEc=
Subject key identifier:   2D:0D:DE:6B:3D:0E:71:9D:FB:7A:1D:2F:3D:D3:30:75:B9:D8:4A:12
Authority key identifier: 0B:A5:6A:BD:CB:4F:6F:0C:86:B8:32:EC:C1:3F:5E:24:97:21:D6:F8
Certificate issuer:       /CN=0ba56abdcb4f6f0c86b832ecc13f5e249721d6f8
Certificate serial:       019FF836088203DE9131BED84C362FE7174B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6VqvctPbwyGuDLswT9eJJch1vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft
Manifest number:          10A4
Signing time:             Wed 12 Aug 2026 23:01:58 +0000
Manifest this update:     Wed 12 Aug 2026 23:01:58 +0000
Manifest next update:     Thu 13 Aug 2026 23:01:58 +0000
Files and hashes:         1: 59tmjDQfU-ncRC8Varmb6pF2lz8.roa (hash: 3aX8v2tZST5i3tJwk6iAtRnox6a+RxiF+ijUKhsx+YE=)
                          2: C6VqvctPbwyGuDLswT9eJJch1vg.crl (hash: pQgzBRZyUCv+vBY2N9+Rnp22hq3sSYPlIjsB0q7UW/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6VqvctPbwyGuDLswT9eJJch1vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 23:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f8:36:08:82:03:de:91:31:be:d8:4c:36:2f:e7:17:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ba56abdcb4f6f0c86b832ecc13f5e249721d6f8
        Validity
            Not Before: Aug 12 23:01:58 2026 GMT
            Not After : Aug 13 23:01:58 2026 GMT
        Subject: CN=2d0dde6b3d0e719dfb7a1d2f3dd33075b9d84a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:36:d2:2a:38:08:4c:fe:97:0e:7c:8d:9c:93:
                    d0:5d:6a:60:4e:20:43:78:f5:8c:b1:a0:19:ca:d6:
                    72:77:20:1e:2d:fb:c9:c6:cf:d6:09:d0:a9:60:ff:
                    8b:f6:49:a1:d7:86:27:b2:7c:94:ec:6a:86:e4:fd:
                    55:e5:15:0c:4f:9c:5f:10:9b:5c:09:ce:7b:53:35:
                    eb:c4:42:13:e0:38:67:7c:c1:c0:c4:1d:6e:36:75:
                    0b:23:57:6d:3e:fc:07:85:22:37:52:a3:03:96:a8:
                    3e:62:ae:ec:80:d7:40:98:47:05:d0:72:7d:48:04:
                    44:0c:4e:01:73:a6:ff:c5:62:63:ad:5c:2a:5b:81:
                    88:24:a5:82:ab:dc:e9:45:24:3d:c3:a3:aa:73:2c:
                    71:49:11:d6:f2:e3:fa:67:5e:12:7e:7f:20:f0:4d:
                    fb:6f:d7:07:cf:f2:6e:72:ba:42:7e:8e:75:86:80:
                    eb:44:f0:b8:4b:cb:cb:4e:43:b7:00:b9:f6:2b:9d:
                    b6:57:ac:a0:7c:f0:e1:f4:ca:61:66:f4:6e:0a:14:
                    70:df:cf:93:52:13:ef:33:cb:be:c2:4b:f3:ec:1b:
                    d3:e0:c4:60:79:3b:2d:06:f0:c1:cc:de:e4:da:f1:
                    a5:9b:66:fa:3e:89:a4:e2:89:16:bc:9d:95:5a:a9:
                    eb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:0D:DE:6B:3D:0E:71:9D:FB:7A:1D:2F:3D:D3:30:75:B9:D8:4A:12
            X509v3 Authority Key Identifier:
                keyid:0B:A5:6A:BD:CB:4F:6F:0C:86:B8:32:EC:C1:3F:5E:24:97:21:D6:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6VqvctPbwyGuDLswT9eJJch1vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ea:93:24:7b:ba:69:69:28:77:5f:75:3a:e5:db:55:11:7c:
         4d:65:c3:30:53:2f:cd:1c:68:9b:a9:01:49:e8:50:d0:b8:d5:
         b4:be:5c:1f:26:4c:33:a6:8b:f4:bc:8a:23:0a:f3:c8:bc:71:
         1e:6c:61:06:c0:2d:16:5f:ec:6d:15:08:eb:e1:79:9d:51:fe:
         8c:1d:cf:ad:ef:ef:08:85:b5:74:ec:f0:e2:e8:a9:eb:e5:8d:
         f1:f7:8e:77:38:d3:27:d7:ac:e6:5c:d1:f2:a1:e6:e7:cf:6e:
         d9:39:43:14:e4:19:1c:cf:9a:5c:00:39:00:e7:cd:b5:d1:f8:
         e3:43:ac:1a:95:b7:d9:56:04:df:6e:94:16:07:a7:b9:a2:27:
         03:c5:e4:a0:7f:46:a4:fe:95:c7:24:fa:ed:69:b5:43:b2:4d:
         ca:49:cf:d9:2b:22:a3:ea:cb:a1:20:ec:18:65:45:64:fc:a6:
         14:3c:a3:29:93:e6:07:22:02:a1:ed:4c:ec:4c:7f:b2:78:07:
         3e:63:a9:78:37:c2:6d:91:65:65:39:5f:7a:36:5a:72:07:13:
         1e:37:81:e9:67:21:5f:cc:da:de:49:47:26:73:cb:55:c8:09:
         dd:a6:f5:ca:3b:25:65:21:16:7f:9e:c2:81:ff:38:da:65:f7:
         85:ce:bc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:02:52 2026 by rpki-client