Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
File:                     hq8scWa7NKaW_eL7rO9AAbCo5-I.mft (raw, json)
Hash identifier:          aALU4xDYsGQn2uDN6ASiGF0vwbD1twp86HGgGBJVhTs=
Subject key identifier:   EA:46:AA:B7:E0:86:6D:3E:63:B3:FB:AB:CD:7A:15:14:9E:08:39:E9
Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
Certificate issuer:       /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Certificate serial:       01A001388059F4E42DDE94CD368D4BD0E8DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
Manifest number:          1587
Signing time:             Fri 14 Aug 2026 17:01:15 +0000
Manifest this update:     Fri 14 Aug 2026 17:01:15 +0000
Manifest next update:     Sat 15 Aug 2026 17:01:15 +0000
Files and hashes:         1: 3MbENdJT26XzCCTRISyB_iPykiw.roa (hash: kSjcy26IOOyW+caS15k1M32+3TxvbP1k3eV5GVXbdqs=)
                          2: 93Zo7Pu2h3l6Yl9T9RSBRKnjw20.roa (hash: WXzD03j8xoR9D+l/6kOBvEB/Gim510LMJ3OHuaq0Urg=)
                          3: hq8scWa7NKaW_eL7rO9AAbCo5-I.crl (hash: UhMgNjNOhCFE47XzwAtcsZiEbPzA4zRkFeJsSJCiaUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 17:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:38:80:59:f4:e4:2d:de:94:cd:36:8d:4b:d0:e8:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
        Validity
            Not Before: Aug 14 17:01:15 2026 GMT
            Not After : Aug 15 17:01:15 2026 GMT
        Subject: CN=ea46aab7e0866d3e63b3fbabcd7a15149e0839e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:01:a8:b9:58:f6:7d:50:62:d8:cd:14:5a:cc:
                    17:35:76:d5:a0:8b:99:44:00:0d:67:30:bb:34:72:
                    8c:fc:66:b3:9c:c1:2a:45:23:dc:bb:11:78:20:04:
                    46:e1:28:4d:e3:d5:8e:db:c0:38:2a:07:65:e3:aa:
                    4c:70:2a:95:75:05:37:80:40:3b:43:be:c4:60:ba:
                    ed:c7:8a:aa:48:ce:8c:95:18:45:23:37:92:59:8b:
                    94:47:1f:6a:1a:d6:6c:46:7c:17:d1:ff:07:7e:54:
                    b4:ce:76:bb:f7:62:6f:80:09:cd:06:58:22:25:19:
                    07:10:d2:df:3d:e8:00:95:7d:a4:36:88:29:bb:21:
                    39:9c:15:d1:7a:92:9d:a6:19:7e:8d:92:b4:85:fa:
                    4a:a3:8f:a0:52:fd:ad:e1:b5:e1:76:12:9c:a4:a7:
                    4c:40:9b:6b:a0:22:fd:20:e4:19:88:32:b1:01:7e:
                    59:b3:5f:6f:23:a7:97:34:24:ce:4d:f6:bd:17:a6:
                    0f:1c:04:35:5c:4a:d4:75:53:70:b9:b0:02:93:bd:
                    71:db:15:32:81:d8:e8:17:d3:d4:2c:18:2d:1f:37:
                    81:72:10:7a:40:94:ad:9a:2e:cf:02:95:68:31:99:
                    20:6c:99:7d:3e:6d:fd:5a:86:bf:74:ed:46:61:7d:
                    13:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:46:AA:B7:E0:86:6D:3E:63:B3:FB:AB:CD:7A:15:14:9E:08:39:E9
            X509v3 Authority Key Identifier:
                keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:58:2f:ec:f2:60:03:99:17:de:d6:34:74:90:40:a5:d3:ea:
         40:7e:ec:7d:34:b3:82:b1:95:ce:9a:d8:6d:13:83:8c:f3:ca:
         23:58:23:46:09:6c:b7:64:85:2e:27:96:21:ec:8b:bb:f9:5b:
         fb:38:2a:f3:e6:c0:77:97:34:a9:88:0d:d3:73:f6:84:ce:e0:
         b6:46:41:48:54:90:5f:7d:88:0e:64:1f:fc:36:06:41:48:35:
         47:1a:60:f6:6c:d9:04:a3:c4:8b:13:25:15:b4:97:c9:cb:9f:
         5b:de:5c:25:27:b2:93:85:1f:c6:dd:23:98:0b:ca:57:73:82:
         7d:45:d3:b3:d7:52:6a:0c:38:d1:47:90:a5:50:b4:0c:5f:85:
         e9:89:51:96:30:dc:75:fa:f2:79:9d:a5:dc:a0:85:61:b6:c3:
         8c:a6:66:fd:88:94:36:ad:04:ed:79:39:f0:ec:70:f5:82:41:
         5e:86:c6:8f:25:29:40:f0:9d:3f:cb:89:29:65:20:8c:37:c4:
         1d:02:af:61:a0:85:4e:4f:65:c0:53:59:0d:7e:7d:a9:d1:44:
         c5:ae:cf:97:ef:e9:84:ba:cd:d3:d4:03:9d:8d:53:73:ec:be:
         85:72:e9:4f:94:3e:dc:39:c7:ff:0a:fb:2b:e9:56:7b:2f:e5:
         f1:e0:9d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:28:18 2026 by rpki-client