Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
File:                     XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft (raw, json)
Hash identifier:          ytkg8h3zoP1f23CG9dwfuERdRoG6GG14F78XYS9nXko=
Subject key identifier:   B6:AC:70:62:4F:04:EB:D5:40:E9:B2:4A:83:AB:33:4A:60:BD:A0:F7
Authority key identifier: 5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
Certificate issuer:       /CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Certificate serial:       01A0035E870A48F1E2B4A6AEE31C3A8E2CCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
Manifest number:          1A02
Signing time:             Sat 15 Aug 2026 03:02:01 +0000
Manifest this update:     Sat 15 Aug 2026 03:02:01 +0000
Manifest next update:     Sun 16 Aug 2026 03:02:01 +0000
Files and hashes:         1: 0m0w4NNU4NOo-8_y3zxSZs-Hcdw.roa (hash: d/QLJQ6M0z3RViK7W5MP6w1Y/VAa68ow0nmGzD8+98w=)
                          2: HKYjGRXbhcsbgj-zO-lhhp8iHf4.roa (hash: r0qRRb9G05Y3zjQIakuz14pzZ5PruwE51RJizxy5NMg=)
                          3: OXzsf9355x_Po1YlBAMmXxH7YfM.roa (hash: HyUx0AM/t82HDbhNTlK93mKwtwtfVGbEby4qtiM7vwI=)
                          4: SD-pJr4ttUBaZ1S20Tz4AuB6P1I.asa (hash: +ZZUrq34lcu1uY7HrOMrXNxK/Du8JITTl9RrFi410RY=)
                          5: XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl (hash: 0+3nowI+m2dnf3l8OsKAD96EBAW3TiOKWyRErFZ9o0k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:5e:87:0a:48:f1:e2:b4:a6:ae:e3:1c:3a:8e:2c:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
        Validity
            Not Before: Aug 15 03:02:01 2026 GMT
            Not After : Aug 16 03:02:01 2026 GMT
        Subject: CN=b6ac70624f04ebd540e9b24a83ab334a60bda0f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:df:1d:cc:52:cc:13:76:e2:aa:ad:42:49:07:
                    fb:d5:52:6a:d4:aa:7e:68:28:94:c6:74:f3:2c:64:
                    3e:16:b1:fc:b1:b1:51:81:1b:ca:62:40:08:59:15:
                    63:91:a5:b2:dc:5f:27:c8:50:19:7a:a7:5a:a2:60:
                    0a:3e:d1:15:08:d5:2e:b3:3c:bb:ea:33:d5:01:93:
                    ea:a8:8f:8a:3d:63:d9:03:0d:dd:06:cc:79:11:ae:
                    b4:40:8f:df:7a:e8:d4:77:63:34:44:48:df:5c:07:
                    09:13:b3:b1:1d:ad:8d:0c:50:05:a1:00:a0:00:75:
                    08:05:ab:7c:9d:81:3d:0f:c8:5e:f8:f0:3c:a2:38:
                    f3:5f:af:7e:93:82:6b:00:83:b4:aa:0e:ee:2e:6a:
                    8e:34:57:d1:05:39:bb:a5:60:0b:3d:9c:19:59:da:
                    5b:9b:67:49:dc:81:5d:2b:24:20:63:39:31:d8:ac:
                    f9:7c:c7:22:70:c9:f6:32:09:2c:b1:6d:14:dd:13:
                    69:dd:69:dd:46:54:fa:12:21:f0:62:85:97:8f:a6:
                    84:06:e1:7e:b7:36:95:70:25:b7:eb:e1:04:7f:53:
                    f5:fc:d3:8d:5c:b4:4b:e7:bb:51:1f:b7:03:1a:e2:
                    f5:8c:4c:09:08:1e:1a:12:45:a8:ca:c8:2c:91:b7:
                    66:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:AC:70:62:4F:04:EB:D5:40:E9:B2:4A:83:AB:33:4A:60:BD:A0:F7
            X509v3 Authority Key Identifier:
                keyid:5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:07:79:d7:4b:5b:ae:07:54:c4:e7:3f:d1:31:c6:40:35:06:
         2b:ba:2a:d8:17:f9:e6:6b:c7:d0:24:c6:3e:15:84:0d:17:28:
         ef:82:80:71:cf:e4:ef:97:33:11:3f:27:41:ba:d4:1d:0f:bc:
         fd:64:68:5a:53:25:09:65:67:7b:85:ca:5e:a8:c9:6a:56:70:
         40:db:3a:e8:7f:fe:52:01:c0:f1:8b:9a:09:46:37:1a:12:38:
         11:7d:a2:3b:02:93:82:c5:82:48:d9:06:33:f1:42:62:e9:7c:
         27:24:24:67:16:ef:d4:b7:62:ea:17:8a:09:fc:08:3f:1f:a1:
         27:1b:7f:99:51:84:78:70:b1:5e:e4:76:f9:4f:e8:02:a8:6e:
         cf:60:82:07:aa:7a:9e:88:a0:3b:5f:42:35:2b:e1:e3:5d:3b:
         cc:5b:ac:21:63:fa:0c:6c:b0:34:13:a2:87:5a:b6:ba:17:3a:
         5e:d3:3c:2d:58:65:ff:74:bb:6a:fe:63:fe:bd:57:4d:95:30:
         47:85:cd:57:e2:bb:cf:1f:b4:1c:29:d8:1d:a3:66:a4:40:a8:
         8a:c6:cd:86:d8:14:dd:74:c3:57:60:13:80:3b:c1:5e:c0:7b:
         85:0a:5e:19:21:70:92:e8:1b:00:4c:5e:e5:8b:0c:d6:a8:c7:
         59:e9:02:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:21:05 2026 by rpki-client