Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/A2buGcyLQ0A-42qUouguQBnjUdE.mft
File:                     A2buGcyLQ0A-42qUouguQBnjUdE.mft (raw, json)
Hash identifier:          Skv411BFJXh1C3GjSVPvbwoI+bYTGEbUyf1LRT23Mtg=
Subject key identifier:   8F:D2:E0:F8:65:BA:14:59:C7:0F:26:B8:FB:11:F2:F6:8B:47:CE:90
Authority key identifier: 03:66:EE:19:CC:8B:43:40:3E:E3:6A:94:A2:E8:2E:40:19:E3:51:D1
Certificate issuer:       /CN=0366ee19cc8b43403ee36a94a2e82e4019e351d1
Certificate serial:       019FA116A4406E6BDA7DBB2881FFD55E9F70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A2buGcyLQ0A-42qUouguQBnjUdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/A2buGcyLQ0A-42qUouguQBnjUdE.mft
Manifest number:          2E
Signing time:             Mon 27 Jul 2026 01:00:43 +0000
Manifest this update:     Mon 27 Jul 2026 01:00:43 +0000
Manifest next update:     Tue 28 Jul 2026 01:00:43 +0000
Files and hashes:         1: A2buGcyLQ0A-42qUouguQBnjUdE.crl (hash: k8+byDN96vpX0O/Fn5//A62R60Qeb34G66bvaEor1/k=)
                          2: sbxckOpdRmsL3IOZkXvPw_lxG8g.roa (hash: +YSKpNz3HshHTq5k+BAAiNGsiW2WG4yJKy7VDrjUYAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/A2buGcyLQ0A-42qUouguQBnjUdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/A2buGcyLQ0A-42qUouguQBnjUdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A2buGcyLQ0A-42qUouguQBnjUdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:16:a4:40:6e:6b:da:7d:bb:28:81:ff:d5:5e:9f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0366ee19cc8b43403ee36a94a2e82e4019e351d1
        Validity
            Not Before: Jul 27 01:00:43 2026 GMT
            Not After : Jul 28 01:00:43 2026 GMT
        Subject: CN=8fd2e0f865ba1459c70f26b8fb11f2f68b47ce90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:05:95:36:ca:c0:25:ca:9e:d3:b8:c7:94:cc:
                    b4:a9:ad:52:9d:d8:47:38:d8:79:ef:91:fe:40:0c:
                    77:62:0a:97:de:5e:e1:2d:d2:bd:c6:95:86:8a:52:
                    e4:de:5d:5f:5e:93:87:e6:75:c7:28:0e:2b:73:2a:
                    ca:ad:f3:a4:6e:1b:26:b4:69:50:74:9b:d5:53:21:
                    ee:50:19:eb:ae:8f:88:a7:35:76:3b:53:dd:9e:c2:
                    10:27:37:9d:1c:d9:2d:96:ca:19:84:72:28:f9:85:
                    b7:65:32:b9:3b:7f:c2:37:dd:ce:5f:d5:57:5d:1a:
                    49:43:7f:fa:c6:c6:68:e9:17:38:dc:a3:da:58:a1:
                    8c:31:2a:25:f6:00:94:75:32:18:7c:c9:4e:44:20:
                    a5:47:5b:7a:de:00:9d:ba:3c:39:7c:d5:d0:85:e9:
                    47:b5:4a:03:3f:4d:37:70:31:ef:bf:7c:d3:bf:99:
                    91:79:ba:49:4c:bb:32:f9:22:60:9d:50:4c:44:2c:
                    d3:45:46:cf:ea:2f:a6:82:88:15:d8:60:02:db:34:
                    43:17:52:a1:12:4f:54:30:9c:25:61:df:3a:92:59:
                    11:dc:e6:6e:ff:7c:d2:44:1c:46:01:a3:7c:71:a6:
                    dc:c4:92:28:bb:ed:b4:7e:55:27:01:f2:78:a4:99:
                    17:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D2:E0:F8:65:BA:14:59:C7:0F:26:B8:FB:11:F2:F6:8B:47:CE:90
            X509v3 Authority Key Identifier:
                keyid:03:66:EE:19:CC:8B:43:40:3E:E3:6A:94:A2:E8:2E:40:19:E3:51:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2buGcyLQ0A-42qUouguQBnjUdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/A2buGcyLQ0A-42qUouguQBnjUdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/A2buGcyLQ0A-42qUouguQBnjUdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:a3:d4:4f:3d:93:ff:46:c8:b1:85:ac:a0:50:25:bb:ae:fd:
         af:69:9d:a3:0a:97:b2:40:92:27:ed:85:fc:cf:5f:38:23:1f:
         3e:8a:66:8c:21:d7:9f:8f:87:79:2b:1e:e8:72:fe:50:94:ad:
         72:bb:75:fa:0b:7b:1d:b3:40:77:bb:d6:f6:b0:23:d1:0b:3a:
         9e:c3:4b:41:71:64:26:8e:4a:b8:cc:7f:52:33:46:9f:13:16:
         a7:d7:97:e0:39:75:77:26:95:b4:87:66:67:87:fd:00:f7:29:
         75:00:0e:3f:ab:e9:83:97:b0:68:0c:44:b5:06:0f:26:de:93:
         3f:ca:b0:d9:71:14:b9:ee:0c:b8:19:bb:24:79:b0:8d:0f:a6:
         0a:98:45:fa:b6:1c:32:ce:55:c9:db:3a:7c:01:84:69:e4:35:
         e4:02:31:91:b0:13:1d:ae:05:7e:c4:6e:e9:5a:c7:ff:0f:3c:
         62:65:91:90:27:60:05:6d:85:fc:4d:ff:9d:12:85:e8:50:dd:
         a5:e3:94:4a:80:49:1c:a4:f8:4f:ee:fe:1e:0d:ff:45:b5:8c:
         71:5a:79:e2:95:94:51:01:31:9c:f0:97:63:55:9b:eb:6b:c1:
         7e:ff:bf:da:44:cf:fa:da:76:74:45:2a:75:cd:86:db:24:f9:
         52:6c:11:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:21:54 2026 by rpki-client