Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
File:                     iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft (raw, json)
Hash identifier:          7LwlRsJ1taVzfJGWcfElKhfAZKZndYpP9Pu8RXQceeE=
Subject key identifier:   47:65:09:3F:AF:5A:34:A0:A3:96:DE:64:B0:A1:EA:6E:87:79:3F:C7
Authority key identifier: 88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
Certificate issuer:       /CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Certificate serial:       01A003CB5E59EF41C33D827E62E8018AF0DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
Manifest number:          0D9C
Signing time:             Sat 15 Aug 2026 05:00:54 +0000
Manifest this update:     Sat 15 Aug 2026 05:00:54 +0000
Manifest next update:     Sun 16 Aug 2026 05:00:54 +0000
Files and hashes:         1: WDCEfBOgZu0IS0tXVscqDchFouE.roa (hash: M77yLF1D375mORfB1s9NJJsYDZZdRI/2B/Q2R1Rr0oU=)
                          2: eHFFve7oB3P4jI8nEd4tmbXombs.roa (hash: 2jkRmBwjqx2G1TPqQBkiFukmoNh6yKO3uMYlkbOFlyk=)
                          3: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl (hash: XzuqoiHRZZNkwm0guNztSHKPjJyCZS+pHptFB4iR2lc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:cb:5e:59:ef:41:c3:3d:82:7e:62:e8:01:8a:f0:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
        Validity
            Not Before: Aug 15 05:00:54 2026 GMT
            Not After : Aug 16 05:00:54 2026 GMT
        Subject: CN=4765093faf5a34a0a396de64b0a1ea6e87793fc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b0:7e:8c:fd:dd:10:e0:16:0d:53:c6:cb:0e:
                    ba:ab:67:f1:95:a6:7f:61:c0:53:84:16:dd:aa:37:
                    e7:d2:50:16:b5:ef:cb:9d:df:3e:c5:df:37:04:56:
                    fd:07:f5:81:a0:7c:18:25:80:f6:e3:ce:e5:5a:51:
                    88:5f:0f:ce:60:0d:0c:32:fa:09:56:e3:dc:3e:90:
                    12:0c:bb:41:48:1a:04:d7:2b:a2:ae:c2:12:9b:0a:
                    8a:86:dc:08:f9:f1:12:9a:8c:30:28:db:9a:c8:5a:
                    53:56:74:2c:03:08:da:8b:fb:39:67:46:5c:10:50:
                    35:5d:c1:18:15:b2:a3:bf:52:54:f8:75:fa:98:d2:
                    12:58:c8:67:ce:e7:eb:65:ce:cb:4a:e2:0e:7b:2a:
                    be:7a:bf:20:17:46:27:10:33:4b:22:97:aa:65:95:
                    1b:21:7f:07:3a:dd:fe:ee:73:64:42:88:14:d6:46:
                    ff:88:a1:e2:28:82:c6:3f:14:80:58:18:d9:2f:8f:
                    46:1c:62:53:13:27:80:70:be:49:cb:51:32:f8:9a:
                    2d:f7:17:27:87:40:80:ef:d0:42:32:bb:cd:60:d6:
                    97:fe:2d:4b:91:ff:59:d0:f0:33:e5:bd:52:3f:b8:
                    c4:9f:72:2d:4a:a6:f6:07:b2:4d:e8:8e:d7:a7:83:
                    d7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:65:09:3F:AF:5A:34:A0:A3:96:DE:64:B0:A1:EA:6E:87:79:3F:C7
            X509v3 Authority Key Identifier:
                keyid:88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:04:27:85:4c:3f:a4:c9:d6:d2:fb:44:00:aa:90:67:67:19:
         09:87:98:b5:cc:33:04:a6:01:0d:40:60:19:64:46:1e:61:fe:
         af:d9:36:2d:09:61:a0:c7:ad:97:04:13:97:b7:96:10:8b:fa:
         31:58:a7:d2:61:f1:68:dd:ae:17:a4:e8:e3:1a:99:40:1f:34:
         c7:a4:57:50:6c:c2:f9:fe:53:cf:a2:cf:b3:c8:27:48:2b:ac:
         5e:58:9d:0a:67:73:70:0f:54:4e:b5:e1:83:14:d8:42:09:b4:
         01:24:ed:97:cc:07:89:06:15:0e:21:69:73:1c:ba:6a:b3:93:
         08:90:3d:a9:7d:6a:98:b6:e0:d0:23:d3:05:a3:ef:81:f1:4e:
         5a:f8:22:18:91:02:0d:f4:79:11:eb:58:0c:fe:2c:6f:bf:cd:
         39:c3:64:d6:70:25:e4:c8:5c:5b:3e:4d:4e:30:27:ee:e5:45:
         d3:7c:67:fb:ec:13:31:c4:d5:30:36:21:c7:b9:70:c9:ce:eb:
         0c:94:f0:d7:3c:23:13:ff:72:5a:fb:28:92:79:7d:d8:63:77:
         79:88:33:6b:8d:a1:ef:4b:e2:23:42:12:c7:92:7d:51:04:0d:
         d5:0e:f9:21:ca:90:d1:85:9b:70:a0:fe:17:b9:3a:27:38:10:
         7d:06:6b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:28:19 2026 by rpki-client