Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
File:                     gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft (raw, json)
Hash identifier:          0bBEAcXnbC785NdvnGO0WR7k17abzkA+6g+ljgqDIZQ=
Subject key identifier:   43:2F:39:66:83:19:02:AF:C8:CE:2B:5E:E6:AB:F8:A5:62:40:A1:DC
Authority key identifier: 80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
Certificate issuer:       /CN=808c3a6c5cbff0739e438d05744405b16197b15b
Certificate serial:       01A0276A19936FA48EAB5C44A1D80EEF2762
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
Manifest number:          1A1D
Signing time:             Sat 22 Aug 2026 03:00:59 +0000
Manifest this update:     Sat 22 Aug 2026 03:00:59 +0000
Manifest next update:     Sun 23 Aug 2026 03:00:59 +0000
Files and hashes:         1: 0xjlkzMLHzYUOQzM0T_hixdH3Vc.roa (hash: w3LcFmfi5o+ZqCPWaVzw9mcyP3jYqj4m9ROiWLMpgAY=)
                          2: 5t0r8fJd2nhioYpGfkI7Yf9otXA.roa (hash: k52ZXWE/9hDIrYh0zpZm2nywZwLzZgmA6wQ6L4w58mM=)
                          3: 6K4jtyB3n1dTIno4GBJ6uOlA2H4.roa (hash: s//DyxiKkxSxvwwq0U0tirxt/hDGoM9Ut2Dc50YCwqM=)
                          4: Cryli7tFA3xQzdS5-qcU49qg2iM.roa (hash: ZS2Te+uiOMALn+TaiqIM3OKXyBaszdLcDeqRDP7qYwo=)
                          5: gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl (hash: 5DG1+DYyODWicf/VUiWmNdijFjgcEXbm3jy5TqJ8KxY=)
                          6: jsVSRtJd2CDXuEExXGRqUMz5PZw.roa (hash: 3KBrD6dE8HRG9EKrovP9Lr4d9GeL2O9jLSsM034LhGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:27:6a:19:93:6f:a4:8e:ab:5c:44:a1:d8:0e:ef:27:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=808c3a6c5cbff0739e438d05744405b16197b15b
        Validity
            Not Before: Aug 22 03:00:59 2026 GMT
            Not After : Aug 23 03:00:59 2026 GMT
        Subject: CN=432f3966831902afc8ce2b5ee6abf8a56240a1dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:70:ee:1f:06:f5:c5:e5:c6:e4:6c:b6:62:29:
                    a0:a4:0e:7b:60:2c:26:de:1d:d8:da:62:67:f8:9a:
                    4f:f7:16:ec:8f:9a:09:8c:c0:8f:01:df:92:71:22:
                    ee:dc:4c:83:f9:f5:7c:04:3b:fe:90:ed:55:19:c7:
                    bc:58:59:4f:34:ac:9f:35:e4:b1:0d:29:72:cc:9a:
                    c7:da:f5:9d:3a:1e:9a:b5:f0:e5:71:72:d2:43:0d:
                    6c:e1:62:1c:0a:31:70:be:08:72:ae:55:d3:3e:ac:
                    d8:db:f2:14:5c:a4:7a:b8:d8:d9:7f:68:23:b9:9a:
                    63:4a:62:0b:14:45:81:fe:da:aa:51:fe:73:87:df:
                    98:53:aa:60:b0:62:ba:98:ed:0b:cc:99:a2:9a:23:
                    80:9d:b3:ed:67:d9:57:a4:82:3f:1a:b7:d6:24:d9:
                    71:8a:36:16:bb:3e:da:32:ec:e3:29:3a:54:50:de:
                    1b:4a:d2:67:d3:2f:27:d9:3a:67:32:cf:03:e2:72:
                    37:7b:e7:ee:e7:af:e1:e7:89:fa:d0:2f:d9:ef:33:
                    6d:2d:41:10:5b:a5:f1:b0:2a:af:64:54:42:bd:8b:
                    a6:1d:46:52:dd:de:9e:cb:54:a8:96:32:74:02:fb:
                    6b:47:a2:a7:40:1c:85:90:61:13:2c:b2:2f:df:1f:
                    00:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2F:39:66:83:19:02:AF:C8:CE:2B:5E:E6:AB:F8:A5:62:40:A1:DC
            X509v3 Authority Key Identifier:
                keyid:80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:d9:83:99:92:5f:14:59:bc:15:70:6e:32:e1:08:84:c3:f7:
         ea:74:2f:67:54:44:28:57:08:35:03:a4:70:59:60:4a:51:5b:
         d7:75:24:62:9a:a8:14:8a:66:7b:ff:c8:78:77:cd:09:ea:f0:
         87:c3:cd:aa:a0:c7:1e:6c:be:19:82:96:21:d0:28:79:2e:d9:
         0c:0f:a1:cf:61:ae:a1:f6:3a:50:eb:de:1a:61:02:6e:0e:bb:
         1a:2c:b6:79:a6:37:33:8e:07:07:62:1d:61:4b:d3:3b:6c:8b:
         df:82:c9:35:83:da:f9:fd:9c:fd:5d:fe:13:46:32:f5:78:eb:
         3e:74:1a:01:07:05:81:ee:d4:91:ad:c8:42:51:f3:99:76:0f:
         04:86:27:14:47:f6:b2:f2:2c:fd:70:93:f0:3c:ed:f4:73:93:
         9c:4e:42:49:ff:ff:4d:c1:0b:7c:25:c3:5b:8d:f1:91:4b:6e:
         0f:42:49:80:b4:69:b8:1b:25:f5:b5:09:cd:ee:4e:70:ba:9d:
         7e:61:af:cd:f2:68:84:31:79:97:e0:1f:3c:9e:15:a5:7c:09:
         e3:79:22:42:3b:dc:7f:a4:af:9d:4a:ae:c3:84:26:25:7b:00:
         ea:9d:f0:6f:10:29:62:d7:94:65:2c:0e:e1:9f:c2:3e:0b:4d:
         1a:b4:d1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:02:15 2026 by rpki-client