Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
File:                     _RVIKmVgCaobyAUUg2jR69-PYsg.mft (raw, json)
Hash identifier:          9kyXHwiux4CxfN026mGpkAbzfMQ+oyOEPPJAWcao4JQ=
Subject key identifier:   71:F9:C3:5C:B5:70:EA:17:D9:2A:D9:30:2C:8F:1B:FD:33:E6:61:70
Authority key identifier: FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
Certificate issuer:       /CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Certificate serial:       019FF8D9D0A63E864B8FBA0FEDDE860F8C17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
Manifest number:          141E
Signing time:             Thu 13 Aug 2026 02:00:51 +0000
Manifest this update:     Thu 13 Aug 2026 02:00:51 +0000
Manifest next update:     Fri 14 Aug 2026 02:00:51 +0000
Files and hashes:         1: 20o6hg6yaVER6kVktlRC-JCESYQ.roa (hash: ymV3XWOtE6TVopl8yntMuzhkTH9LeMDDpjSynZ9Lzd0=)
                          2: _RVIKmVgCaobyAUUg2jR69-PYsg.crl (hash: mhqRw587bGU+qsuGct0XGHN/QVx8INSCla+DtgMrnLk=)
                          3: aqxIqajmYQ1_CMiZ7_GwMKxbii8.asa (hash: DHOAQoYQMdjCMW3lkrZBHQJ7lJDnJKHVKvRbqH3Nq5o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f8:d9:d0:a6:3e:86:4b:8f:ba:0f:ed:de:86:0f:8c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
        Validity
            Not Before: Aug 13 02:00:51 2026 GMT
            Not After : Aug 14 02:00:51 2026 GMT
        Subject: CN=71f9c35cb570ea17d92ad9302c8f1bfd33e66170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5a:12:51:66:4b:45:8c:ee:78:60:5d:da:ef:
                    14:0b:84:93:1a:80:a7:43:c2:33:aa:cf:40:99:7c:
                    61:07:de:50:4f:08:e1:5d:2d:12:aa:8d:f6:cf:92:
                    d7:3f:46:ab:80:0d:ed:c9:1a:92:b8:50:79:86:03:
                    9a:ec:b4:69:95:8c:eb:2c:78:95:54:dd:db:ee:f0:
                    77:d3:51:40:fa:e0:8e:06:e9:85:cf:5a:21:3b:1c:
                    8f:d4:92:b3:b4:75:23:80:66:00:de:49:c8:4e:e7:
                    1e:41:ef:b4:28:80:4c:27:31:23:24:a7:ff:49:50:
                    3a:ed:5f:4a:b0:25:da:49:76:fc:0b:26:fb:d1:2a:
                    7f:5f:0c:64:af:22:97:27:39:31:e6:97:dc:ec:69:
                    53:61:89:e4:07:fa:2c:50:7b:9f:ee:fe:72:b1:78:
                    7d:ad:2d:ca:b2:81:7f:81:09:95:83:1c:52:0f:fc:
                    11:3c:93:03:8d:02:ae:9c:77:f7:7d:0b:d8:e8:66:
                    4a:e9:01:52:1d:e7:63:5c:fc:b2:51:21:ab:fb:b5:
                    c4:64:00:68:fb:67:2a:ad:5d:ed:77:42:6c:be:c8:
                    55:fb:ae:ce:51:78:65:7f:da:fd:b2:55:e6:86:2f:
                    38:e3:b6:34:bd:27:62:ad:50:2f:dd:99:1c:7f:c6:
                    8e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F9:C3:5C:B5:70:EA:17:D9:2A:D9:30:2C:8F:1B:FD:33:E6:61:70
            X509v3 Authority Key Identifier:
                keyid:FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:28:0b:2d:d1:16:3d:c0:3c:3c:bc:27:2b:b1:ba:f6:48:b8:
         ca:b0:50:13:b5:cc:7f:bc:eb:5a:ad:38:0e:a1:93:d9:f0:5a:
         7c:57:23:e2:6b:3c:ac:b2:c1:35:ec:f9:09:c2:98:48:64:64:
         13:5e:6a:b9:f4:21:75:6f:26:65:bc:8f:4a:91:17:5b:86:ac:
         9b:69:20:c1:15:29:e0:94:7a:7d:93:05:70:99:d9:a7:e4:06:
         5a:c5:a9:24:37:b5:40:83:7f:08:c2:a6:fb:39:15:a7:1d:04:
         fc:0f:4f:59:b1:f6:de:c0:f4:92:9e:cc:a0:b9:7f:39:61:31:
         51:5f:85:7c:e0:e2:34:6d:09:72:0c:5e:5e:3c:4d:c8:58:df:
         93:e6:a5:34:61:2c:51:0d:cc:73:41:72:0f:7e:cd:0b:cf:ab:
         0a:9c:b9:f3:cb:88:52:25:cd:c7:f7:44:af:7c:85:ca:dc:b8:
         5b:68:d2:11:6a:96:83:01:04:9d:cb:be:b0:98:ca:a0:f1:a5:
         48:b8:f7:d9:dd:32:69:f5:96:ae:93:4f:52:ad:2a:df:48:3a:
         4b:1f:0d:5b:04:f5:3a:97:d2:57:65:73:aa:cd:0e:4b:f2:d8:
         d6:6f:95:db:7e:b7:fc:f3:ea:20:83:b8:7c:f9:7c:6e:90:d7:
         47:d0:2d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:49:22 2026 by rpki-client