Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft
File:                     K0ro4PiNDIw530T_pB4ywmJ8OhU.mft (raw, json)
Hash identifier:          PdexJWgxXv0aeQbeY4KxPkHI6bgkP06Lr2slsCcLjzI=
Subject key identifier:   ED:3E:6B:C2:1D:1C:08:C7:A8:48:59:02:A9:67:33:95:B7:30:F6:04
Authority key identifier: 2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15
Certificate issuer:       /CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15
Certificate serial:       01A001A614DE35F8882B7D66BCFB9885016F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft
Manifest number:          071A
Signing time:             Fri 14 Aug 2026 19:00:56 +0000
Manifest this update:     Fri 14 Aug 2026 19:00:56 +0000
Manifest next update:     Sat 15 Aug 2026 19:00:56 +0000
Files and hashes:         1: K0ro4PiNDIw530T_pB4ywmJ8OhU.crl (hash: 73Ub4GXee36WHk/GZP5Al4iXLzvA5PRAJXujnW5+s1k=)
                          2: z5dBX6odp12M_OB_gttLAeXRzfY.roa (hash: H0+1g03VSFVNjWI/Z7WGHpAKWuQ/lvaaEnN2kUyKA+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a6:14:de:35:f8:88:2b:7d:66:bc:fb:98:85:01:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15
        Validity
            Not Before: Aug 14 19:00:56 2026 GMT
            Not After : Aug 15 19:00:56 2026 GMT
        Subject: CN=ed3e6bc21d1c08c7a8485902a9673395b730f604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9d:e0:04:14:37:72:f3:49:c3:89:be:d6:a0:
                    64:e3:60:bb:1f:51:df:9c:78:3b:c1:79:17:bb:b5:
                    2e:a8:7b:94:05:42:0c:e5:d0:da:13:7c:77:63:d5:
                    88:bd:da:bd:2d:d6:ec:50:33:3b:e2:5f:dd:87:fb:
                    90:a3:7a:56:f2:d2:43:31:ee:d5:e5:27:fa:28:6b:
                    b1:f2:15:cb:f0:77:c5:f1:2b:73:8c:ec:39:57:9b:
                    c5:b4:16:89:e8:a4:d1:be:94:71:2a:7d:05:f7:16:
                    43:a3:2d:51:fc:5f:02:c3:0c:cd:6a:ff:cf:38:7c:
                    55:c7:92:72:45:c5:d3:a3:75:cf:fe:76:a1:a1:31:
                    5b:5d:54:bc:f2:be:5e:66:00:af:c1:31:bd:e1:67:
                    09:fe:e7:ab:c2:bb:3b:f2:bf:93:62:ba:3b:c4:00:
                    25:b0:bf:18:f7:28:49:b0:78:71:14:92:05:0e:bf:
                    04:85:a1:12:38:95:0e:3a:9b:93:37:fa:f6:39:48:
                    08:54:7e:93:4d:eb:ed:76:12:ae:28:9b:d6:43:8e:
                    47:f7:f5:d5:bb:c4:66:34:c3:2c:50:80:0f:d0:b2:
                    c9:b0:9b:2a:49:a1:47:aa:52:ba:e7:51:38:52:3f:
                    a0:e9:bf:a1:de:22:f9:62:68:7f:1d:4b:57:76:bf:
                    d8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3E:6B:C2:1D:1C:08:C7:A8:48:59:02:A9:67:33:95:B7:30:F6:04
            X509v3 Authority Key Identifier:
                keyid:2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:c0:51:c3:c9:e5:a4:00:35:5b:9e:fd:27:0b:ef:7d:78:b4:
         9f:cd:34:ef:6d:e5:b0:6c:26:c6:0d:88:91:0b:f7:d7:20:b8:
         e7:cd:28:d6:4a:bf:54:e3:66:d0:bc:18:94:fc:0d:e1:7c:6e:
         fe:62:59:c1:f4:ca:81:03:c9:80:54:a4:94:ef:2a:47:3a:ec:
         8c:08:29:2b:d2:e7:bd:ac:d5:a9:fb:d7:a5:df:c3:37:27:56:
         da:4d:09:b4:0b:8c:72:58:27:93:fe:73:9e:39:12:37:e5:fe:
         67:84:ed:8b:11:e9:6a:22:84:ea:ab:4d:8d:29:d8:65:53:a8:
         95:f7:e6:92:47:f1:ff:25:07:f2:e3:ca:ae:eb:0f:9e:e6:91:
         43:1f:2f:50:68:a5:25:d0:cc:d5:0e:4d:80:d7:6c:cc:cf:04:
         b7:19:1e:0f:40:55:88:34:cb:5e:c2:85:ba:8d:f1:15:39:e5:
         a0:ff:af:c6:6f:b7:4c:35:9d:09:64:b9:aa:09:6f:32:b1:5c:
         d9:a8:69:a2:32:f3:7b:47:78:5e:af:86:ed:02:70:90:3c:16:
         5e:f4:61:4b:4f:0a:a7:5e:a8:6f:9b:2f:b7:3d:9e:27:e3:ab:
         27:40:8f:01:c0:47:e5:dd:59:75:90:ba:ad:46:d3:6e:42:5e:
         18:1a:7b:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABphTeNfiIK31mvPuYhQFvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNGFlOGUwZjg4ZDBjOGMzOWRmNDRmZmE0MWUzMmMyNjI3
YzNhMTUwHhcNMjYwODE0MTkwMDU2WhcNMjYwODE1MTkwMDU2WjAzMTEwLwYDVQQD
EyhlZDNlNmJjMjFkMWMwOGM3YTg0ODU5MDJhOTY3MzM5NWI3MzBmNjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp3gBBQ3cvNJw4m+1qBk42C7H1Hf
nHg7wXkXu7UuqHuUBUIM5dDaE3x3Y9WIvdq9LdbsUDM74l/dh/uQo3pW8tJDMe7V
5Sf6KGux8hXL8HfF8StzjOw5V5vFtBaJ6KTRvpRxKn0F9xZDoy1R/F8CwwzNav/P
OHxVx5JyRcXTo3XP/nahoTFbXVS88r5eZgCvwTG94WcJ/uerwrs78r+TYro7xAAl
sL8Y9yhJsHhxFJIFDr8EhaESOJUOOpuTN/r2OUgIVH6TTevtdhKuKJvWQ45H9/XV
u8RmNMMsUIAP0LLJsJsqSaFHqlK651E4Uj+g6b+h3iL5Ymh/HUtXdr/YDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO0+a8IdHAjHqEhZAqlnM5W3MPYEMB8GA1UdIwQY
MBaAFCtK6OD4jQyMOd9E/6QeMsJifDoVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzBybzRQaU5ESXc1MzBUX3BCNHl3bUo4T2hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy85OWMxZjYtZTdjMS00YWIzLTllZDYt
MTA2ODBkMjU2YWUwLzEvSzBybzRQaU5ESXc1MzBUX3BCNHl3bUo4T2hVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy85OWMxZjYtZTdjMS00YWIzLTllZDYtMTA2ODBkMjU2YWUw
LzEvSzBybzRQaU5ESXc1MzBUX3BCNHl3bUo4T2hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMBRw8nl
pAA1W579JwvvfXi0n800723lsGwmxg2IkQv31yC4580o1kq/VONm0LwYlPwN4Xxu
/mJZwfTKgQPJgFSklO8qRzrsjAgpK9LnvazVqfvXpd/DNydW2k0JtAuMclgnk/5z
njkSN+X+Z4TtixHpaiKE6qtNjSnYZVOolffmkkfx/yUH8uPKrusPnuaRQx8vUGil
JdDM1Q5NgNdszM8EtxkeD0BViDTLXsKFuo3xFTnloP+vxm+3TDWdCWS5qglvMrFc
2ahpojLze0d4Xq+G7QJwkDwWXvRhS08Kp16ob5svtz2eJ+OrJ0CPAcBH5d1ZdZC6
rUbTbkJeGBp7Ow==
-----END CERTIFICATE-----
Generated at Sat Aug 15 02:28:22 2026 by rpki-client