Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
File:                     AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft (raw, json)
Hash identifier:          KUCr+FymGcQpo7h0Njfc/VHEVllUvzYg0IzJdjnhUb0=
Subject key identifier:   4B:EC:9E:5A:8E:84:2E:F6:71:3C:C3:B0:D0:A0:D1:18:5B:FC:8C:9B
Authority key identifier: 00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D
Certificate issuer:       /CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d
Certificate serial:       01A001DD194EA6727FDF6B6B4F33E5D9D3EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
Manifest number:          1994
Signing time:             Fri 14 Aug 2026 20:01:02 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:02 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:02 +0000
Files and hashes:         1: AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl (hash: SO9mPyBwzkFiFxTw1Fl3vuZN/tFmCANO40a8gCwfduA=)
                          2: X3jNBw8Lh4wM_nlBrKCyZ_CiKpA.roa (hash: 0JM67ptoryLNsC+bVRRWV80kYyTFg1yBjH5eusPhq4I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:19:4e:a6:72:7f:df:6b:6b:4f:33:e5:d9:d3:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d
        Validity
            Not Before: Aug 14 20:01:02 2026 GMT
            Not After : Aug 15 20:01:02 2026 GMT
        Subject: CN=4bec9e5a8e842ef6713cc3b0d0a0d1185bfc8c9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3e:e6:3a:65:3f:a4:d9:e9:6c:b4:9c:eb:97:
                    9f:64:11:95:86:52:33:77:7a:cc:89:08:24:07:4d:
                    d9:46:b3:46:8b:e6:14:d3:cf:e8:b4:88:4b:ea:f9:
                    13:52:6a:8a:02:a7:49:a8:ea:8e:c4:67:6e:e4:7b:
                    41:be:b4:33:da:01:79:20:8d:2b:e2:f6:96:10:41:
                    2b:e5:f7:9a:17:0b:52:2f:d3:03:50:05:94:4a:ea:
                    04:03:dd:f5:29:40:dc:ce:3f:f7:76:9b:a6:36:41:
                    ac:ac:10:53:88:de:62:4a:ca:0d:14:cd:14:c9:c3:
                    e4:15:66:40:3e:4f:09:47:a0:56:8e:c8:4e:c9:34:
                    3d:f3:5c:39:5f:4d:4e:7d:b2:07:55:60:0b:0f:4d:
                    30:81:c9:7b:ce:50:07:e0:25:bd:03:e1:51:42:e6:
                    f1:78:e6:53:f3:71:16:8e:23:b6:65:c6:86:16:cd:
                    94:a7:80:7a:27:4c:9c:48:e3:16:a1:d2:2d:ca:34:
                    32:8a:59:3e:98:11:1f:cb:b9:0b:f6:26:d9:56:12:
                    26:6e:cf:5a:40:94:f9:08:ae:0f:05:28:1c:93:1d:
                    1d:2f:ec:ea:42:6c:cd:1d:22:37:05:01:dc:58:27:
                    ff:64:e3:05:c5:eb:37:da:e1:d4:c9:36:37:83:92:
                    95:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:EC:9E:5A:8E:84:2E:F6:71:3C:C3:B0:D0:A0:D1:18:5B:FC:8C:9B
            X509v3 Authority Key Identifier:
                keyid:00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:52:06:29:81:cd:ae:5b:6f:aa:01:8e:68:1e:12:c0:23:e9:
         ad:3c:43:63:0e:2e:42:e4:56:37:a1:52:74:b0:12:f8:49:1c:
         d8:dd:4c:dc:51:c3:93:d0:2b:86:68:5e:e4:7f:2c:75:7f:09:
         cc:4e:b4:52:40:dc:97:3b:e2:4b:cc:21:ae:9e:b8:f9:4a:7b:
         1a:8b:ad:5d:84:7a:d7:d8:c0:5e:1c:88:fa:d1:1e:1c:aa:8b:
         97:25:28:9d:41:b1:5e:66:bf:84:aa:c8:ed:5d:02:a8:a9:f8:
         cf:4b:48:14:b8:38:7b:55:b6:82:d3:d4:39:c7:9e:29:16:4a:
         2f:f6:ff:1c:a4:71:2c:e2:f0:8b:2c:d2:a1:f1:cc:ec:57:00:
         1b:8f:29:95:19:6a:7e:0a:d6:77:56:36:a2:32:ae:95:42:4c:
         b5:17:ad:5c:bd:44:c6:cf:a4:ea:f4:a5:bc:18:6c:84:55:83:
         23:d0:70:04:6b:ea:98:b6:75:27:cb:06:d5:06:43:43:28:63:
         c9:a7:9e:99:be:b5:4c:14:09:a5:35:c1:df:85:3d:4d:47:c3:
         d5:ca:70:6e:e4:21:a3:09:a4:f6:ed:23:58:5a:bd:c3:3d:2f:
         a1:bf:c9:f7:d9:19:a4:c0:a1:f2:74:10:aa:60:a7:a0:73:d1:
         d9:b0:a4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:47 2026 by rpki-client