Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
File:                     pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft (raw, json)
Hash identifier:          X99E3xpKnr8IRQrtU9zxQoiI6EsbGocYC6Q6tdxxJBw=
Subject key identifier:   36:B8:A5:0F:95:CD:C9:68:25:85:33:14:54:D1:8C:17:4A:F4:11:C3
Authority key identifier: A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95
Certificate issuer:       /CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
Certificate serial:       01A0013838342D0559AD469A52B80568ED29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
Manifest number:          1A00
Signing time:             Fri 14 Aug 2026 17:00:56 +0000
Manifest this update:     Fri 14 Aug 2026 17:00:56 +0000
Manifest next update:     Sat 15 Aug 2026 17:00:56 +0000
Files and hashes:         1: ZMTWhcJ1e7tvXHUUl4ANoGMrIWk.roa (hash: 9yOiqGJYeL5bi8PHF9fNeVVcmhOJdy6bDsiWR0m6Ve0=)
                          2: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl (hash: /daCv87gRMp6umxE7gWob0R06Mwv5Ez20aIo5H5dA/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:38:38:34:2d:05:59:ad:46:9a:52:b8:05:68:ed:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
        Validity
            Not Before: Aug 14 17:00:56 2026 GMT
            Not After : Aug 15 17:00:56 2026 GMT
        Subject: CN=36b8a50f95cdc9682585331454d18c174af411c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:34:bd:8d:ee:f9:a1:c2:d7:ac:d5:be:e0:09:
                    94:46:ec:a0:ea:56:76:e0:2a:e8:56:de:97:18:77:
                    14:74:8b:13:ec:2a:5d:bb:3b:4e:8c:cf:fd:3b:56:
                    80:0c:1d:90:8a:07:3b:96:3b:80:e6:89:7e:c4:0f:
                    43:0f:5e:68:f8:36:b4:da:6b:4a:1f:f6:1e:bd:8b:
                    fa:eb:54:45:e8:39:25:99:75:48:9a:6f:ad:94:9d:
                    45:36:27:55:92:bd:b8:4d:90:f6:eb:9f:92:84:09:
                    06:c7:f5:83:ed:b4:3a:62:ef:8e:eb:6b:c1:b2:0a:
                    cf:92:35:fa:54:24:e4:3a:9b:b1:3c:02:a4:de:a1:
                    d5:e9:ba:77:4b:f7:a1:44:23:14:ae:81:6f:d3:d1:
                    1e:1d:54:de:e8:4b:6a:b0:8e:84:5e:2f:36:34:db:
                    3a:dd:84:3c:f3:2b:ac:7a:f8:c6:b5:7b:9f:ca:e2:
                    eb:7d:67:d2:32:da:1e:60:ef:7a:11:9f:bd:8e:18:
                    9c:34:51:61:16:27:8e:48:c5:00:26:25:4c:99:85:
                    96:fa:23:2d:35:5c:16:39:06:9f:bd:bf:15:8f:d6:
                    f3:ea:02:50:54:b0:df:9f:bb:46:3d:70:c7:0b:37:
                    f7:7d:f2:1e:af:81:17:2c:fa:57:b5:6b:99:76:9f:
                    fe:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B8:A5:0F:95:CD:C9:68:25:85:33:14:54:D1:8C:17:4A:F4:11:C3
            X509v3 Authority Key Identifier:
                keyid:A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:b5:e9:45:14:65:31:fe:02:0f:ed:3e:28:b0:28:37:aa:fe:
         78:67:b0:17:fc:c7:52:a1:9e:a5:a3:43:13:1b:7a:bb:de:56:
         fe:57:b7:1d:d5:bf:8a:0e:b9:f7:44:b8:63:2e:2a:a7:f4:65:
         31:7b:80:68:a4:92:a2:33:df:5f:c8:35:f0:48:c1:cd:72:b2:
         55:09:d0:5e:a5:c7:e6:d4:e2:63:48:15:3e:01:b9:e9:82:b4:
         87:8a:2b:1e:18:8f:26:4c:d5:27:70:e5:dc:09:13:29:76:39:
         14:ae:24:49:57:b1:03:dd:71:57:1a:e7:61:ae:4d:46:bf:82:
         3e:32:50:0f:d4:2f:ce:ab:b6:b0:9d:e4:2f:54:eb:2b:0c:2d:
         99:a7:f3:df:88:af:04:a8:a3:c8:f4:71:92:02:bd:07:57:9f:
         20:9b:bf:48:7d:fb:6b:cf:d2:37:f9:f7:08:0a:86:fd:74:80:
         43:86:f5:e0:7d:a2:65:63:29:3c:08:1b:e6:a7:9c:0d:00:b6:
         d8:b8:23:fa:27:7e:4d:91:5f:a9:b1:6d:b3:00:1f:b0:cc:f6:
         1c:28:b4:9b:ae:56:ae:d1:2a:10:28:bd:31:72:bb:92:c2:0f:
         94:ba:6a:67:a6:ff:6b:eb:8e:95:fb:58:6a:5d:7b:ec:e3:a1:
         8b:63:b7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:30:34 2026 by rpki-client