Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
File:                     aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft (raw, json)
Hash identifier:          hI4nMojNwraHGLXAphFkRwo+Qmaa+Wu3phcfWdJUJvE=
Subject key identifier:   0D:BB:6B:63:C7:2C:5A:E6:04:74:D5:CC:AA:48:8C:9C:97:D7:D6:3B
Authority key identifier: 68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
Certificate issuer:       /CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Certificate serial:       01A002139320620205D99E5967EE6C538DE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
Manifest number:          19FE
Signing time:             Fri 14 Aug 2026 21:00:32 +0000
Manifest this update:     Fri 14 Aug 2026 21:00:32 +0000
Manifest next update:     Sat 15 Aug 2026 21:00:32 +0000
Files and hashes:         1: YUXKYpsFemsNDBecWX4MUwbfgXA.roa (hash: aALLuFrEzNbZ6xLI2lfoFLt5fV9m8J9Klkm3q6Pz7LI=)
                          2: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl (hash: FYQ3Cghkxafk13VwAtURs4Qimzr9TIG9luOsGIn9Lak=)
                          3: ce5lJ-hpH1wu-kVRML7xAZPt-gE.roa (hash: 8ViUaToRkyhjrSgTu0qhVkwYrKw/qmbuzYwV/hXV6/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:13:93:20:62:02:05:d9:9e:59:67:ee:6c:53:8d:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
        Validity
            Not Before: Aug 14 21:00:32 2026 GMT
            Not After : Aug 15 21:00:32 2026 GMT
        Subject: CN=0dbb6b63c72c5ae60474d5ccaa488c9c97d7d63b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d7:fa:86:d5:22:0b:4f:02:e0:92:94:a7:a4:
                    1a:21:4d:71:2b:2f:09:7a:f8:c1:f5:86:68:39:e6:
                    6d:a7:cc:36:b8:36:cd:76:3e:74:4e:a1:13:d7:dd:
                    10:b4:18:ed:72:4a:f3:8a:59:d8:15:bb:0a:8b:78:
                    9a:f4:33:9d:d5:86:1c:e1:d6:17:47:64:18:33:63:
                    c6:91:7d:3b:82:71:50:60:f7:7e:c2:bc:26:48:bc:
                    5e:83:17:94:ad:ac:3e:e4:51:57:57:58:d9:1d:f4:
                    3c:3d:9a:f4:44:35:d7:3b:18:f7:0f:29:7f:9f:c6:
                    a9:b7:e7:7b:8c:b5:f5:3b:ef:53:eb:31:f1:6d:ed:
                    8d:8b:46:cd:4b:e1:23:ba:94:21:5e:c7:f9:9f:c2:
                    a9:33:d1:4a:b9:e2:55:21:d3:e8:e4:bd:7d:05:00:
                    c5:98:44:ea:db:ad:0c:5e:4f:1e:9f:36:cd:0a:48:
                    95:4e:bb:84:c6:c3:ee:8e:c3:80:ff:a0:24:e3:f6:
                    03:70:a1:e7:4e:e6:78:eb:f0:e2:8b:22:b2:5f:9f:
                    ea:22:28:83:63:8c:0c:01:50:bb:44:ec:d7:de:60:
                    6f:1e:ad:41:02:cc:8b:b9:3e:37:29:29:42:89:d8:
                    80:e4:db:9c:04:1d:fb:ad:d0:62:c3:08:c4:52:53:
                    87:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:BB:6B:63:C7:2C:5A:E6:04:74:D5:CC:AA:48:8C:9C:97:D7:D6:3B
            X509v3 Authority Key Identifier:
                keyid:68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:33:de:d9:a4:54:0b:00:fe:5e:5a:07:60:4d:b5:82:f6:01:
         54:6c:85:bb:a6:26:eb:47:85:82:3a:3e:e5:d4:5c:18:df:4d:
         19:49:0a:39:1a:82:b8:44:61:55:98:65:15:43:6d:73:83:30:
         a2:45:0d:3a:f4:7f:6e:4c:7e:d2:7e:37:ea:48:aa:3a:86:eb:
         60:57:71:ca:9e:17:ef:68:b4:a4:31:7f:76:82:c7:7c:cf:5f:
         84:94:a6:39:88:59:37:c0:5e:61:35:04:81:fb:e6:ec:fe:1e:
         69:d5:e1:89:3f:76:3d:0b:9a:f6:9b:fb:56:16:84:68:0e:6a:
         a5:38:74:dc:81:cc:18:90:ec:b4:b4:b9:7b:3f:2e:11:53:2e:
         be:b0:a9:bc:a2:3a:d5:b9:4d:d2:18:94:c5:19:ca:1c:2b:76:
         11:55:e0:38:91:04:2a:ea:c3:f7:26:13:5d:71:4b:b1:96:74:
         1f:ad:ba:38:36:75:30:b8:7b:3e:4a:ec:e9:4d:24:83:c2:61:
         10:62:11:68:6b:e8:95:38:78:37:a7:67:c2:13:70:d3:fd:ce:
         5a:b4:66:05:34:7d:22:57:fb:79:7b:1c:80:d0:db:06:97:5b:
         96:62:e1:40:19:3d:23:0f:d7:e1:d0:2c:da:b8:3c:be:00:f0:
         18:04:a2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:15:15 2026 by rpki-client