Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
File:                     xe6WP4Kg-whm1CVTszeFl9nz72g.mft (raw, json)
Hash identifier:          L9nCJR3rLX7OJDMnivIVUifuVcyXPTe8H6KQdhrQAnk=
Subject key identifier:   2A:59:CC:2F:74:2E:6D:12:72:61:35:E9:51:EF:A0:19:CF:ED:67:89
Authority key identifier: C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
Certificate issuer:       /CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Certificate serial:       01A003CB1007FF681B986C437BACEDA0B38E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
Manifest number:          15A8
Signing time:             Sat 15 Aug 2026 05:00:34 +0000
Manifest this update:     Sat 15 Aug 2026 05:00:34 +0000
Manifest next update:     Sun 16 Aug 2026 05:00:34 +0000
Files and hashes:         1: Cw_CJ5OIoHGbk_LBH69lh1CZovM.roa (hash: yuy/Yr+PAF0sScRAiUSYVsMjWEF5R7acxEyN+jKmOa4=)
                          2: GUYAfSyAe_7KoSF2zNniTR86G3o.asa (hash: QJFS4MThTD8AoeTU4o5zhEg8FJRAThUcCKNx9GenoTY=)
                          3: e1vkUB4hW3aB_edwhYTI6Nlcy0A.roa (hash: izbr6DXAEGnVX5rmj+RODLmoS4n5mXvbk+24OOXQV7s=)
                          4: xe6WP4Kg-whm1CVTszeFl9nz72g.crl (hash: jYWdbNmgtcVFP96CclUvHokcMcd6JJRzJ2cPOE14TvQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:cb:10:07:ff:68:1b:98:6c:43:7b:ac:ed:a0:b3:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
        Validity
            Not Before: Aug 15 05:00:34 2026 GMT
            Not After : Aug 16 05:00:34 2026 GMT
        Subject: CN=2a59cc2f742e6d12726135e951efa019cfed6789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d0:82:b8:ec:80:6f:f2:78:94:8b:04:0f:87:
                    63:1f:25:8c:67:20:0e:f9:f8:a9:3b:24:6b:55:5e:
                    ff:5e:b5:31:4d:4f:87:5e:d6:ac:18:ac:e1:ff:9f:
                    c5:4f:5a:7d:93:85:f4:2a:75:28:cf:47:4c:4a:35:
                    be:d0:61:b9:36:a1:c0:b8:55:1f:12:42:e7:03:25:
                    03:d1:ae:36:da:c5:d9:73:24:19:dd:93:3c:d2:d2:
                    58:b7:11:d4:3b:a1:88:98:b0:9a:ee:25:14:7e:fe:
                    1e:cf:3f:f4:b2:b8:f1:b1:80:77:00:1f:5a:59:8a:
                    e1:46:39:22:0a:b6:7c:cc:26:03:af:9e:cb:5d:01:
                    c8:01:f2:99:ee:a0:fe:de:54:68:33:b6:ea:7c:c4:
                    38:d7:60:b9:f9:a3:e7:07:d5:14:5a:17:e7:18:44:
                    1a:ea:72:bc:a4:46:8e:7e:eb:67:6a:46:e1:8f:07:
                    10:b8:a3:88:8c:65:97:b3:e4:c8:3e:c8:a0:f6:13:
                    b8:a3:41:12:21:fc:eb:d0:0f:c5:3e:7f:0c:7a:56:
                    bb:52:51:99:00:e6:76:f4:26:d5:e0:7b:bd:5b:d8:
                    4a:41:df:e7:de:ae:7d:60:d2:44:9a:47:bd:4e:70:
                    4f:94:a0:d6:d6:8d:13:6c:4c:2b:22:5f:95:ea:a6:
                    2b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:59:CC:2F:74:2E:6D:12:72:61:35:E9:51:EF:A0:19:CF:ED:67:89
            X509v3 Authority Key Identifier:
                keyid:C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:7e:ff:0f:95:ad:71:c3:c1:c6:05:66:96:96:e0:74:80:bc:
         bc:bf:05:ea:55:31:49:b4:26:79:8a:47:a0:0b:12:45:58:e9:
         1b:ff:f3:93:d2:f3:ed:c1:87:9c:3e:60:fb:77:e9:ab:9e:c7:
         ff:e6:8c:59:06:8d:e3:a4:aa:c6:cf:02:e4:c3:e2:cc:14:2a:
         ab:9c:3e:53:aa:5b:a9:28:eb:1a:a0:99:9e:9a:46:e2:9b:2f:
         9b:1b:4e:83:d8:8a:94:a7:03:83:57:3c:34:77:02:72:fc:c7:
         e8:87:15:71:c8:1e:99:49:f3:0b:11:82:b4:61:93:71:62:25:
         d0:50:85:c6:97:03:66:6b:fe:37:65:9e:d5:35:c0:19:55:cf:
         1f:d6:e1:1e:a4:24:04:e9:ba:c1:9a:bd:57:61:ae:99:03:2e:
         01:0d:95:8b:e5:c2:90:cc:46:a1:11:5e:4f:4d:9d:0a:f8:85:
         6c:83:46:fe:96:38:51:91:c2:de:a4:ac:04:6c:92:13:54:9b:
         fc:9d:a7:4b:2d:9a:d1:71:39:48:31:a7:f3:ce:56:f1:ec:11:
         b3:5f:a8:6a:00:1a:02:81:71:04:2e:74:6f:3a:4b:77:f8:e9:
         b6:6e:8e:7f:52:c9:9f:91:6d:c4:6b:20:6e:23:52:af:06:d1:
         40:37:b6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:07:46 2026 by rpki-client