Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
File:                     Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft (raw, json)
Hash identifier:          Pp1c+n47xFgr/QOKCR7quUMx1NuAUMVNkj+xMPLlVXE=
Subject key identifier:   36:18:8E:7A:57:70:9B:8A:E5:B2:2F:62:44:92:FB:6F:01:5C:C1:E4
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Certificate issuer:       /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial:       019FF67E319A3DCFBC617C4F9A9EFDC2A4D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
Manifest number:          1893
Signing time:             Wed 12 Aug 2026 15:01:33 +0000
Manifest this update:     Wed 12 Aug 2026 15:01:33 +0000
Manifest next update:     Thu 13 Aug 2026 15:01:33 +0000
Files and hashes:         1: L3204t5xqv_RGAUaDjepK8F4Hqw.roa (hash: vbMIqhNdM6+SVCu/75ex+GgHrK58xyd+mi2MfbKpNh0=)
                          2: Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl (hash: rnbwQjNPTIcKgbo5Z+758k/PAdSZNcDc+nCAdYszDoU=)
                          3: S7WXL-Nx9MlA3zg4adYRLPxrpBo.roa (hash: mX6+SayjpKMIocVqlVrM4qpi0n+3CKCDO1ooCblBO5Y=)
                          4: WFdIHW-Ws250whgVTtRrUCqIqBE.roa (hash: HRqAJVRbRhkF80Ao7zEatn7LEMVmvy3Uv2sGlTFG/gw=)
                          5: a_LD4C1e0iacfpZiDgsb50AXAVs.roa (hash: 4gQGqiONbOGfvDX1tMM3JWTKlxmWnRtDf432bj99iAo=)
                          6: fWSfT8rZ4yQU17BDaiKLn_Be6r4.roa (hash: 0WLp5t/8+YyeQRyc/k7MKPlchix0mKrAIi7mbiY/mEk=)
                          7: gItssa-B0b0X--YWiS_dUYtbwpY.roa (hash: iVUV0DWttepgFWqqg65SaE3OlJIh4Ep6A/pLvMT4l8I=)
                          8: hIwb7_2amNokm6JgMm4qjVwwsfY.roa (hash: z6Tdio5T4pmKdRiyHl5VQF+mCNzIsXm/cdRBtIDIBvQ=)
                          9: xBbmUNut2X7Nbu9MrCmvtOkNLsc.roa (hash: kzlztlWSCmlrYg8BvRuHwSgxicW8qhydqsndoVqEW8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 15:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f6:7e:31:9a:3d:cf:bc:61:7c:4f:9a:9e:fd:c2:a4:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
        Validity
            Not Before: Aug 12 15:01:33 2026 GMT
            Not After : Aug 13 15:01:33 2026 GMT
        Subject: CN=36188e7a57709b8ae5b22f624492fb6f015cc1e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8a:c8:fc:73:cb:5a:e6:60:1e:c1:ba:75:39:
                    63:86:44:a0:23:d5:2d:c7:e8:4a:fd:8f:95:84:4d:
                    3a:02:5e:76:0f:f4:88:48:43:80:b3:31:11:ab:6c:
                    dc:a9:c4:63:f8:3a:4a:47:12:2c:e5:68:f4:08:bc:
                    0c:7a:61:d6:2b:3b:0f:a8:2b:e6:f3:51:50:d3:e6:
                    a2:0b:d5:0f:96:63:fc:96:ad:e3:2f:a4:9e:0c:b5:
                    0d:ef:06:f1:82:ab:2c:ee:53:3e:6e:f8:01:8d:64:
                    1c:71:95:72:b1:67:eb:97:ad:7d:7d:90:4d:db:20:
                    05:ed:6f:2f:ef:50:49:0f:b6:ef:21:4d:05:2e:3f:
                    eb:1f:ed:06:21:34:97:bd:78:bc:d6:79:81:75:e9:
                    ad:80:cd:79:d5:45:c3:3b:e8:42:55:a3:7f:7f:fc:
                    4e:36:1d:63:d1:38:46:b2:9b:09:10:69:2e:dd:c0:
                    98:aa:71:c8:b3:c7:fc:29:80:e3:b8:23:b2:ce:f9:
                    54:9f:60:5f:ce:d8:36:b4:dc:05:f4:34:88:3a:84:
                    6e:54:82:56:a3:c2:4a:01:93:38:06:44:83:6c:b4:
                    33:a4:28:2e:5a:70:29:e1:c5:e9:69:ec:d2:61:5f:
                    f9:15:dc:a1:a8:34:2b:e9:bb:bd:77:a5:c6:3a:80:
                    b1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:18:8E:7A:57:70:9B:8A:E5:B2:2F:62:44:92:FB:6F:01:5C:C1:E4
            X509v3 Authority Key Identifier:
                keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:b7:f6:98:29:32:42:66:b0:1d:a5:33:c9:31:3c:ce:f8:e7:
         e7:8a:2b:4f:88:05:42:07:e3:1d:ca:43:96:c4:0c:f7:68:51:
         0b:b0:85:af:b9:83:6e:fb:8f:ea:fd:33:27:5a:e5:b3:a6:df:
         a7:91:c1:9a:83:1a:36:53:10:69:84:99:4c:44:a2:1a:4b:de:
         d1:de:e4:d1:e4:25:db:a2:4a:92:5f:20:ed:fa:7b:b3:3a:22:
         72:50:f2:cc:e5:27:0b:1f:29:61:9a:14:a0:df:55:27:ad:e5:
         ef:fd:8a:35:e6:0f:90:e4:c5:31:98:17:77:f0:7c:2b:22:0c:
         40:20:7e:95:c9:f7:e5:66:6d:33:e6:f6:e7:47:12:00:fe:f9:
         52:d2:2d:ba:bc:95:d3:31:7d:0f:df:45:a2:6f:f6:78:3a:45:
         86:bf:bb:54:16:63:bd:07:f7:7d:e2:bc:f4:ea:52:19:10:b2:
         13:c3:d9:cf:b5:a3:a5:78:d7:90:35:c6:95:a3:54:8d:9a:c3:
         61:29:22:3e:de:c4:9d:f9:7c:c2:6d:a2:02:82:ad:7b:aa:e3:
         a7:4e:2f:ee:81:8e:ca:4a:e4:14:53:be:09:57:3f:6d:6f:41:
         1a:e8:aa:80:45:89:97:d0:c7:22:ee:b1:bd:b9:be:65:7c:fa:
         4d:53:3f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 20:28:33 2026 by rpki-client