Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft
File:                     jYkvTe2SJX5nunTxdiyLyRTr1hw.mft (raw, json)
Hash identifier:          /2FRnEpV1gmCMqcoPIxEHQa56ZW8MKXSAx8wp3CWyaY=
Subject key identifier:   85:A6:92:F2:AC:CE:A5:CF:7E:31:F8:F3:58:58:95:6D:36:CE:8A:84
Authority key identifier: 8D:89:2F:4D:ED:92:25:7E:67:BA:74:F1:76:2C:8B:C9:14:EB:D6:1C
Certificate issuer:       /CN=8d892f4ded92257e67ba74f1762c8bc914ebd61c
Certificate serial:       01A002B8F19D99B53EBB1D97A9D9521122F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft
Manifest number:          1A06
Signing time:             Sat 15 Aug 2026 00:01:09 +0000
Manifest this update:     Sat 15 Aug 2026 00:01:09 +0000
Manifest next update:     Sun 16 Aug 2026 00:01:09 +0000
Files and hashes:         1: 75-KqODx3w8CvM9m5Nq3kRsXyMo.roa (hash: A6bAUCVGwzASuTY5FNYElUtdHA4J3zfHfU7IL2XZWu0=)
                          2: jYkvTe2SJX5nunTxdiyLyRTr1hw.crl (hash: Pb6hfwiXZxVX+CFo/ohfZYnVuKv2+zMmJJMNdAscIiw=)
                          3: kN8sJaIrd98steTWsu3vc7sEjKI.roa (hash: MkLW8K9XVhuTwi22jPlIAzX7VARe0fbKX4ZjMGnmNrI=)
                          4: tTnZl8uF6ADN5gv_dFCnGczPy10.roa (hash: yFxKga5LtYoglKO/yUWDlJacjL9nZm+MXR5rVDyXPDw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 00:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:b8:f1:9d:99:b5:3e:bb:1d:97:a9:d9:52:11:22:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d892f4ded92257e67ba74f1762c8bc914ebd61c
        Validity
            Not Before: Aug 15 00:01:09 2026 GMT
            Not After : Aug 16 00:01:09 2026 GMT
        Subject: CN=85a692f2accea5cf7e31f8f35858956d36ce8a84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:17:00:c5:52:4f:54:98:5f:0c:f9:8d:60:fb:
                    de:b3:e5:16:ed:08:84:97:38:28:74:ee:68:50:bb:
                    02:b2:3d:01:36:2b:9b:d3:76:a8:ed:dc:f0:5d:07:
                    d0:5f:57:c9:e5:91:84:c8:17:c5:99:84:a9:06:a8:
                    44:26:00:d4:be:1b:95:2b:72:66:ae:ec:3c:91:4e:
                    90:37:a1:e2:7d:7c:d8:2a:4f:c3:e2:0c:1e:fa:f1:
                    3a:c0:3f:2b:b5:ba:02:34:5d:c1:56:22:5e:94:6a:
                    7b:2b:6d:a6:76:ad:87:e5:65:6f:58:75:53:59:23:
                    13:9c:5f:18:f7:4c:dd:f0:04:9b:85:90:81:f8:10:
                    c6:6f:32:2d:3b:62:da:06:82:fb:b0:61:7f:42:e2:
                    4a:27:ff:63:66:a0:e0:46:94:6a:33:cc:2d:78:e6:
                    d0:bf:6c:a6:76:51:85:77:eb:cf:91:94:fa:20:bf:
                    52:a9:2e:c7:27:8a:82:83:9b:b1:3e:1f:44:07:b4:
                    5b:48:05:8d:77:4d:fe:74:85:c1:ac:8c:f0:64:85:
                    fa:c5:ce:c2:b5:37:c6:5c:90:ec:9e:d8:89:f2:4d:
                    ed:87:bc:a9:68:60:9a:5d:0e:76:b9:81:e3:04:e7:
                    72:55:09:c7:e4:7e:25:3f:f8:66:e2:70:fd:f2:77:
                    06:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A6:92:F2:AC:CE:A5:CF:7E:31:F8:F3:58:58:95:6D:36:CE:8A:84
            X509v3 Authority Key Identifier:
                keyid:8D:89:2F:4D:ED:92:25:7E:67:BA:74:F1:76:2C:8B:C9:14:EB:D6:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:f0:90:cf:75:92:39:3e:f9:e8:a9:71:41:da:89:d4:1b:21:
         23:da:d2:b0:ee:ff:cc:e6:f8:05:aa:36:c2:62:e4:74:99:85:
         83:53:31:69:c6:1a:8d:f9:55:c4:91:45:38:ea:a3:e2:00:88:
         5e:2d:b3:8d:52:56:eb:00:8d:3b:48:ef:20:a4:a4:e7:17:d1:
         ac:8b:b6:45:4c:5e:f9:1a:c9:8b:41:a4:d6:4e:4b:1d:b0:80:
         e8:1f:2a:0e:60:89:7e:bc:81:29:af:6a:28:d2:1a:b2:06:f6:
         7f:76:bc:90:63:09:b7:e1:a4:c7:f0:e0:ff:cd:de:9c:7e:fe:
         b1:35:b2:66:ea:f4:32:96:20:6a:2e:21:84:eb:25:3f:c1:d7:
         d0:49:0e:c3:5a:35:15:58:51:83:96:62:20:5e:4d:18:c0:04:
         10:5c:b4:7e:f1:04:dd:69:79:84:03:70:97:e4:9a:17:b5:f0:
         af:ff:20:01:eb:8a:e9:7d:ed:19:0e:de:73:c0:87:df:db:09:
         31:23:3e:2a:c4:55:cc:ff:07:df:5f:09:a5:78:b4:2d:b5:f7:
         97:19:5f:9b:d8:52:75:a5:a8:9f:1b:93:a3:6f:0b:0c:23:c1:
         1a:05:76:1f:78:38:8c:da:2a:b2:86:0a:f0:1a:dd:ce:8f:8e:
         e8:66:c6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:22:40 2026 by rpki-client