Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft
File:                     F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft (raw, json)
Hash identifier:          dQwNbLi/5DJcWtSHwg40ixSJy2OydU7HPpuqJ13JmoA=
Subject key identifier:   7F:6B:D4:77:11:74:3C:1E:37:FD:1B:BC:ED:AF:14:48:05:22:6A:B4
Authority key identifier: 17:8C:8F:20:C9:39:AA:A9:C8:0C:CE:6A:0D:15:67:18:3C:A1:C5:99
Certificate issuer:       /CN=178c8f20c939aaa9c80cce6a0d1567183ca1c599
Certificate serial:       01A028EA933A7282B495C35373D353E5BEBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft
Manifest number:          1554
Signing time:             Sat 22 Aug 2026 10:00:56 +0000
Manifest this update:     Sat 22 Aug 2026 10:00:56 +0000
Manifest next update:     Sun 23 Aug 2026 10:00:56 +0000
Files and hashes:         1: 7LMaVQHIURLIHhJQQlzIccTVpOE.roa (hash: 5km+tw1h03H4l3wkZKI+O7HJSeNoMxRPhDOUY2h8vd4=)
                          2: F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl (hash: KFC+AvWjXzcDhYXOXk5f9aBI23xGfrGiWtx2ERSf6pk=)
                          3: LI9K_zdJnsTE9lvQTqFYKf6AYsU.roa (hash: pcuAI5XjcKbL6fmMT5QI/ixfEpBYRotLo9ai79rRnLo=)
                          4: NwknT9I6GyPv-_RTZeqZ4JTQzrc.roa (hash: x5vufpHlYAUdkIPewVIu2Kz4yUhsko+l9KK+oarRKKQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Aug 2026 10:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:28:ea:93:3a:72:82:b4:95:c3:53:73:d3:53:e5:be:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=178c8f20c939aaa9c80cce6a0d1567183ca1c599
        Validity
            Not Before: Aug 22 10:00:56 2026 GMT
            Not After : Aug 23 10:00:56 2026 GMT
        Subject: CN=7f6bd47711743c1e37fd1bbcedaf144805226ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0b:1b:77:7c:fe:01:cd:e0:f6:05:af:0f:af:
                    51:c2:b1:dc:37:26:f9:71:85:3f:dd:98:82:c4:c0:
                    0a:40:0e:7f:9d:2c:ae:87:36:c3:e7:e8:2e:30:92:
                    f6:08:1b:f4:52:8f:e4:27:88:f8:52:49:c2:85:97:
                    dd:06:6f:cd:bb:47:ad:df:2f:be:0e:de:be:88:53:
                    43:1e:f6:dc:10:df:b7:ba:06:8c:9a:e1:66:a3:59:
                    52:b3:8a:b2:08:6b:0e:7f:06:c3:77:5a:f8:94:3b:
                    f7:d8:72:c6:39:3d:d2:6c:99:40:c5:fc:61:c2:b8:
                    93:d6:97:f9:59:34:41:10:79:df:1e:24:08:00:8b:
                    c1:bb:34:cd:84:33:d0:9d:0e:e0:3d:8c:b4:5d:ee:
                    ad:be:ec:f4:68:19:1e:d5:92:47:6a:90:0b:bd:ac:
                    47:7e:f9:b8:90:a4:a8:62:7f:c2:01:bc:4a:75:de:
                    4c:c9:12:a4:45:94:18:c6:02:2b:22:c3:c6:8b:0b:
                    de:55:5e:53:21:f4:70:b7:37:34:a8:28:2a:5a:b9:
                    8b:23:09:16:3d:7b:43:d5:87:69:b0:a2:a8:67:9d:
                    b3:50:c7:69:f7:94:03:c8:ee:e4:0f:2e:66:eb:10:
                    76:70:fc:b9:0f:ed:f0:66:5f:6f:18:3a:96:00:52:
                    0e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:6B:D4:77:11:74:3C:1E:37:FD:1B:BC:ED:AF:14:48:05:22:6A:B4
            X509v3 Authority Key Identifier:
                keyid:17:8C:8F:20:C9:39:AA:A9:C8:0C:CE:6A:0D:15:67:18:3C:A1:C5:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:96:ce:5b:72:0c:82:96:30:53:65:30:3e:27:20:7d:56:78:
         61:32:de:5f:4e:63:d1:ca:10:ff:b8:de:11:d8:0c:d6:ae:69:
         f5:17:39:53:86:02:44:93:cd:b5:f6:fc:32:09:9a:43:36:74:
         e9:70:30:dd:fc:9e:f4:e7:01:f4:20:4f:ad:3a:b1:c9:e0:2f:
         4a:29:1a:f9:45:b3:cd:71:b1:3e:dd:e2:4c:4c:b3:64:37:f6:
         bb:96:4b:57:9b:8a:04:37:83:1a:89:bb:67:05:9b:62:4d:39:
         dd:26:ae:dd:41:45:99:fd:0a:ca:ad:0f:b0:8b:ab:cb:92:b3:
         6a:45:ed:2b:61:7b:b5:19:41:80:e7:e0:e4:62:04:f5:39:b0:
         8e:b5:d1:7a:c8:65:4c:b0:d4:37:43:dc:23:1d:35:8c:72:3d:
         bc:26:e1:7d:80:c2:4a:48:15:af:51:59:31:12:44:52:5e:87:
         8c:94:d4:5c:1f:a3:88:68:2d:cb:e4:40:c8:b5:3c:01:57:ba:
         44:7b:4f:ba:3d:e0:d5:e8:2f:e8:de:b0:42:fe:cb:d6:ce:b9:
         67:eb:c4:37:ec:f4:f6:4f:6f:c2:c8:9d:3c:3a:f1:b2:6a:54:
         84:b0:9e:ec:e4:d5:47:1e:b7:04:9a:83:a1:b7:9c:53:aa:18:
         4d:35:a1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:28:28 2026 by rpki-client