Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          VCeaFWRhgvDOrMUG62H5TmkC1SLjwOb6+Ibw5dW6Ecs=
Subject key identifier:   1F:95:97:9C:8A:EF:33:0B:C8:FC:87:3C:EE:B6:ED:53:B1:BE:6B:A8
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       019F6D29CBCF0679438EE6CFD321949FD916
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          1A01
Signing time:             Thu 16 Jul 2026 23:01:23 +0000
Manifest this update:     Thu 16 Jul 2026 23:01:23 +0000
Manifest next update:     Fri 17 Jul 2026 23:01:23 +0000
Files and hashes:         1: 7ELbo8DKD8QOXRjssYS6wePnETw.roa (hash: g47QYVMiNHnqnXov0OVk0NOhZUsS+pa9D0jOV0goZEE=)
                          2: 7nHuEYfzq0sxBotIwOTKnrsuqJc.roa (hash: 5KEXUpcoESrkEUXw6CAMFCGMGysz+4l5l9DNIsTbLrQ=)
                          3: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: ZD8uSkJPCz/QB6w04u+ZBcgOTeTNG34jt8mG9Ek1McU=)
                          4: Nr7UmKzHvs5LFBWxclEXNby8v-w.roa (hash: 6yVyO1xkWu0C7uNE6Y6DPlWxOVCuyQgMCCzQsQV5E34=)
                          5: PBeIIGkcHysJPrw2bh6-t7i6h2Q.roa (hash: 8GRkaUrE7jPN3KtBvtWO8Y/2n25/ErqReEtBTVUOJOM=)
                          6: QKB2yXBKCucZIik_NUkIUu-0gsU.roa (hash: Az9ohs2u7S8Tz5MIQmRIq0++DK7ITljN4NySQ9ZLZEM=)
                          7: R15U4TurpGZ6_74GJTZ7B1mnB5w.roa (hash: nCR8dGZ8Kanmd+TAXuyL33xBxmEOGcczAv2h+qPOvfM=)
                          8: UCp9_ApWUbgQGIa1NKLJ-cS_tv8.roa (hash: yi6xNjGkjqnryzu2NNxC+M1I7oPuwMvhO/Hni9IEjDY=)
                          9: a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa (hash: S+5zYJa35rHTKnwj7CXJQB2mrb0WWFh2WpXU/4m9ZOc=)
                          10: b7L24DGacCv1Jjj0E2xwOpKR_rI.roa (hash: dn3nM0XrClq6tP6low/fe+MmlfMR2imBrruQdtqUDrY=)
                          11: eJZw4lvkyTThK1hHF7ea4kiJbjI.roa (hash: Z63CbP8wrCiSbcvLHW5lkv40Jr5h6n5yJBfP7IOdvMQ=)
                          12: fiC8FoDEV1wgGCem1X1XF0O_lZg.roa (hash: /O+AtGpBwjj3rjKwzdQACIuoL2216zBEBnUVLPCtJQs=)
                          13: gHV84Ce0tQPq0MuD_bkU9QPAns4.roa (hash: re+X2TGGK92eU/L6LtTiYjKBQ/FAo99HrBg3gP7PqYI=)
                          14: gtsveEMSshs3GcdNL4F4hWCTTWo.roa (hash: RJctdCivuPc3UqTwjVyyJO6uirIWfQK/cVIp5Hcrq4M=)
                          15: i99u0goUMp8noCiOxLvsF0PjThg.roa (hash: BlAXZTEbYm5C8kWdW14+SQaoI4/b99p1HyX+X4SArGA=)
                          16: j9jFZwTJ0znYArYrP_wb7FovBv8.roa (hash: ry2e+m/h6zjqugwIc/oTaduBcZ+a/pH5c4SrYte7lzE=)
                          17: knv596giWxC-Wv303dib7Qt8Zhw.roa (hash: RYC30OCfNr/qMd5J5JMtEIe4zUUHIA5/DP4BCkCZcl8=)
                          18: pf1pBUnzxjHov513TFJHTqE4Iy0.roa (hash: Gqdsv31psN3b7M2TvRqD53MdlcZ7EHjfjPl3nHfwAmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Jul 2026 23:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:6d:29:cb:cf:06:79:43:8e:e6:cf:d3:21:94:9f:d9:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Jul 16 23:01:23 2026 GMT
            Not After : Jul 17 23:01:23 2026 GMT
        Subject: CN=1f95979c8aef330bc8fc873ceeb6ed53b1be6ba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d8:a7:ce:fc:47:7b:d0:90:fd:75:8e:50:ce:
                    fd:52:22:23:06:4f:55:d4:2b:7d:51:64:ec:db:12:
                    d8:da:9d:d0:32:18:df:70:67:28:cc:19:bb:88:51:
                    20:42:6c:79:d7:1b:2d:4f:a5:68:7b:cf:85:5d:20:
                    0d:a9:21:62:ea:14:28:17:2a:0d:1b:cb:c5:07:b0:
                    2f:32:6c:bc:c0:50:9a:fb:25:1d:59:3c:86:05:f6:
                    be:02:cc:9e:34:0d:24:a9:d2:27:99:d0:64:09:2e:
                    dc:a2:e6:3c:9c:64:f5:13:2b:1e:1d:f8:8f:9b:ae:
                    db:26:aa:07:27:46:b6:83:d0:0c:12:25:da:65:2e:
                    45:42:9c:98:e1:61:7d:63:ae:36:df:a7:52:5a:78:
                    92:5f:1e:f9:0c:a1:25:e4:00:d0:12:5d:1b:80:2f:
                    c0:c7:aa:e0:1d:de:ec:86:2f:19:d6:ef:24:cf:7d:
                    99:a3:60:50:f7:5d:f9:5a:de:8e:f8:28:18:ce:3d:
                    8f:fe:12:72:77:1d:d7:89:55:5d:5d:00:23:f4:78:
                    f6:c4:85:b4:8e:96:03:9f:0f:e7:9d:9a:d2:3e:36:
                    8e:ed:ff:40:bf:b6:ac:26:6f:e1:a6:84:c8:77:7a:
                    41:38:98:2b:46:8a:22:a9:0a:de:2f:e4:23:69:44:
                    96:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:95:97:9C:8A:EF:33:0B:C8:FC:87:3C:EE:B6:ED:53:B1:BE:6B:A8
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:48:8a:47:74:e5:0f:8e:7a:cc:58:5e:14:ca:ff:6e:c2:43:
         06:d2:fd:03:31:f4:b7:97:40:d4:4a:28:d9:7f:db:c6:8c:7b:
         3f:2c:ec:ae:39:3c:9a:36:42:91:38:fe:bd:f0:8c:8b:f9:dc:
         c4:77:ae:4a:7f:19:f8:58:2e:0b:ee:1a:7d:81:5a:88:de:42:
         75:14:7e:74:f8:3f:bb:73:fc:4e:e7:72:d5:ad:2b:1e:02:ef:
         80:f8:36:5b:6d:69:de:06:04:7d:ec:fe:7a:74:9c:6f:71:ca:
         af:fb:8a:ef:b4:0a:55:5b:c4:62:60:28:da:59:6c:67:16:52:
         b7:9f:55:d9:71:28:d1:80:8e:5e:7f:04:09:0d:e7:e7:d8:cd:
         79:8b:a6:9b:8d:06:ac:ec:fe:4e:0e:1f:d5:85:e4:fb:ad:5a:
         4e:be:cc:ed:b3:69:ad:01:ec:06:26:5e:a7:32:84:9b:c3:1d:
         68:56:fc:fc:c9:35:b6:7a:f3:1d:a5:7f:fa:10:a7:52:f5:e7:
         04:63:08:95:b9:45:30:bc:20:da:69:13:13:43:f0:35:77:cd:
         c5:fb:1d:a3:56:7f:bc:e0:1f:d3:19:09:b8:73:c3:60:41:24:
         97:cb:83:63:37:92:db:67:a5:59:3c:53:97:70:24:86:2c:f6:
         98:9a:7f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 03:03:49 2026 by rpki-client