Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
File:                     9q7W1c5BV5fBKF9-9v0EPGRm594.mft (raw, json)
Hash identifier:          1BS6/Yc5ZyRU2oVDpDQOOG/c80Ac/pvQTUWxdvR6+b4=
Subject key identifier:   3A:80:AA:C5:84:52:AE:12:33:4C:6A:15:21:4A:B6:15:E0:12:05:D5
Authority key identifier: F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE
Certificate issuer:       /CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de
Certificate serial:       01A0016F8491E78B35F9A04DCB2F428B8E4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
Manifest number:          0EF5
Signing time:             Fri 14 Aug 2026 18:01:20 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:20 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:20 +0000
Files and hashes:         1: 9q7W1c5BV5fBKF9-9v0EPGRm594.crl (hash: rjTdHP5yDDwEiTqzq4SLGfyIU/sDnSR6AoJni8Vq/mY=)
                          2: h1BmnlXgB6ac2TWYQTKQ2ChwBMo.roa (hash: yzd9rByRC5Jsp/Gy055ZEn4rSEyip4EOwsA55gh4BjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:84:91:e7:8b:35:f9:a0:4d:cb:2f:42:8b:8e:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de
        Validity
            Not Before: Aug 14 18:01:20 2026 GMT
            Not After : Aug 15 18:01:20 2026 GMT
        Subject: CN=3a80aac58452ae12334c6a15214ab615e01205d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4e:eb:92:e1:b4:7d:ca:0e:68:26:21:5e:df:
                    90:ab:07:cd:59:5b:ca:89:b6:0d:a9:a3:31:bb:3b:
                    60:88:71:31:58:96:35:d3:ca:9b:6e:ba:3c:6c:ca:
                    51:d7:84:ca:c0:b9:29:20:84:7d:fe:8b:11:3e:27:
                    61:3c:82:20:a4:67:a2:bf:5c:12:44:3e:97:51:c5:
                    37:00:3a:7b:fc:08:3d:85:bb:e4:c9:39:60:9f:92:
                    ee:16:ef:10:4b:26:2b:99:b7:b2:39:e4:c4:4b:b8:
                    4b:22:df:25:f5:47:48:0f:b2:a1:7a:cf:ab:4d:fc:
                    bb:4a:62:0d:36:f0:31:bc:70:5e:6e:30:c8:95:45:
                    14:9c:73:bf:1e:4a:42:90:80:74:a1:d9:f8:d5:05:
                    77:53:e4:45:61:92:5c:45:3f:fd:2e:17:b6:bc:1d:
                    7f:74:54:b9:1f:04:fd:05:85:1b:80:00:f9:3a:2e:
                    9a:68:52:15:5b:45:c6:21:ef:08:02:d9:01:70:cc:
                    1b:78:31:df:d5:bc:ed:21:de:61:7f:56:7a:fe:7d:
                    3e:bf:bd:63:e5:40:1e:43:e8:bd:f1:3b:7c:53:d9:
                    fe:85:5b:ab:3f:03:44:91:4d:eb:7a:76:46:e1:a6:
                    15:d6:55:cb:08:a8:b7:0c:ef:8a:4f:b8:7e:0b:0c:
                    73:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:80:AA:C5:84:52:AE:12:33:4C:6A:15:21:4A:B6:15:E0:12:05:D5
            X509v3 Authority Key Identifier:
                keyid:F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:fb:6e:2c:91:40:69:3a:73:55:a4:69:57:f7:f6:86:8a:a4:
         a9:22:fe:cb:94:18:59:4a:02:00:32:5e:d7:ef:65:65:ce:62:
         6c:40:bb:55:0f:25:a4:88:8e:72:e0:c7:d9:44:33:f9:7b:96:
         1d:89:c5:31:98:ff:40:f7:3b:a5:b9:50:8d:d6:58:1f:b8:b1:
         dd:03:56:a4:5c:13:c9:f0:e4:dc:d6:7e:5a:c6:7d:33:36:e0:
         3b:8c:90:db:f9:bb:b8:8e:7c:d6:91:0c:f9:26:50:5d:e4:72:
         d8:ca:a6:e7:e5:17:da:f1:04:ea:c9:53:da:8b:6f:81:34:9f:
         88:90:d1:bd:43:f5:ad:38:79:44:b6:ce:73:2d:98:4a:4b:86:
         11:28:a4:90:dc:a9:f2:d4:02:cb:84:90:93:f5:1a:58:5f:ae:
         dc:a6:3b:28:1a:34:06:f9:ad:e0:56:c9:2f:bf:01:22:73:b9:
         36:83:a4:ca:d7:9b:6e:e9:e8:06:d3:73:db:62:85:54:1b:d3:
         20:ac:23:c4:b0:02:f5:bf:04:56:47:8e:93:98:4b:51:41:ba:
         c9:aa:eb:b4:4f:1e:dc:1e:d6:6d:fb:4d:6b:3c:f1:11:8c:7c:
         24:97:92:5e:3c:83:9a:ba:da:7c:7a:45:e0:8e:8f:e9:66:86:
         d3:61:37:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:55 2026 by rpki-client