Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
File:                     s_7bUAlSbwxrrUI_AM2gigkzt4s.mft (raw, json)
Hash identifier:          RNDl1ugpOZ1NjGlKIKCzKM1aUB28wef1020qsWpdM14=
Subject key identifier:   7C:B8:49:71:95:25:D7:23:EA:D0:16:1D:F1:F7:64:1A:C2:D8:FC:D7
Authority key identifier: B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
Certificate issuer:       /CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Certificate serial:       01A0039447D94784F29BAEF46F41CCE63A1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
Manifest number:          1A02
Signing time:             Sat 15 Aug 2026 04:00:44 +0000
Manifest this update:     Sat 15 Aug 2026 04:00:44 +0000
Manifest next update:     Sun 16 Aug 2026 04:00:44 +0000
Files and hashes:         1: BSBTdISOwUSk76V2qhorPXUYcls.roa (hash: gMCNavqIUpRgqrn5vcMqwPcSr1Q6xSaeOjz/QGd0jJc=)
                          2: s_7bUAlSbwxrrUI_AM2gigkzt4s.crl (hash: lLWVBO6JLGL1ZZohUTE8EaeDyjZRdUYwUoOAH2a5Ufk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:94:47:d9:47:84:f2:9b:ae:f4:6f:41:cc:e6:3a:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
        Validity
            Not Before: Aug 15 04:00:44 2026 GMT
            Not After : Aug 16 04:00:44 2026 GMT
        Subject: CN=7cb849719525d723ead0161df1f7641ac2d8fcd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4c:9d:df:c2:e6:55:03:6f:9a:91:af:cd:f5:
                    6e:6e:0f:56:02:42:6a:36:d9:24:c6:1d:ca:12:94:
                    33:91:be:5b:c3:81:31:2e:fa:a5:3a:35:54:6b:19:
                    d6:ae:49:a0:e0:32:e0:0b:13:4d:41:c1:30:48:5a:
                    9c:a4:26:b6:42:c5:8c:d7:bb:e5:82:fe:ad:56:84:
                    b2:bd:24:9c:47:77:72:41:11:e9:23:4b:ae:31:f0:
                    5f:b7:d9:91:49:d3:ee:09:67:80:29:16:d0:18:67:
                    b0:ef:bb:6f:79:7a:0d:a6:5f:22:71:44:3b:19:ca:
                    33:23:63:cd:10:31:7c:0f:1c:1f:87:a7:2a:71:6c:
                    1a:7d:74:f6:79:bf:e0:3a:7f:35:64:0b:3b:78:51:
                    5a:6e:1c:b7:0a:58:7c:e8:c7:b4:67:d9:5c:9b:c8:
                    b6:6e:20:96:e3:68:e3:2c:2e:57:57:d7:6b:e6:fa:
                    a6:49:07:cf:aa:7d:06:31:bd:49:3c:12:0d:d2:5b:
                    9a:24:dd:80:24:f9:51:4e:ff:21:58:55:c3:79:a3:
                    f4:76:dc:50:a8:55:bb:35:b6:4b:39:20:e6:5f:98:
                    a4:03:93:6e:22:1e:1b:fb:f3:c7:c7:6a:32:c0:0f:
                    7a:1e:5a:77:24:29:15:8e:8d:d4:75:2f:a2:c3:ab:
                    15:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B8:49:71:95:25:D7:23:EA:D0:16:1D:F1:F7:64:1A:C2:D8:FC:D7
            X509v3 Authority Key Identifier:
                keyid:B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:5a:de:0f:cb:48:3b:c9:d2:68:33:c2:1b:f0:97:51:ec:8c:
         6b:96:04:0d:c2:de:3b:63:11:d0:e5:8b:b0:b3:97:db:e3:1c:
         3a:ee:fa:d2:ef:ca:3c:7a:ee:63:e1:a1:6c:62:4c:20:9a:ea:
         6f:d7:44:67:75:1c:de:33:85:1b:75:14:41:8e:1e:e6:7b:f2:
         c8:95:f4:5d:cf:3f:78:74:c1:1e:a3:95:79:bf:19:63:d7:6d:
         0b:fb:b9:95:7c:0e:f0:9b:2c:88:ea:9b:7e:99:ee:df:8f:18:
         e0:e7:5c:e5:56:82:76:07:a0:00:62:cb:84:1f:bf:ea:17:47:
         cc:ce:fc:a5:99:65:57:ab:ae:33:d6:1d:d4:34:26:10:80:99:
         81:6c:e7:37:c1:5b:16:fa:25:ec:4e:a4:2f:16:83:19:ee:0a:
         c1:11:bb:a0:70:d2:3d:2c:4c:9b:35:55:03:25:92:a6:ce:08:
         85:cc:2d:5d:b3:a0:00:b5:26:31:92:bc:f1:be:c8:6b:99:8a:
         2c:e6:47:92:82:9a:2a:6b:c4:e4:3b:07:cc:21:6b:7c:1d:93:
         d3:ac:af:32:6f:8b:23:d6:04:f2:2d:4f:d7:f1:13:bd:ed:ab:
         8f:14:9b:b7:37:84:b8:f7:24:c9:35:23:34:cd:d4:4e:bd:d7:
         9c:25:48:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:15:54 2026 by rpki-client