Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft
File:                     7aJsQI_Ge3UnNMyZfzYw269vYG8.mft (raw, json)
Hash identifier:          pYKAgqKwQqeGj606xCJZKeZrvPRvBhItwBii2y36S3o=
Subject key identifier:   14:31:51:40:DD:10:8E:82:DC:7C:D8:A4:BD:FA:89:10:98:C2:F2:C8
Authority key identifier: ED:A2:6C:40:8F:C6:7B:75:27:34:CC:99:7F:36:30:DB:AF:6F:60:6F
Certificate issuer:       /CN=eda26c408fc67b752734cc997f3630dbaf6f606f
Certificate serial:       01A13E94A799917A6F2FD534B4907AC36E50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7aJsQI_Ge3UnNMyZfzYw269vYG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft
Manifest number:          0F1D
Signing time:             Thu 15 Oct 2026 08:01:31 +0000
Manifest this update:     Thu 15 Oct 2026 08:01:31 +0000
Manifest next update:     Fri 16 Oct 2026 08:01:31 +0000
Files and hashes:         1: 7aJsQI_Ge3UnNMyZfzYw269vYG8.crl (hash: iSG0cW2sGo5VAWLv4GwD0RkYg1uNajMQeACoVqqAzO8=)
                          2: FPqdZZMf-fAPrlSDgNZhOHhHZxU.roa (hash: 3JadQ2sVOsTDIpy9yP5IPOoHewm11RGCjoRS/5qYd6Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7aJsQI_Ge3UnNMyZfzYw269vYG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:94:a7:99:91:7a:6f:2f:d5:34:b4:90:7a:c3:6e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eda26c408fc67b752734cc997f3630dbaf6f606f
        Validity
            Not Before: Oct 15 08:01:31 2026 GMT
            Not After : Oct 16 08:01:31 2026 GMT
        Subject: CN=14315140dd108e82dc7cd8a4bdfa891098c2f2c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:74:35:1f:21:0b:63:f7:1f:e0:c6:55:e3:fe:
                    b3:f4:3c:2a:4b:96:a0:36:ca:f7:16:4a:6a:fe:54:
                    46:5b:f6:19:35:42:ee:30:27:73:f8:f6:5c:22:5a:
                    53:91:a7:8a:d1:9a:0f:dc:c3:91:8d:bb:20:2f:97:
                    be:47:0f:f9:1b:c0:8e:01:88:6b:f9:45:25:29:7f:
                    9c:fb:30:f3:e3:17:c9:1f:b1:b1:5d:41:e7:49:49:
                    95:27:a9:f9:d1:bf:f3:56:6e:9b:c5:18:ec:f5:6b:
                    95:de:b5:bf:69:56:3d:99:59:0e:d8:be:28:f4:a1:
                    b3:05:52:6f:4c:02:14:a7:b0:a3:a4:aa:1b:6e:49:
                    b9:b5:f5:fe:d6:a2:b3:a8:18:61:7b:5a:c1:61:5f:
                    0c:22:f4:b1:eb:b5:31:d3:51:85:f7:6d:6f:bc:ca:
                    53:d5:14:9d:1a:c8:23:a4:86:aa:d8:18:6a:06:5a:
                    ec:0e:cd:3d:fe:a6:d2:a7:85:36:a8:db:0e:d8:e5:
                    33:eb:e6:af:0e:83:da:cb:a9:1c:cf:6c:51:04:cc:
                    40:b4:79:33:04:d1:93:21:05:40:1b:7a:14:a0:66:
                    cf:df:e3:65:c6:d8:2a:22:16:43:31:80:c5:f2:7a:
                    02:e4:69:8c:90:f4:3b:74:85:c9:f6:f7:da:72:1b:
                    69:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:31:51:40:DD:10:8E:82:DC:7C:D8:A4:BD:FA:89:10:98:C2:F2:C8
            X509v3 Authority Key Identifier:
                keyid:ED:A2:6C:40:8F:C6:7B:75:27:34:CC:99:7F:36:30:DB:AF:6F:60:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7aJsQI_Ge3UnNMyZfzYw269vYG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:aa:5e:c0:a3:6c:97:5f:bb:da:f2:1b:f8:96:e3:ca:c4:8b:
         54:1e:70:3b:b7:9a:76:65:ca:42:71:2b:8f:72:40:c1:8a:68:
         0c:f4:18:ab:24:4b:4d:01:84:ed:c5:44:bf:ff:00:27:60:a6:
         98:c8:fe:4e:95:d9:42:80:b5:f1:29:47:99:0e:ae:e4:8a:4a:
         63:6c:18:7a:9a:a5:ea:3a:da:79:06:bf:ef:ea:17:d4:2e:55:
         66:82:4d:87:3b:9b:c3:47:c2:9b:de:5b:ab:0c:c0:87:40:9c:
         81:7d:31:42:1d:31:5c:50:50:08:23:60:ce:28:53:6d:dc:6f:
         f8:d2:d8:77:51:7d:cd:c8:db:b1:be:fe:d5:e1:84:28:f6:a1:
         f9:ba:bd:78:55:50:53:6d:e2:de:1b:4f:f6:c2:e8:d0:74:d1:
         e0:c8:0b:fc:ef:5f:f9:9c:47:39:d9:fc:3a:70:38:19:ff:ba:
         2d:be:bc:c5:14:9a:58:35:38:97:84:d8:bc:17:c2:c2:5e:da:
         3c:44:8c:58:31:a9:b0:61:7d:55:85:60:97:6b:bf:82:12:92:
         3c:f6:44:f5:f0:30:02:2a:d0:15:97:46:c5:8d:74:a5:a5:66:
         02:29:e1:29:37:1e:1e:57:84:e7:a5:f5:9a:8c:94:83:2b:c0:
         cf:02:aa:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:56:45 2026 by rpki-client