Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft
File:                     7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft (raw, json)
Hash identifier:          VgRMJxAKRADjDJLmFA9lqcNozF8miXh07PAijNUcUiw=
Subject key identifier:   2F:B0:7A:22:B5:5B:9C:6C:DB:9A:9E:B2:D5:DD:D4:11:65:12:D9:6A
Authority key identifier: EF:E1:53:41:D2:AF:C6:A8:57:A5:84:19:9F:C7:FB:07:C1:70:1F:C6
Certificate issuer:       /CN=efe15341d2afc6a857a584199fc7fb07c1701fc6
Certificate serial:       01A00138930872A62DD5C7C5F187A4972035
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft
Manifest number:          1147
Signing time:             Fri 14 Aug 2026 17:01:19 +0000
Manifest this update:     Fri 14 Aug 2026 17:01:19 +0000
Manifest next update:     Sat 15 Aug 2026 17:01:19 +0000
Files and hashes:         1: 7-FTQdKvxqhXpYQZn8f7B8FwH8Y.crl (hash: 0vybIeY+fgrS/Wsfx9aWVcNkzkqRqlsd8ivcD3dKiFA=)
                          2: yc7G-ROKb-E3Qa_pTySk_r80ExA.roa (hash: Oq1bVdBMV8pMHPuNlBGQjQUpA0Eb9NSaz7n09Cauln4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:38:93:08:72:a6:2d:d5:c7:c5:f1:87:a4:97:20:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efe15341d2afc6a857a584199fc7fb07c1701fc6
        Validity
            Not Before: Aug 14 17:01:19 2026 GMT
            Not After : Aug 15 17:01:19 2026 GMT
        Subject: CN=2fb07a22b55b9c6cdb9a9eb2d5ddd4116512d96a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c9:49:86:ee:a2:ee:7f:0c:73:bf:9d:67:62:
                    43:b1:98:0b:3e:be:b6:61:5c:fe:c3:6d:f4:3d:74:
                    25:b7:d4:dd:8b:b1:c3:67:78:57:62:2c:0f:8e:40:
                    6d:e1:90:1c:af:00:13:28:8c:e1:a2:0b:4c:83:14:
                    df:d1:06:6e:74:6f:4a:5b:a3:4c:f0:82:65:cd:da:
                    9f:56:de:50:c7:aa:60:09:78:3f:cf:ae:80:af:61:
                    4c:d4:74:37:1a:c8:26:c6:ca:d8:b8:f2:17:ef:b9:
                    d1:09:aa:36:1c:e7:0b:44:e9:16:0b:ee:79:d3:b1:
                    40:88:e5:c1:e0:6a:8d:46:16:3c:67:9b:11:34:a0:
                    d4:7c:19:b8:95:d1:ee:cd:ed:56:96:64:5a:9b:09:
                    8a:65:82:3e:a6:ad:fb:2b:c2:c0:a6:21:7a:1b:8f:
                    7a:17:51:39:f1:41:1d:26:44:e0:ff:2f:bd:65:e5:
                    ad:71:77:6a:9d:3a:8b:3e:88:05:4d:a4:a9:11:51:
                    38:6c:46:b5:fa:3f:86:80:a4:97:83:95:90:aa:9e:
                    f7:47:2d:1b:cf:dd:89:09:db:66:35:5b:d5:51:70:
                    b0:9c:4e:97:1c:b2:3c:93:3a:79:bc:9d:a8:4a:bb:
                    df:49:5f:e0:60:de:a6:27:ff:27:7f:10:e9:20:d1:
                    d8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B0:7A:22:B5:5B:9C:6C:DB:9A:9E:B2:D5:DD:D4:11:65:12:D9:6A
            X509v3 Authority Key Identifier:
                keyid:EF:E1:53:41:D2:AF:C6:A8:57:A5:84:19:9F:C7:FB:07:C1:70:1F:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:05:f3:21:0e:49:6d:f2:29:6d:bb:ca:78:f4:5f:ad:b0:2a:
         7a:3f:a3:aa:58:bf:9f:9f:91:45:96:08:22:c4:8f:36:b9:41:
         ea:de:9c:37:c0:3a:18:b4:c6:fc:0e:a9:5f:4a:d6:5a:a1:62:
         8e:6c:76:f4:dc:ea:8c:7e:af:7a:d5:34:62:4d:8a:03:eb:50:
         cd:2f:57:6f:6f:12:84:19:63:c0:18:e3:8a:e7:12:53:72:97:
         45:3c:ae:55:e3:22:96:14:c9:04:3d:5b:9f:d3:05:b1:e6:45:
         9e:33:a7:af:3f:16:83:db:4d:09:fa:4c:52:29:08:98:77:14:
         a9:b2:95:f5:36:8c:d2:33:60:f3:97:73:99:8f:cd:0f:c9:37:
         65:53:2c:9a:7c:8a:57:a5:f4:d0:2b:b5:2b:86:b9:1b:0a:23:
         00:e3:e6:bb:4f:c0:ea:da:4c:04:ff:a9:41:85:43:43:2c:3e:
         10:7e:4d:ba:54:39:13:e7:fc:e6:89:9b:3e:72:d3:ae:73:17:
         e5:30:ab:0f:6d:e8:a2:21:1c:b0:95:19:66:ba:29:b6:88:b5:
         d2:07:66:b5:29:92:74:fb:61:3d:46:5d:04:ab:35:59:e3:c9:
         64:9e:e4:a6:db:79:56:b3:24:c9:21:3c:7c:3a:dd:fd:b4:58:
         f1:33:55:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:46 2026 by rpki-client