Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
File:                     7eKhItz_wiL6mYS_Frb58T94paU.mft (raw, json)
Hash identifier:          xq5Ll2wyw5o0fqPRttaLq6I0PjjKhchndPA4meCxxLg=
Subject key identifier:   35:D6:47:9C:0C:3F:9F:9D:B5:7D:44:42:A7:99:03:D5:A7:4E:3C:9D
Authority key identifier: ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5
Certificate issuer:       /CN=ede2a122dcffc222fa9984bf16b6f9f13f78a5a5
Certificate serial:       01A00093BFD86C5531D9DEF583DE41F746B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
Manifest number:          0EDF
Signing time:             Fri 14 Aug 2026 14:01:17 +0000
Manifest this update:     Fri 14 Aug 2026 14:01:17 +0000
Manifest next update:     Sat 15 Aug 2026 14:01:17 +0000
Files and hashes:         1: 7eKhItz_wiL6mYS_Frb58T94paU.crl (hash: WPMs+ozo4JeF04bMV48q6XfivtLtfHqCC9W+if8Z2Hc=)
                          2: IqhV71F7TO-uufaDi-3V7cOA8v4.roa (hash: ujk4NKl8mbgWsjNbR+1EId5G7vMy3PlJJL6cjMfDFaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:93:bf:d8:6c:55:31:d9:de:f5:83:de:41:f7:46:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede2a122dcffc222fa9984bf16b6f9f13f78a5a5
        Validity
            Not Before: Aug 14 14:01:17 2026 GMT
            Not After : Aug 15 14:01:17 2026 GMT
        Subject: CN=35d6479c0c3f9f9db57d4442a79903d5a74e3c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:39:9f:c2:00:2c:8e:84:d9:4d:1f:7e:7f:d5:
                    bf:47:28:3a:b2:da:30:bc:c6:30:93:e4:79:05:16:
                    4b:bc:44:d0:dc:74:a1:31:af:77:6d:c4:0b:6e:ab:
                    41:96:2d:d0:62:19:10:23:e4:65:43:2f:f1:44:1e:
                    5e:61:d9:20:05:65:44:5e:04:24:2b:ea:05:ec:65:
                    2f:4c:d7:b8:cb:bd:fe:89:56:99:c9:5f:e9:42:cf:
                    0d:bf:ba:59:f2:d7:12:82:42:5f:ae:a6:43:7f:fd:
                    7d:92:29:cb:b4:08:de:a4:27:33:dc:c1:4d:e3:fc:
                    82:f9:b8:e8:c4:4a:1f:31:14:f9:8f:fc:64:81:95:
                    8c:7b:6a:d4:65:89:cc:35:5a:5d:66:df:4c:b5:d8:
                    84:f2:9f:30:da:2a:bd:cb:c2:b1:e6:74:53:94:ca:
                    8a:9a:df:73:7a:cf:c2:32:bd:ee:d7:97:90:16:ca:
                    9f:77:7c:f9:37:86:9f:dc:50:eb:7f:a4:97:ba:79:
                    f1:93:ee:a7:49:b1:52:15:12:80:6e:d6:84:3c:5f:
                    4d:d7:de:5a:2e:ee:aa:09:4b:63:50:e7:5c:00:fc:
                    b4:7b:58:d8:e1:d5:5a:22:f9:85:50:0d:6d:b7:1e:
                    03:a9:63:19:db:67:eb:41:11:c2:67:13:c3:13:86:
                    d9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D6:47:9C:0C:3F:9F:9D:B5:7D:44:42:A7:99:03:D5:A7:4E:3C:9D
            X509v3 Authority Key Identifier:
                keyid:ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:d8:23:d6:3f:dd:5c:92:33:bf:5b:88:13:a6:67:2a:cf:17:
         5d:fd:83:c1:59:24:14:bf:c4:67:af:ab:16:0e:f3:e3:bf:18:
         79:d8:0c:00:6e:49:c9:1e:f3:c8:06:c0:fc:95:47:fc:7b:2a:
         47:ee:09:93:2a:38:42:76:24:e3:dd:cb:98:25:c4:39:70:2b:
         29:81:62:5a:76:f0:31:cf:bb:a1:c2:bc:8e:7a:1d:7f:0e:cc:
         21:9a:48:a2:69:9b:e2:70:a3:63:55:80:f1:3b:7e:70:0b:36:
         3b:2a:47:61:30:85:5e:d8:79:a0:fc:27:09:87:31:e1:67:59:
         fc:41:ab:40:d7:c1:82:fc:41:6a:16:de:70:ae:38:4a:43:31:
         9a:86:5b:0a:49:90:cf:05:87:87:05:47:7f:52:16:56:47:ae:
         d2:24:9e:a7:60:6a:cd:ba:9a:06:07:7e:05:f8:29:3f:8c:39:
         0d:a4:81:fe:56:3f:09:6b:16:40:00:2c:9b:03:6a:90:49:b0:
         14:54:56:09:ae:02:9f:ae:b2:c5:94:05:5e:50:98:4f:15:86:
         a3:43:10:38:bb:5b:60:7c:bc:b9:04:84:8e:b0:e4:69:0e:5c:
         f2:2f:b4:e5:a1:07:64:1b:b4:e2:1f:14:03:83:33:3e:0c:16:
         e8:eb:4e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:38 2026 by rpki-client