Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
File:                     7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft (raw, json)
Hash identifier:          FTg6SbP/B292tXL1QX6h5Gw2OoxEFauykt3CDlABupE=
Subject key identifier:   45:C7:07:F7:4A:AD:EC:8D:6C:9F:19:19:E6:DB:52:55:ED:F8:09:B0
Authority key identifier: ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11
Certificate issuer:       /CN=ed89298644ed486ded509d946a6d6d839589ce11
Certificate serial:       01A000CA388381FE9623A6BE1C7460018851
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
Manifest number:          0984
Signing time:             Fri 14 Aug 2026 15:00:47 +0000
Manifest this update:     Fri 14 Aug 2026 15:00:47 +0000
Manifest next update:     Sat 15 Aug 2026 15:00:47 +0000
Files and hashes:         1: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl (hash: 74PTMzpenYHc1YctepgXtdFBvILeiKvMfrl5idaFenc=)
                          2: ci8f7Y86uB9atamo1D3e8sszzV0.roa (hash: JE0+am3liaO3am6zHqUi0SmfiCv9crbc5X4aX8Cwg8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:38:83:81:fe:96:23:a6:be:1c:74:60:01:88:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed89298644ed486ded509d946a6d6d839589ce11
        Validity
            Not Before: Aug 14 15:00:47 2026 GMT
            Not After : Aug 15 15:00:47 2026 GMT
        Subject: CN=45c707f74aadec8d6c9f1919e6db5255edf809b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:16:45:c4:e4:66:3e:c7:d5:57:cb:fb:c6:69:
                    d0:82:f1:11:ea:39:6c:0e:cd:8f:27:bd:ab:90:16:
                    26:89:d2:ab:de:8c:cb:3a:f8:d6:3e:36:a9:54:e1:
                    8f:62:77:c6:d4:4b:fb:a1:50:21:b9:53:bf:04:99:
                    55:f5:b6:ac:ef:7a:cf:1a:7d:47:a5:8b:5a:51:15:
                    2c:e4:e9:13:61:61:bd:30:50:9b:c4:58:00:b4:01:
                    3b:50:e0:5b:56:e9:fc:83:66:9f:bc:af:da:17:fa:
                    01:ae:76:dc:e4:1b:1e:99:a0:03:01:4d:99:51:6e:
                    f2:a9:c4:80:4d:4a:0f:59:e5:55:dc:d8:81:78:24:
                    ee:c4:96:e0:09:48:fa:54:7f:a2:76:25:20:ca:99:
                    92:9e:6e:76:79:29:f7:be:3a:18:ce:12:3e:e9:5d:
                    12:52:90:db:9d:9a:67:a6:05:b1:0f:4f:8d:2c:66:
                    94:94:61:91:89:1d:e6:67:0a:bb:d1:8f:b1:d5:af:
                    e1:f6:e0:ff:41:07:8b:25:9a:be:5b:01:ff:2c:c9:
                    1d:f4:c2:2a:05:29:62:38:32:cc:86:a8:3f:e9:ef:
                    80:3d:48:69:ee:35:c2:bc:71:0f:2c:67:2b:e4:1e:
                    c0:0d:29:02:09:97:f6:95:3d:97:10:60:53:84:dd:
                    cc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C7:07:F7:4A:AD:EC:8D:6C:9F:19:19:E6:DB:52:55:ED:F8:09:B0
            X509v3 Authority Key Identifier:
                keyid:ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:85:ef:7c:1b:ae:f2:2e:30:f6:43:fa:d6:78:fb:3b:6b:50:
         fd:fb:ef:61:2a:d0:bf:19:d3:92:cd:f3:f8:e9:26:27:80:8e:
         81:d6:a3:6a:fa:f6:6a:f7:a7:4b:13:36:f8:11:5f:c3:c4:d4:
         2d:6f:ee:4a:aa:4a:87:d6:02:b7:aa:97:0b:c3:a6:35:30:e2:
         79:70:ae:ce:17:03:35:2d:76:ac:4f:31:f0:2c:69:4e:f4:10:
         6d:a8:fb:82:48:e5:90:d1:d4:ce:c5:1c:55:e3:64:2c:4b:8a:
         be:69:4e:bf:2b:c9:49:49:57:30:28:c0:dd:16:36:dd:7e:a4:
         1c:8d:ae:37:c7:1b:f5:26:98:39:93:b4:7a:18:4e:05:0d:ad:
         00:3f:f2:7a:4e:72:ff:42:cb:31:c2:10:28:72:93:e2:35:73:
         1a:b9:20:9d:e8:6f:f5:4b:6f:be:cf:9c:71:45:e6:f4:f2:b9:
         19:eb:1e:7d:72:97:d9:55:98:c9:89:1b:d9:30:30:1d:47:7f:
         03:0f:cb:a2:d8:ec:08:96:6e:1f:a8:c4:2e:7a:ea:9f:98:75:
         04:1c:b1:17:24:78:a6:4b:51:a4:2a:ae:ff:93:7e:ee:38:ba:
         86:72:c7:c4:69:ab:3f:d9:c9:f4:ac:2f:aa:62:0b:92:4b:41:
         d9:2b:39:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:50 2026 by rpki-client