Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft
File:                     7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft (raw, json)
Hash identifier:          0ESHIPIomKZFj2PvUoFYfQyMlGipbaZHwEAfF98SLnw=
Subject key identifier:   58:3B:CF:EF:07:52:66:50:DA:48:90:81:2D:34:35:47:27:CC:C3:7A
Authority key identifier: EC:97:B7:2D:5D:4F:75:0F:1B:13:8C:2A:90:1D:D6:51:09:21:BE:41
Certificate issuer:       /CN=ec97b72d5d4f750f1b138c2a901dd6510921be41
Certificate serial:       01A001386283D1C38BE5D62D81A61C8D5155
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft
Manifest number:          1A00
Signing time:             Fri 14 Aug 2026 17:01:07 +0000
Manifest this update:     Fri 14 Aug 2026 17:01:07 +0000
Manifest next update:     Sat 15 Aug 2026 17:01:07 +0000
Files and hashes:         1: 7Je3LV1PdQ8bE4wqkB3WUQkhvkE.crl (hash: y1Hw9Rj/F30SdblAU1okc3PK6DKnlaCzoakGQ8VUETo=)
                          2: BOGoFgwnR582QadwWvkqHAe6qVI.roa (hash: oircMKRintaHw6lUQ07pz+tVKLYa1YRVcLBCoNJ37p0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:38:62:83:d1:c3:8b:e5:d6:2d:81:a6:1c:8d:51:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec97b72d5d4f750f1b138c2a901dd6510921be41
        Validity
            Not Before: Aug 14 17:01:07 2026 GMT
            Not After : Aug 15 17:01:07 2026 GMT
        Subject: CN=583bcfef07526650da4890812d34354727ccc37a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:51:06:c0:bb:c4:ef:7e:00:51:af:24:c0:a1:
                    ab:87:0f:18:8d:8c:34:e2:2f:e9:83:59:ca:00:cd:
                    08:bd:18:4d:18:2e:5d:0c:52:46:10:20:dc:56:0d:
                    ce:cc:5a:19:76:73:5d:e3:0a:1a:53:30:8e:b6:19:
                    f2:9a:27:02:30:d3:33:f6:69:7e:90:3a:28:3e:5c:
                    7f:5f:65:93:b2:df:74:be:aa:62:11:2c:83:8a:53:
                    0e:af:0f:2f:d4:10:5e:80:f5:bd:ff:ff:3a:83:eb:
                    c3:30:da:98:6b:89:f6:35:56:98:fd:91:c2:08:cf:
                    7b:54:f7:74:0a:60:4d:86:0c:26:4b:40:d7:2e:3d:
                    ef:f9:b7:a6:b8:e0:af:69:60:84:6c:ff:9a:fc:90:
                    62:5e:d7:f6:d4:94:9b:0b:fb:ac:77:df:44:c8:19:
                    6a:42:23:56:de:dd:2d:24:c2:ea:d5:3c:a4:07:69:
                    71:7a:b5:23:aa:5b:da:eb:d2:7c:35:fb:be:88:69:
                    80:0d:54:54:d6:80:5c:20:4c:54:7c:ff:fa:56:cb:
                    e6:14:fb:42:3d:8b:85:d8:a3:a7:ec:98:a6:e6:2f:
                    8e:d2:43:fe:01:25:f9:f9:19:67:dc:31:6d:61:07:
                    17:59:04:f8:ee:4c:bb:d4:fe:25:d9:c3:b5:ab:c7:
                    47:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3B:CF:EF:07:52:66:50:DA:48:90:81:2D:34:35:47:27:CC:C3:7A
            X509v3 Authority Key Identifier:
                keyid:EC:97:B7:2D:5D:4F:75:0F:1B:13:8C:2A:90:1D:D6:51:09:21:BE:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:b8:a1:77:3a:37:6a:38:ab:6f:77:12:61:c7:d7:a5:02:1e:
         9f:4d:86:38:28:9e:2d:5d:6b:a1:11:bd:ec:d5:8f:55:c3:c4:
         74:63:57:ae:92:91:b6:ee:cf:bc:83:8d:2c:c3:cd:df:fc:fa:
         77:26:34:14:e4:27:53:26:fc:3a:8e:7d:0c:53:7a:16:0d:a0:
         d7:dc:8a:56:ac:f6:44:3d:87:54:3e:e5:ee:90:d0:b2:b9:91:
         f5:5b:49:bd:43:87:72:20:9c:22:f0:26:04:fe:bc:aa:0c:58:
         67:dd:8e:2c:9c:c0:38:16:3f:81:b7:6f:44:fc:44:52:ab:00:
         d3:9a:c1:04:47:bd:22:47:e9:5d:c1:1d:c7:ec:2f:d7:cb:b9:
         b9:95:5e:33:fa:b0:6b:81:16:a7:51:29:22:b5:a9:2f:f0:39:
         5d:93:f1:2f:77:7b:16:b1:6c:3f:f7:f9:c9:f6:2d:0e:67:d0:
         43:39:e6:a9:8a:b7:b7:be:d0:bf:9a:57:02:07:bd:a4:23:69:
         41:c8:d9:b8:d6:69:31:2e:bb:b2:1d:48:de:36:43:fe:1b:ee:
         ed:81:6c:3e:1e:04:54:15:2b:83:29:fc:7f:49:a6:eb:54:bd:
         f2:40:75:2c:26:4c:a4:b2:2c:8f:f2:24:d0:ae:60:72:38:5c:
         d2:6e:8c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:09 2026 by rpki-client