Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
File:                     7VKTzUpieoRq7WDKf7XVqQGarlE.mft (raw, json)
Hash identifier:          CoTKdh38G59Jqntk59iyQo8uQRLji4IodW+TC21P8G8=
Subject key identifier:   93:91:AE:A3:F6:24:B0:51:44:48:21:72:BD:FB:E9:33:BF:1F:FA:7B
Authority key identifier: ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51
Certificate issuer:       /CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
Certificate serial:       01A003CB2E61E21F42C03FAE9A96335BF23B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
Manifest number:          1A04
Signing time:             Sat 15 Aug 2026 05:00:42 +0000
Manifest this update:     Sat 15 Aug 2026 05:00:42 +0000
Manifest next update:     Sun 16 Aug 2026 05:00:42 +0000
Files and hashes:         1: 5M_dzDXzTB3Y0brCjbUvwSZRed8.roa (hash: IY7K+wfx2bW1m/Ix+hlJ62XrT+AVkyx4H7HyP9JrVMM=)
                          2: 7VKTzUpieoRq7WDKf7XVqQGarlE.crl (hash: +h4lr9pGAjjRJvRFoP2pbdtzvpd+HVL9uoipNhNKiAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:cb:2e:61:e2:1f:42:c0:3f:ae:9a:96:33:5b:f2:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
        Validity
            Not Before: Aug 15 05:00:42 2026 GMT
            Not After : Aug 16 05:00:42 2026 GMT
        Subject: CN=9391aea3f624b05144482172bdfbe933bf1ffa7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1f:93:a7:09:97:48:dc:de:3d:f8:6f:70:7e:
                    7b:c2:b7:26:74:c2:8a:46:fb:15:64:5e:67:60:bc:
                    47:f2:52:bd:70:15:fa:05:01:1e:f9:c5:ae:72:e1:
                    3d:64:e2:03:ab:ab:ff:a8:22:8d:da:35:eb:4e:5a:
                    33:29:38:df:2f:80:07:c1:9f:07:0c:f9:3f:97:8f:
                    be:2a:5c:74:0f:cf:91:40:df:35:1f:f6:9d:be:7c:
                    de:78:db:a5:a4:f6:59:a2:c3:6f:95:d1:66:80:f8:
                    f5:80:b0:44:22:18:ff:70:f7:35:bc:2f:8d:45:c6:
                    8f:80:28:2a:1a:d1:23:36:fd:c1:ce:a1:b5:cc:2f:
                    e5:27:2a:40:8c:fa:67:c0:3e:c8:76:ab:88:a0:4d:
                    0d:13:ad:36:90:18:b2:0f:03:db:50:c6:a7:97:f4:
                    4b:db:60:69:bb:0d:f4:ad:f6:6a:a4:07:b2:09:27:
                    3f:17:0a:4f:83:9f:ca:a0:85:d9:e6:2f:7d:5d:db:
                    b0:25:d1:c1:9d:f0:4a:79:02:ea:0e:33:1b:2d:37:
                    bc:2a:4c:85:ab:b1:72:a6:ee:c6:b0:da:6a:18:64:
                    a1:a5:6d:30:ed:5f:3e:31:87:9d:78:1b:7b:39:8b:
                    59:de:23:d9:e9:a1:0e:f7:d6:02:ed:8a:66:ab:bf:
                    90:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:91:AE:A3:F6:24:B0:51:44:48:21:72:BD:FB:E9:33:BF:1F:FA:7B
            X509v3 Authority Key Identifier:
                keyid:ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:7d:a2:5d:74:2e:43:38:e4:40:65:e1:7a:ca:4f:c9:81:c1:
         66:97:ec:ef:e6:66:62:f4:a7:5f:a0:2b:66:19:30:c9:5c:7e:
         52:3f:c0:33:c4:7d:aa:af:58:c7:70:55:dd:0e:78:ff:a6:d5:
         c4:b2:a0:ca:5f:cf:15:0b:50:48:5c:07:87:72:84:88:cb:2f:
         44:01:2e:37:49:5b:15:36:3d:7f:39:9b:64:75:4f:86:70:ea:
         dd:6d:fe:e8:40:6a:11:0c:46:15:fa:14:e0:32:09:db:9a:c3:
         bc:d4:c2:53:c9:2f:b3:55:49:eb:48:c3:90:a5:fc:d6:b6:88:
         82:21:d3:70:1f:5d:fa:b3:29:23:61:52:f5:91:65:d9:31:8f:
         d1:6d:25:45:d6:94:79:3a:15:65:53:05:46:9d:e8:55:5d:d5:
         ee:4e:66:77:c3:cc:94:cc:c3:5f:7c:78:85:f1:bb:59:88:38:
         86:60:10:25:16:a9:c8:63:38:2f:e4:e1:f0:82:4d:e9:0b:92:
         f6:e5:91:e4:4d:1e:bf:ea:ed:3b:b4:59:03:28:b8:83:4d:5f:
         e9:2e:03:e8:94:64:f9:3c:a6:b8:07:86:3b:c2:e5:6b:81:5a:
         d0:b8:18:54:9b:e1:8b:97:98:45:e8:17:6b:b4:de:76:4f:88:
         51:7a:c0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:44:30 2026 by rpki-client