Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
File:                     7VKTzUpieoRq7WDKf7XVqQGarlE.mft (raw, json)
Hash identifier:          X0YAEUo3S8yp1zKMUchNjVFT4BDEhtSegb354jjx8ks=
Subject key identifier:   1F:DD:BA:78:90:28:15:B9:0D:D9:89:12:D2:33:B9:54:E6:9B:61:73
Authority key identifier: ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51
Certificate issuer:       /CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
Certificate serial:       01A13E944C08CC52BFD67ED6AACC9A0C0C2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
Manifest number:          1AA7
Signing time:             Thu 15 Oct 2026 08:01:08 +0000
Manifest this update:     Thu 15 Oct 2026 08:01:08 +0000
Manifest next update:     Fri 16 Oct 2026 08:01:08 +0000
Files and hashes:         1: 5M_dzDXzTB3Y0brCjbUvwSZRed8.roa (hash: IY7K+wfx2bW1m/Ix+hlJ62XrT+AVkyx4H7HyP9JrVMM=)
                          2: 7VKTzUpieoRq7WDKf7XVqQGarlE.crl (hash: XsM2S5wSMHCHPKQ9RnrK82BTtvVRb9LIaBb8IJPzi18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:94:4c:08:cc:52:bf:d6:7e:d6:aa:cc:9a:0c:0c:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
        Validity
            Not Before: Oct 15 08:01:08 2026 GMT
            Not After : Oct 16 08:01:08 2026 GMT
        Subject: CN=1fddba78902815b90dd98912d233b954e69b6173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:88:5a:d7:ff:22:64:43:aa:14:ab:e1:39:54:
                    96:d1:03:ed:2b:60:9f:e8:23:a6:43:b2:5b:1e:6e:
                    ec:61:ec:9a:50:59:b7:d4:05:ed:f1:8b:4c:2c:c8:
                    e0:35:42:82:db:e3:d5:5a:af:32:ea:2f:9d:4e:ed:
                    8c:4a:32:f4:ec:35:27:a6:d9:1c:b4:53:e4:fb:f5:
                    3d:0f:33:f3:44:7a:e1:65:9b:c3:b1:c8:d2:b5:51:
                    8f:0a:2e:1a:a9:a0:f0:d2:4b:cf:f2:89:26:a3:5f:
                    7a:e9:96:31:50:a2:e9:e8:2e:1b:45:8f:d1:e4:36:
                    c6:27:d3:77:f8:9c:5e:68:8e:c9:fe:08:11:a2:b1:
                    01:ee:93:ff:ba:f6:eb:1b:b3:82:a4:fb:e8:ad:93:
                    e3:6a:04:d9:ad:ac:3c:84:05:2d:d5:02:ad:92:0d:
                    9d:b3:8a:03:98:23:16:56:d5:d7:08:41:a9:69:c6:
                    65:ff:01:fa:1e:ab:6a:25:1e:17:87:b3:c0:fd:5e:
                    3a:55:6d:82:e6:10:91:6a:0a:96:93:d1:9b:6f:4b:
                    fa:0a:1f:a7:b1:a8:51:e8:6c:1b:47:fc:80:bf:db:
                    ab:37:95:17:0e:10:cc:71:9e:a4:e0:5e:e7:e7:d7:
                    7b:68:a1:94:74:92:f3:61:54:10:91:b3:85:a1:68:
                    b7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:DD:BA:78:90:28:15:B9:0D:D9:89:12:D2:33:B9:54:E6:9B:61:73
            X509v3 Authority Key Identifier:
                keyid:ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:eb:79:bb:3f:9e:f4:4a:5c:a3:0b:e3:ac:cb:34:62:08:d3:
         93:c3:2d:74:ed:3b:7f:60:ca:79:9d:ec:54:bd:9c:cb:da:9e:
         99:21:72:03:d6:23:9a:f5:d2:7c:7e:a4:00:c3:26:d3:42:fc:
         13:3f:dc:cd:c3:b2:be:44:62:49:65:f8:de:62:1d:bd:14:09:
         ae:35:c7:72:59:38:03:17:e6:4e:94:eb:29:93:17:49:da:77:
         65:cc:7f:b0:57:ef:0a:e0:58:c5:84:b0:d0:04:99:27:22:eb:
         dc:d4:37:8c:b8:9c:5e:45:cf:d3:8f:f6:d3:55:a7:e9:2e:9e:
         4d:47:17:f1:af:e5:28:81:a8:10:f5:4b:e1:e1:41:39:c2:68:
         c0:8a:fe:ae:a9:d3:6f:44:7f:e7:75:d1:73:e5:97:f7:ab:a0:
         df:3a:5c:84:e4:d1:e4:77:c3:d6:b0:3f:ce:4f:f1:d7:b9:c5:
         ac:1f:fb:8a:f2:b4:78:9a:5a:21:ed:a8:1d:97:dd:3b:4d:4e:
         d5:b0:ea:79:78:83:1b:32:8e:72:be:d4:10:78:a8:f1:cb:6b:
         ba:86:a0:27:ba:87:c3:44:71:61:0d:16:26:ed:2b:a4:a4:9d:
         24:e6:ee:51:c6:cb:e1:2d:85:bd:82:fd:e1:f5:d3:d8:14:5f:
         0f:a7:cc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:36:21 2026 by rpki-client