Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft
File:                     7094lHNBzlWIi36_NpAUOwy_89Y.mft (raw, json)
Hash identifier:          iZn3yJ4Y6sz0VxwwEEWe2XRO5CGEmt14Rm/7WEGVtAM=
Subject key identifier:   15:4A:95:D2:2B:07:4E:6F:B7:0F:36:61:6F:A5:DB:1D:BB:5F:79:76
Authority key identifier: EF:4F:78:94:73:41:CE:55:88:8B:7E:BF:36:90:14:3B:0C:BF:F3:D6
Certificate issuer:       /CN=ef4f78947341ce55888b7ebf3690143b0cbff3d6
Certificate serial:       01A00326E72FD7B62283B05BA2BA18B1D1C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft
Manifest number:          1A14
Signing time:             Sat 15 Aug 2026 02:01:16 +0000
Manifest this update:     Sat 15 Aug 2026 02:01:16 +0000
Manifest next update:     Sun 16 Aug 2026 02:01:16 +0000
Files and hashes:         1: 2oq5AJ8ZDvTFcN8oB9ZGGwsdj40.roa (hash: Wiz2ighDEoFn4OhV9qneE+0XWQZVHPj+hAbIfIbUN0g=)
                          2: 4bCgDxdDaKJgzA4h-Rx55rf85c8.roa (hash: pNURX3p9L1wk4RiWa90pndbKlQ0u4vCpDE0muKi8F30=)
                          3: 7094lHNBzlWIi36_NpAUOwy_89Y.crl (hash: wLs553vHcwdgFfsj6/1iogOz2fY0N4hrDzFgf4A9H4g=)
                          4: L1-dY5IfJdZ5zkeF6wnlRVfcFg8.roa (hash: dFcPnovhPqX+I0cA7rgPPiD8o0Ghfz0dhmsmMJvSAmc=)
                          5: ymwq65dFLSRW1oFgWNSexktPNrw.roa (hash: rVpzH0+E2/XQlxkiDJfpz/vLZgr0hKXz0oMYUu0ZIig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:26:e7:2f:d7:b6:22:83:b0:5b:a2:ba:18:b1:d1:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef4f78947341ce55888b7ebf3690143b0cbff3d6
        Validity
            Not Before: Aug 15 02:01:16 2026 GMT
            Not After : Aug 16 02:01:16 2026 GMT
        Subject: CN=154a95d22b074e6fb70f36616fa5db1dbb5f7976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1b:ae:f0:36:26:1c:35:ff:03:c9:8f:5a:ee:
                    d6:a9:1f:f5:9f:f2:d4:24:ea:0d:6e:f7:27:7a:2e:
                    df:14:f7:a5:e6:4b:4a:b4:55:b5:89:05:39:d6:3e:
                    97:7f:a6:f2:2e:d9:dd:47:4e:d3:ea:54:cc:1a:95:
                    9d:92:ac:9a:dd:1e:ba:c3:d2:49:c2:5a:3c:dc:9c:
                    f4:3c:c2:ed:99:94:e3:f1:c2:83:13:31:d0:92:85:
                    d5:67:7a:65:b8:6e:3f:0f:be:cd:a1:ea:3c:69:a0:
                    15:96:e6:e1:46:48:93:64:ce:b9:52:2e:07:76:1d:
                    75:1b:b9:26:7d:d5:b5:65:05:08:85:85:ac:43:d8:
                    df:cc:1f:00:f8:66:08:92:a3:0b:5b:9e:d6:14:66:
                    e3:ea:c2:13:d8:46:41:61:ff:84:f0:cf:47:ac:48:
                    52:7f:c5:a2:fa:9e:96:38:23:05:9a:7f:1d:04:71:
                    94:92:89:5c:0f:90:b7:cf:46:10:01:3c:7c:27:54:
                    16:18:61:9d:93:65:04:3f:96:13:34:e2:60:49:fc:
                    ed:b9:ee:75:76:e2:3d:44:c0:97:15:0d:4f:48:42:
                    71:56:0b:be:7c:d7:7c:80:77:94:b9:f5:e6:07:e0:
                    f1:ec:19:b2:80:c2:b9:ce:0d:29:02:e5:29:dc:a6:
                    01:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4A:95:D2:2B:07:4E:6F:B7:0F:36:61:6F:A5:DB:1D:BB:5F:79:76
            X509v3 Authority Key Identifier:
                keyid:EF:4F:78:94:73:41:CE:55:88:8B:7E:BF:36:90:14:3B:0C:BF:F3:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:d1:61:83:e2:8b:b4:d6:b7:a9:32:9f:d9:f0:8e:7c:3f:d6:
         fb:a3:a9:0a:81:1d:b4:ea:35:7e:ee:52:59:50:d8:a4:e7:09:
         94:ea:50:72:6b:47:03:10:2d:46:3b:e0:bb:34:8b:06:ff:8e:
         ac:72:3e:a9:b4:6a:e4:63:d1:2d:65:82:8e:00:10:11:02:28:
         85:6f:17:96:17:36:c1:94:78:e5:49:0e:9b:64:39:b8:fa:0c:
         e1:d3:a0:64:ee:6e:49:99:5e:b1:c6:8c:d8:2a:c7:6f:58:62:
         2b:03:58:c5:dc:31:22:c6:73:a9:51:dd:5f:c9:fb:43:c7:63:
         b8:2c:27:7a:57:c0:fc:92:97:6f:47:ed:31:d6:87:b7:f2:91:
         23:79:fe:01:c5:71:82:7f:37:68:94:62:24:e6:81:88:13:d2:
         71:99:d3:9b:d3:42:1d:74:a2:af:e6:55:a3:d9:51:87:f8:a8:
         3a:1f:a5:d1:4b:90:3f:47:0a:be:90:8d:14:df:54:ec:a9:83:
         75:86:69:64:14:67:18:fe:ed:54:73:7c:c9:09:55:78:fa:20:
         f9:08:7c:24:cf:4b:53:35:23:3e:38:e9:a9:19:7a:5e:8d:44:
         bd:d4:39:e2:36:97:0d:e7:85:af:46:d0:bb:de:fa:c3:ff:eb:
         7f:fb:5f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:29:44 2026 by rpki-client