Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
File:                     p_0_iTNdz4KGZrKPrYrpk71EiHg.mft (raw, json)
Hash identifier:          4LsPjH8rQjGZrl/vWzvx1s4z15JD4tkFyDOiASHWnE0=
Subject key identifier:   FE:F2:09:A7:37:FD:6E:58:2D:71:AD:35:FC:5C:B7:1B:51:7B:0A:08
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Certificate issuer:       /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial:       019DF87199476E68AEE47B1B225AC2DCA0EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
Manifest number:          107F
Signing time:             Tue 05 May 2026 14:01:27 +0000
Manifest this update:     Tue 05 May 2026 14:01:27 +0000
Manifest next update:     Wed 06 May 2026 14:01:27 +0000
Files and hashes:         1: Qth5F4Jxy_7Urd_QUYNqQ6dh3BE.roa (hash: 7J/t016OYUhUIcd/w4kqId0UMUV/HMGOup9T1dY8o6k=)
                          2: VMk_-ZVMzNsk1GgbJTfI9LE0DME.roa (hash: UfrV1/CMx2zPrF2PH/5Pf7VA8YMgyux3npUJflT4mLo=)
                          3: WMaXfRf-RFKZGI9jfe80US59tDA.roa (hash: oSG4X6QE7Zo0M5rFiT40os6MT1Li/W/ODtM/SHLn50w=)
                          4: WYINcTR5G8eWIm2nJo9-FZB9A-c.roa (hash: xbC6ZKVedTs8dgZW52hJX5QjfYmjqhQcuGp6AKEKmZI=)
                          5: XAZ6WKQwSbWuMdg-slN8CRUbp5I.roa (hash: B/BbMvrnmz3NQFSpm/6UYMAwSqXPT+vl+n1zXtv+BHo=)
                          6: a9JkWci0F3TTd0p2sBEzmiEjdq0.roa (hash: 5j0Wq9PZGQQ7JbTj7Kgmx1x+26TKEMnhbQ7aJjaYgsg=)
                          7: hCn3bIQg5VsX6NCOxM1ZQie7ZJ0.roa (hash: D+/5MAyrqx5oCLSLt+ymEIb8F3rOABO1+8Ywi8kb7lY=)
                          8: p_0_iTNdz4KGZrKPrYrpk71EiHg.crl (hash: fjuo+aAzKmv6DgAHbN4YIVvkO8lIT8bva5yPLMVtRLU=)
                          9: quvibglo6Ez0p7GLGOPHRy9oRo0.roa (hash: PHUCyCkb1CzH3KiJNE2akCPX54R84dlZX7do54X1Jww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 May 2026 14:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:f8:71:99:47:6e:68:ae:e4:7b:1b:22:5a:c2:dc:a0:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
        Validity
            Not Before: May  5 14:01:27 2026 GMT
            Not After : May  6 14:01:27 2026 GMT
        Subject: CN=fef209a737fd6e582d71ad35fc5cb71b517b0a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:65:38:c7:f9:c5:67:c5:ce:fe:68:f9:82:ce:
                    22:ff:b6:c8:fd:ce:d4:b2:92:14:fa:ea:f9:db:d1:
                    09:68:b1:84:6d:24:c1:41:48:9b:d7:f9:6a:74:5b:
                    8b:2c:79:94:b9:2a:54:9c:ec:2a:53:43:4d:cc:4b:
                    bf:7b:6a:74:ce:3d:3f:3a:08:ac:57:ee:b9:7d:06:
                    25:9f:4f:29:aa:d3:19:78:a0:37:3d:c6:c6:19:fc:
                    31:c2:9d:ff:65:29:20:c2:95:59:26:76:0c:a1:a1:
                    24:3f:13:9f:b3:43:21:57:e2:8f:96:4f:3d:7f:37:
                    b4:83:e6:4d:9c:d0:76:7c:d2:02:ce:31:e2:b4:b1:
                    2a:c1:cd:4d:41:26:b7:18:44:bc:9d:7f:f4:19:89:
                    a0:95:69:2b:f7:69:ba:45:18:5b:49:ff:bc:e0:78:
                    3c:05:a2:06:4d:40:24:5d:8d:f9:d7:36:57:b6:bf:
                    a0:0a:b6:72:f7:cf:3e:01:09:7c:e7:51:4d:f7:0b:
                    27:c3:14:77:4b:0e:1b:ee:c9:bf:f3:68:6d:8d:45:
                    d5:cd:f7:38:1d:44:2f:96:b3:13:21:80:f6:e3:14:
                    bc:a6:1c:04:a6:20:ef:62:f1:e6:03:56:67:ae:86:
                    2d:93:e1:e8:da:27:c7:cc:51:df:ee:73:b6:e3:08:
                    13:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F2:09:A7:37:FD:6E:58:2D:71:AD:35:FC:5C:B7:1B:51:7B:0A:08
            X509v3 Authority Key Identifier:
                keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:6f:d7:16:92:94:21:3a:29:58:24:7f:16:44:41:49:e7:cb:
         29:1d:f4:b3:6f:1b:8b:d0:21:23:ea:3f:ba:d4:b7:c1:57:9d:
         04:6e:d0:9f:b8:e8:6d:91:b7:77:2a:15:f3:96:48:8a:c8:44:
         7c:dd:85:7c:df:7b:f6:87:55:a2:dd:3f:1e:e2:67:4c:bd:b4:
         65:f7:55:63:ec:6e:28:02:b3:72:e8:2c:fc:bd:24:85:c0:7c:
         d9:c0:79:59:40:35:4d:1e:2d:37:42:ce:d0:f1:fb:d4:2e:48:
         3f:0f:2d:e3:50:eb:78:4e:e1:e1:f3:c4:01:80:6c:0d:a6:0a:
         ab:74:8d:e4:02:6d:32:af:b5:59:2d:51:a1:8d:46:52:94:dd:
         3d:86:3b:b4:4c:d1:82:e0:73:6f:cc:bb:3d:b4:1a:ef:29:59:
         4f:4c:54:57:49:58:dd:9b:85:e8:db:42:ad:95:78:96:b8:9e:
         b3:93:36:56:fd:2a:32:d7:3d:ed:e2:9a:3c:74:4d:28:69:dd:
         e1:af:0f:6b:9a:b2:03:92:3f:42:7d:c5:ca:54:02:5f:77:36:
         38:a7:6d:ec:aa:19:49:70:07:a3:32:1d:18:c9:bd:5b:08:d2:
         49:13:d6:89:59:e9:c1:2b:ac:31:ad:e9:b0:42:b3:ae:e4:e3:
         ec:5b:9b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 00:20:48 2026 by rpki-client