Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
File:                     7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft (raw, json)
Hash identifier:          SP00QLBe7ppkPFPgAOu2mGpsBKyUjeMwHKZEprtL05s=
Subject key identifier:   E3:57:F3:33:92:05:47:04:78:35:3A:84:04:25:82:75:29:C9:9C:68
Authority key identifier: EF:E1:FC:6A:15:96:59:34:C5:33:93:D6:ED:18:98:4C:6B:A5:6F:56
Certificate issuer:       /CN=efe1fc6a15965934c53393d6ed18984c6ba56f56
Certificate serial:       01A001382244CCB0B61F88E3C14B9978E6F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
Manifest number:          1A01
Signing time:             Fri 14 Aug 2026 17:00:50 +0000
Manifest this update:     Fri 14 Aug 2026 17:00:50 +0000
Manifest next update:     Sat 15 Aug 2026 17:00:50 +0000
Files and hashes:         1: 7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl (hash: PWcd1epCBGSYNiZCBrD2363q4ZNLO0U8deBQnpf2IvE=)
                          2: aTDLH8OzshREg-8mq0j-dLNvoVA.roa (hash: bWxd+gcoFiIXVBKwuiK0uKoGEVScpNqYAsExPghzTho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:38:22:44:cc:b0:b6:1f:88:e3:c1:4b:99:78:e6:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efe1fc6a15965934c53393d6ed18984c6ba56f56
        Validity
            Not Before: Aug 14 17:00:50 2026 GMT
            Not After : Aug 15 17:00:50 2026 GMT
        Subject: CN=e357f3339205470478353a840425827529c99c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:55:f2:bc:67:2e:f7:63:a2:16:6b:91:ff:da:
                    05:b8:c0:22:7e:c2:6c:b1:9b:eb:86:54:92:69:ec:
                    d1:12:70:9c:ac:31:5a:4c:d3:c0:37:e5:f1:25:02:
                    3c:04:b8:d5:c0:38:b3:65:f9:3f:17:48:14:38:59:
                    6b:d6:ad:7f:20:5d:f2:dd:79:00:1f:8b:7e:c0:60:
                    51:d5:69:38:c8:7a:fb:ea:d5:be:3a:12:e9:08:de:
                    a2:47:a0:85:ae:7f:79:05:e0:47:f2:73:ad:c0:af:
                    4e:1d:6c:15:0a:de:c3:65:2e:3f:2b:1c:48:33:e6:
                    6f:6e:bf:4b:81:b0:55:dd:67:cb:25:43:b4:01:bf:
                    ac:bd:54:53:a9:66:7b:08:87:e7:29:50:bc:88:9b:
                    ad:0a:8d:44:b8:a1:70:6a:12:ce:aa:41:1b:71:bb:
                    44:52:50:f2:ad:5d:a9:a1:79:77:1f:27:ee:06:2d:
                    b7:d8:22:b8:b2:87:f4:ea:aa:68:37:1f:c4:85:39:
                    b4:e4:86:ca:76:5e:a2:94:4e:50:e4:53:75:50:f6:
                    c7:cb:e5:ca:36:bb:eb:f4:17:04:62:29:7c:71:ac:
                    26:66:c3:3b:fb:5e:69:bf:93:aa:c9:59:35:13:44:
                    c8:7f:28:c9:96:22:e3:b0:cd:bf:b6:63:74:8d:93:
                    7c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:57:F3:33:92:05:47:04:78:35:3A:84:04:25:82:75:29:C9:9C:68
            X509v3 Authority Key Identifier:
                keyid:EF:E1:FC:6A:15:96:59:34:C5:33:93:D6:ED:18:98:4C:6B:A5:6F:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:1e:c1:70:5b:29:d1:ea:4a:c2:dc:f1:c4:90:22:d8:fe:c6:
         f7:b7:7f:4a:2c:c0:96:6b:29:f8:f8:e2:35:52:a8:03:53:8a:
         d1:54:71:0f:08:6b:86:88:4d:da:86:56:19:52:05:3c:a1:b0:
         0c:10:75:3c:b3:b0:28:0d:36:6c:d4:33:6f:e9:95:f7:2d:6b:
         bd:0a:2b:0e:5a:f7:ea:13:c3:2c:b3:b6:f4:93:b0:1f:08:5a:
         d2:f8:44:27:22:4a:d3:06:3d:c4:5f:fe:05:43:a0:dc:38:eb:
         f4:d0:84:a5:20:64:59:2a:5b:25:c0:ee:ba:ed:eb:6f:b0:36:
         cb:52:25:54:fc:07:c4:68:29:e3:fa:e3:59:10:a2:65:17:fd:
         5c:94:31:21:32:4c:8c:78:c8:7c:80:dd:78:25:a7:25:4b:16:
         f4:4c:3d:db:f8:9a:1d:b3:b1:94:13:da:60:22:e5:c5:82:89:
         d3:ba:15:bb:a6:c9:b3:3f:6b:e8:d4:e1:b9:e8:1e:6a:66:65:
         51:eb:70:ac:06:ed:0f:87:50:27:31:0e:36:f6:9b:ec:cc:46:
         c8:bf:7c:01:dc:8f:bb:b2:a3:c9:5c:8d:ff:f3:b6:f2:51:3e:
         2a:30:a0:ba:3c:a6:aa:df:6c:96:2f:5c:72:6d:cd:ac:d7:1e:
         01:ff:23:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:37 2026 by rpki-client