Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
File:                     7FOM3K-fkkZJfceuRYRTef5qcXQ.mft (raw, json)
Hash identifier:          l+wglCUcEmgdEN9MoK2QOH2R/g6sqQXhQkVDYSQ7PhI=
Subject key identifier:   8D:21:3B:34:48:6C:31:74:DA:B6:6F:04:5F:C3:9C:9B:AD:0E:60:26
Authority key identifier: EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
Certificate issuer:       /CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Certificate serial:       01A021D5E05303C005215B635DA9E667F192
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
Manifest number:          0E0A
Signing time:             Fri 21 Aug 2026 01:00:59 +0000
Manifest this update:     Fri 21 Aug 2026 01:00:59 +0000
Manifest next update:     Sat 22 Aug 2026 01:00:59 +0000
Files and hashes:         1: 1-WOlFKgJ5fyuJ0mK_WXzxZSjJZ8.roa (hash: mA5SaPX5hOKD8NX3Hv1/uNqyTzg2PYZjKEyCT2Stnms=)
                          2: 7FOM3K-fkkZJfceuRYRTef5qcXQ.crl (hash: GUtuzOoOXof2Xci6RASOI2BRFPIwwwoAhTVoOLMIE5M=)
                          3: qCla3aYy8lmkCd9GDBwAGdRopPY.roa (hash: yq0d/UWqcKfbvqZVTTAHu+E8rSvKS7DJ77n7pL88Lw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 20:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:21:d5:e0:53:03:c0:05:21:5b:63:5d:a9:e6:67:f1:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
        Validity
            Not Before: Aug 21 01:00:59 2026 GMT
            Not After : Aug 22 01:00:59 2026 GMT
        Subject: CN=8d213b34486c3174dab66f045fc39c9bad0e6026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6f:26:01:ac:6c:57:a2:a5:ec:cf:d2:67:d3:
                    26:e2:87:68:75:40:e2:92:63:5a:38:68:dc:6d:01:
                    5f:62:da:1b:27:ec:84:c1:e5:20:34:ce:2c:23:e9:
                    40:88:79:d9:84:9c:fe:c5:07:bc:02:33:ca:8b:e5:
                    82:31:49:38:dd:93:d8:1e:76:4a:5b:43:56:e4:1b:
                    9f:9a:b8:42:04:40:0f:57:81:7b:5a:99:14:9c:18:
                    0c:2d:23:34:1c:e6:e9:df:1c:6a:be:3a:38:77:39:
                    ba:58:58:65:35:b8:53:2d:e0:4b:00:c7:83:6a:a4:
                    f0:cd:dd:c0:a8:eb:5d:d8:b5:2c:fa:f2:f3:bb:18:
                    d4:9e:a8:a6:85:c7:46:8f:05:98:f8:f5:25:9d:fa:
                    5b:3c:cc:34:20:1c:6f:27:35:c0:13:d4:7d:64:2c:
                    5c:75:a0:52:66:7e:11:3a:cc:b0:bf:8e:08:7d:b5:
                    a4:07:c8:3a:3d:af:81:ba:29:a5:0e:0a:39:a9:59:
                    56:b8:a4:6c:5e:f0:d3:e7:b6:68:dd:72:b4:7c:31:
                    00:a8:c3:f3:c1:1b:f6:4f:7e:3d:74:62:cc:43:6b:
                    d0:bd:3c:9a:00:90:a4:c3:df:20:f4:ec:f2:20:8c:
                    82:96:5b:e6:76:39:88:ca:4e:79:ab:6b:87:3c:6d:
                    b0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:21:3B:34:48:6C:31:74:DA:B6:6F:04:5F:C3:9C:9B:AD:0E:60:26
            X509v3 Authority Key Identifier:
                keyid:EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:99:12:d0:f1:85:ff:21:72:59:ba:68:14:fb:ac:d7:08:c2:
         3f:61:d8:1f:f0:bf:8e:00:1d:21:b6:4d:57:bd:31:bc:53:81:
         bb:4a:17:90:f1:89:90:e1:00:ec:bb:3d:e3:e1:80:f6:2b:11:
         d2:fa:de:60:12:e7:00:b8:84:41:0f:ee:1f:8d:f8:ba:22:b2:
         e9:81:b6:1a:e8:eb:97:82:db:0c:5f:6c:64:3f:8e:c2:b9:b3:
         af:19:4a:9a:54:68:08:aa:40:26:0d:78:3a:3c:12:19:e1:8d:
         0b:3d:13:5e:34:ed:3e:e4:d4:81:03:86:e4:40:e1:a0:26:fb:
         1d:1f:b0:1a:d0:ab:10:02:2f:98:e3:a0:f2:bc:96:22:18:f1:
         6b:22:bb:1a:b4:b0:ac:a4:69:82:cd:a6:bc:06:4c:f4:7d:52:
         1a:41:fb:ff:6f:ea:33:e2:78:da:b7:29:f2:84:15:ab:bb:67:
         a7:d4:7a:8d:93:94:10:61:a5:ec:67:e5:64:c1:fe:fe:e7:0e:
         e9:73:67:55:85:cb:e0:25:44:8a:e2:b1:80:2d:d5:2f:e1:1a:
         1d:dd:08:57:95:f9:95:e8:7f:db:0a:40:b1:d9:63:ba:e7:09:
         18:73:a1:d5:20:18:41:f5:dc:ea:69:f8:cb:9f:cf:bd:eb:de:
         32:bb:f5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:06:47 2026 by rpki-client