Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
File:                     7jcJhfg_QTMBEcNQzWseHurVJqo.mft (raw, json)
Hash identifier:          NFjSyRHtLqpD8WgaB/VG8wE3qKHbbsAHGkvEApGeXgQ=
Subject key identifier:   E1:07:1A:35:94:A1:9C:B5:88:BB:EE:3C:07:7B:87:AE:47:EF:60:BF
Authority key identifier: EE:37:09:85:F8:3F:41:33:01:11:C3:50:CD:6B:1E:1E:EA:D5:26:AA
Certificate issuer:       /CN=ee370985f83f41330111c350cd6b1e1eead526aa
Certificate serial:       01A13F38FA50E7DA3C1E4ED5B4BCFB712B41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
Manifest number:          1AB5
Signing time:             Thu 15 Oct 2026 11:01:00 +0000
Manifest this update:     Thu 15 Oct 2026 11:01:00 +0000
Manifest next update:     Fri 16 Oct 2026 11:01:00 +0000
Files and hashes:         1: 1-5LBcBk_EHi1kuCTJ2ydHgVtxw4.asa (hash: lWSAhQP7b58chK1OJI/8aOd6XzjsPK22nX9iEXKUnGA=)
                          2: 7jcJhfg_QTMBEcNQzWseHurVJqo.crl (hash: pezi74iDTAcLvf0OPLrecq+PW1JLP9CCikoKxpcVAfI=)
                          3: MhU4CNeO4fgXq9_1vtRyy7zbhQI.roa (hash: 35d8hKQp5xyI2igMbZOkqF53rvhGzfdA1qxc+ja6Q8c=)
                          4: NE6F34chlE5AGGjbfBzSGKkprsw.asa (hash: 0Vz/xLWp4kZquxsYZecsrhHJInzdvDG4CDhO9vYduPQ=)
                          5: j2TcQ7FFpXzz-tgwxe38uLXQdgk.roa (hash: MMiIwVbQ8aiheyhBeB/trgDx55b/UG6AYdCk4oAMvxI=)
                          6: rCtt8sK2GOYKG94Svu_2uR5ddhQ.asa (hash: Q+nYBQ+gQsTBmSCinQLhjNQ/n5eKHzDbFRDbYdwd7Mw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:38:fa:50:e7:da:3c:1e:4e:d5:b4:bc:fb:71:2b:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee370985f83f41330111c350cd6b1e1eead526aa
        Validity
            Not Before: Oct 15 11:01:00 2026 GMT
            Not After : Oct 16 11:01:00 2026 GMT
        Subject: CN=e1071a3594a19cb588bbee3c077b87ae47ef60bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:01:c8:6f:08:89:b9:a0:06:05:a0:50:a9:cc:
                    58:5d:2b:c8:3b:9c:1e:ea:81:21:37:20:73:05:67:
                    43:a4:36:75:47:32:24:43:62:91:9f:23:9c:ca:3f:
                    d4:94:01:72:81:18:f9:78:20:5c:32:59:5c:44:a7:
                    5d:a5:f9:01:be:57:c4:b9:eb:b3:d1:48:51:be:42:
                    17:a5:6d:c6:22:41:79:da:b2:b4:97:16:d4:45:31:
                    41:27:8b:59:24:d7:58:5e:e7:6c:36:da:b2:0e:f8:
                    4f:f7:2f:e8:25:9d:7b:1e:22:3e:52:25:c3:82:e1:
                    97:fc:05:6c:8f:14:f5:e0:c4:ea:68:68:f9:8b:3d:
                    14:06:63:0f:3c:33:e1:34:98:75:eb:6f:52:c2:f5:
                    26:ff:e8:6a:47:15:ac:d9:05:d4:d3:17:66:85:6b:
                    28:98:c3:fc:e9:34:23:68:a6:b6:73:40:b9:80:75:
                    52:15:61:94:b5:f5:fb:fb:17:1d:74:93:df:f2:71:
                    63:df:9f:57:a4:df:c4:85:af:43:83:58:12:40:d9:
                    c8:fd:a7:3c:5d:da:38:5a:2f:fe:19:a3:a5:36:0c:
                    54:12:15:04:ee:d9:85:9d:67:de:92:be:54:59:b8:
                    fc:8c:db:33:82:da:57:a2:a6:a7:1f:d5:37:c8:2a:
                    1c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:07:1A:35:94:A1:9C:B5:88:BB:EE:3C:07:7B:87:AE:47:EF:60:BF
            X509v3 Authority Key Identifier:
                keyid:EE:37:09:85:F8:3F:41:33:01:11:C3:50:CD:6B:1E:1E:EA:D5:26:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:66:04:06:36:6d:32:9c:50:5a:d6:13:d2:69:17:f6:00:f8:
         07:e6:80:32:d4:86:bd:88:ce:fb:8e:09:fc:32:2d:cd:63:ed:
         d4:e1:43:67:ec:c6:b5:48:a0:86:f1:0c:5b:1f:92:df:b4:04:
         71:16:6b:e6:18:74:74:90:dd:53:8e:85:14:76:58:8e:eb:3e:
         6f:6d:b0:8d:7c:69:df:76:97:45:a7:de:77:a1:a1:6f:06:7a:
         64:32:19:8e:9e:9c:d9:cf:a5:e4:7e:f6:4d:75:54:7f:b2:7c:
         e8:49:3b:c2:3d:a1:aa:06:08:16:76:d7:0e:63:d1:9c:0c:c9:
         3c:54:ca:4d:20:d1:0e:a9:71:e4:ab:ad:60:ce:93:c1:38:45:
         95:e2:75:15:a4:ca:77:0b:dc:7e:91:4d:25:40:bd:c3:e1:f0:
         8e:32:45:61:10:f4:af:c4:5a:10:6a:ef:da:a6:01:52:14:f7:
         ce:21:1c:33:c9:98:98:3c:b5:28:74:0d:e8:3c:fd:eb:b6:02:
         12:cf:6e:a7:e3:12:33:ca:1d:ad:3f:21:05:bb:57:2d:f8:7d:
         cc:31:25:3e:b8:6c:90:1e:d6:fa:d1:4c:6e:06:3b:85:ee:db:
         40:8e:18:a1:28:28:7b:b6:0a:68:bb:b8:db:0c:a6:28:79:87:
         c8:89:0e:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/OPpQ59o8Hk7VtLz7cStBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMzcwOTg1ZjgzZjQxMzMwMTExYzM1MGNkNmIxZTFlZWFk
NTI2YWEwHhcNMjYxMDE1MTEwMTAwWhcNMjYxMDE2MTEwMTAwWjAzMTEwLwYDVQQD
EyhlMTA3MWEzNTk0YTE5Y2I1ODhiYmVlM2MwNzdiODdhZTQ3ZWY2MGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgHIbwiJuaAGBaBQqcxYXSvIO5we
6oEhNyBzBWdDpDZ1RzIkQ2KRnyOcyj/UlAFygRj5eCBcMllcRKddpfkBvlfEueuz
0UhRvkIXpW3GIkF52rK0lxbURTFBJ4tZJNdYXudsNtqyDvhP9y/oJZ17HiI+UiXD
guGX/AVsjxT14MTqaGj5iz0UBmMPPDPhNJh1629SwvUm/+hqRxWs2QXU0xdmhWso
mMP86TQjaKa2c0C5gHVSFWGUtfX7+xcddJPf8nFj359XpN/Eha9Dg1gSQNnI/ac8
Xdo4Wi/+GaOlNgxUEhUE7tmFnWfekr5UWbj8jNszgtpXoqanH9U3yCocsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOEHGjWUoZy1iLvuPAd7h65H72C/MB8GA1UdIwQY
MBaAFO43CYX4P0EzARHDUM1rHh7q1SaqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2pjSmhmZ19RVE1CRWNOUXpXc2VIdXJWSnFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8yNzQ0ZDAtNDFhMC00NDM0LWI2OTAt
MzI0NDU0NmY4Y2JmLzEvN2pjSmhmZ19RVE1CRWNOUXpXc2VIdXJWSnFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8yNzQ0ZDAtNDFhMC00NDM0LWI2OTAtMzI0NDU0NmY4Y2Jm
LzEvN2pjSmhmZ19RVE1CRWNOUXpXc2VIdXJWSnFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE2YEBjZt
MpxQWtYT0mkX9gD4B+aAMtSGvYjO+44J/DItzWPt1OFDZ+zGtUighvEMWx+S37QE
cRZr5hh0dJDdU46FFHZYjus+b22wjXxp33aXRafed6GhbwZ6ZDIZjp6c2c+l5H72
TXVUf7J86Ek7wj2hqgYIFnbXDmPRnAzJPFTKTSDRDqlx5KutYM6TwThFleJ1FaTK
dwvcfpFNJUC9w+HwjjJFYRD0r8RaEGrv2qYBUhT3ziEcM8mYmDy1KHQN6Dz967YC
Es9up+MSM8odrT8hBbtXLfh9zDElPrhskB7W+tFMbgY7he7bQI4YoSgoe7YKaLu4
2wymKHmHyIkOwQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 13:26:46 2026 by rpki-client