Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
File:                     7jcJhfg_QTMBEcNQzWseHurVJqo.mft (raw, json)
Hash identifier:          LGLX5dmaiz4hyEaCWM2Bd2wpgA0nR2BVJIDM0+mTLOc=
Subject key identifier:   A9:F0:AE:45:20:66:8B:3D:2B:41:EE:32:7D:00:F4:7F:38:81:6A:44
Authority key identifier: EE:37:09:85:F8:3F:41:33:01:11:C3:50:CD:6B:1E:1E:EA:D5:26:AA
Certificate issuer:       /CN=ee370985f83f41330111c350cd6b1e1eead526aa
Certificate serial:       01A00282485405B195F855E2787EC30BD877
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
Manifest number:          1A11
Signing time:             Fri 14 Aug 2026 23:01:27 +0000
Manifest this update:     Fri 14 Aug 2026 23:01:27 +0000
Manifest next update:     Sat 15 Aug 2026 23:01:27 +0000
Files and hashes:         1: 1-5LBcBk_EHi1kuCTJ2ydHgVtxw4.asa (hash: lWSAhQP7b58chK1OJI/8aOd6XzjsPK22nX9iEXKUnGA=)
                          2: 7jcJhfg_QTMBEcNQzWseHurVJqo.crl (hash: 8OnDi55A/SMcSg7M0Fu81GdfWCb1/cEosUXsiRnPgUQ=)
                          3: MhU4CNeO4fgXq9_1vtRyy7zbhQI.roa (hash: 35d8hKQp5xyI2igMbZOkqF53rvhGzfdA1qxc+ja6Q8c=)
                          4: NE6F34chlE5AGGjbfBzSGKkprsw.asa (hash: 0Vz/xLWp4kZquxsYZecsrhHJInzdvDG4CDhO9vYduPQ=)
                          5: j2TcQ7FFpXzz-tgwxe38uLXQdgk.roa (hash: MMiIwVbQ8aiheyhBeB/trgDx55b/UG6AYdCk4oAMvxI=)
                          6: rCtt8sK2GOYKG94Svu_2uR5ddhQ.asa (hash: Q+nYBQ+gQsTBmSCinQLhjNQ/n5eKHzDbFRDbYdwd7Mw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:82:48:54:05:b1:95:f8:55:e2:78:7e:c3:0b:d8:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee370985f83f41330111c350cd6b1e1eead526aa
        Validity
            Not Before: Aug 14 23:01:27 2026 GMT
            Not After : Aug 15 23:01:27 2026 GMT
        Subject: CN=a9f0ae4520668b3d2b41ee327d00f47f38816a44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cf:1c:bd:33:5e:3f:80:3b:20:4b:2d:b7:3e:
                    db:51:4d:82:44:a6:6b:ff:9e:cc:ec:bb:f9:3e:bf:
                    e6:1d:e4:34:a1:91:df:2c:bd:f1:ea:0b:14:ae:75:
                    21:47:90:27:bc:79:c0:44:da:fc:63:8c:05:2d:32:
                    e4:03:51:e5:51:89:1c:e0:7b:dc:dc:6f:98:69:87:
                    d8:24:51:1b:46:da:0a:c6:17:34:6c:35:bc:b2:6b:
                    3b:9c:b6:40:69:4b:1e:a2:62:2d:ce:a6:c6:2e:e9:
                    4c:24:99:e7:24:57:22:06:a3:9e:b2:82:7f:7f:da:
                    0b:27:c5:5b:54:90:c6:26:2d:d5:ed:59:b6:d4:4d:
                    b6:d9:14:2c:a2:1c:d6:07:27:9d:a0:d0:65:66:a0:
                    f8:cd:f5:57:70:7b:8d:60:a4:aa:f8:d7:b2:e0:1f:
                    12:bb:a5:a6:bb:ee:ad:51:52:45:01:35:10:fd:bd:
                    1c:43:25:e2:50:04:c0:68:a8:55:02:24:80:ff:29:
                    8b:5c:0e:f3:79:48:4e:a6:55:09:f2:47:33:f0:81:
                    e0:ec:f7:0d:f3:e3:49:52:59:55:6e:5e:24:b8:3d:
                    92:76:a5:ea:2a:63:7b:b9:04:17:8d:ad:b7:9b:58:
                    4b:4c:0f:90:7d:67:28:2e:5b:c6:36:46:c8:d1:34:
                    02:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F0:AE:45:20:66:8B:3D:2B:41:EE:32:7D:00:F4:7F:38:81:6A:44
            X509v3 Authority Key Identifier:
                keyid:EE:37:09:85:F8:3F:41:33:01:11:C3:50:CD:6B:1E:1E:EA:D5:26:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:95:68:0f:1f:1b:1c:2f:b4:f0:a8:86:6d:89:d8:5e:3b:46:
         2e:57:98:13:a6:20:44:ba:68:2f:09:22:19:13:60:b3:0d:2c:
         13:76:2a:c2:fc:10:18:62:b0:f7:85:49:e0:32:e2:aa:26:cd:
         da:af:35:65:aa:c6:c5:ab:dd:f4:00:e2:55:5d:e4:13:36:c7:
         9d:20:e2:02:5d:b2:f2:31:5e:fb:ce:cd:5b:d3:52:d8:a9:bb:
         10:38:91:85:ec:74:fc:4a:23:ad:75:b2:9d:f0:cc:a6:5d:83:
         22:e1:e9:93:1a:b2:7c:79:5f:5d:57:00:2d:a9:65:e6:97:a0:
         f4:d0:59:2b:7e:65:28:70:a5:49:45:bd:9a:f4:6c:c2:b2:30:
         d4:ee:e8:a3:90:9d:76:6d:6b:9c:78:01:53:80:ba:84:32:0e:
         e2:8d:67:32:c4:7d:43:89:f0:0e:0d:bd:75:05:ce:54:54:2c:
         31:26:10:4d:bc:7b:58:74:a5:1d:17:24:65:41:3a:b8:df:cf:
         ce:58:7d:f8:1f:d6:d0:a9:2a:93:ce:8a:13:90:ac:32:d2:77:
         96:33:22:f5:6d:a8:21:2a:d0:48:68:76:3d:7d:e0:45:95:58:
         5a:8d:f4:93:f0:a8:40:71:8b:99:5c:f6:a8:fe:d6:6d:ce:a8:
         06:91:95:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:08:47 2026 by rpki-client