Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/334b12-b17c-4bf7-8199-a4563a21a378/1/7Johw61I5fWl6kt5GjL4OjWmKKs.mft
File:                     7Johw61I5fWl6kt5GjL4OjWmKKs.mft (raw, json)
Hash identifier:          knBx7fPvHxtQ4zcCY0WY7sR1WsQiDhstpcr/FdOyExQ=
Subject key identifier:   47:D0:10:36:65:8C:C5:4A:EE:D4:16:BA:95:4C:08:58:B0:2F:B9:C9
Authority key identifier: EC:9A:21:C3:AD:48:E5:F5:A5:EA:4B:79:1A:32:F8:3A:35:A6:28:AB
Certificate issuer:       /CN=ec9a21c3ad48e5f5a5ea4b791a32f83a35a628ab
Certificate serial:       01A0404E56782DE784ED424BA6449D3C108F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Johw61I5fWl6kt5GjL4OjWmKKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/334b12-b17c-4bf7-8199-a4563a21a378/1/7Johw61I5fWl6kt5GjL4OjWmKKs.mft
Manifest number:          5E
Signing time:             Wed 26 Aug 2026 23:01:10 +0000
Manifest this update:     Wed 26 Aug 2026 23:01:10 +0000
Manifest next update:     Thu 27 Aug 2026 23:01:10 +0000
Files and hashes:         1: 7Johw61I5fWl6kt5GjL4OjWmKKs.crl (hash: iE8CFic3q3UG9id+lfM9ZZPDLnXs4+taO7B3HK+BrVE=)
                          2: HxAmguSxXpGyDH-xXiJflZk79M4.roa (hash: g9Fkj7kdnOVRjgWMYZ9SuygJGXHhDWfYa1t92jixGec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/334b12-b17c-4bf7-8199-a4563a21a378/1/7Johw61I5fWl6kt5GjL4OjWmKKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/334b12-b17c-4bf7-8199-a4563a21a378/1/7Johw61I5fWl6kt5GjL4OjWmKKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Johw61I5fWl6kt5GjL4OjWmKKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:4e:56:78:2d:e7:84:ed:42:4b:a6:44:9d:3c:10:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec9a21c3ad48e5f5a5ea4b791a32f83a35a628ab
        Validity
            Not Before: Aug 26 23:01:10 2026 GMT
            Not After : Aug 27 23:01:10 2026 GMT
        Subject: CN=47d01036658cc54aeed416ba954c0858b02fb9c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ad:3c:74:cd:ab:11:24:27:3e:78:af:cc:ae:
                    4f:fc:ff:14:fb:8e:0a:91:85:07:a9:57:e7:b8:61:
                    4b:18:5a:60:4a:c5:fc:f1:cc:03:3e:a7:5b:b8:3f:
                    f8:16:01:b2:cc:7b:83:8f:5e:25:59:a8:c1:64:5e:
                    15:3c:71:ac:3d:f4:96:92:20:84:a6:c2:e9:bc:5a:
                    d2:b9:03:22:91:51:06:71:55:23:4b:9b:74:f3:8b:
                    9e:bd:e6:ac:36:fe:5e:dd:ce:8a:bc:7b:98:18:92:
                    35:b7:9b:23:7d:96:e6:b7:cd:fe:bd:bf:43:43:8d:
                    db:15:df:2d:91:e5:ba:e8:bd:52:d5:f0:95:53:fb:
                    d8:0b:eb:ae:2a:e1:54:b7:7c:1a:26:0d:20:7d:db:
                    3e:21:1a:11:81:0a:46:76:53:5c:35:4c:ac:4b:1a:
                    31:6d:a5:5d:1e:e8:e0:2e:e3:e2:d0:eb:4d:65:27:
                    7d:a0:8a:45:7c:24:3e:19:55:b6:a5:fd:0d:39:a3:
                    db:64:d1:86:32:63:7b:51:ea:16:d2:c2:a8:a5:3b:
                    fd:56:53:3a:e3:8d:7a:f2:7d:03:5f:0a:4c:87:23:
                    a2:32:6f:a2:83:de:2b:e9:97:7a:a8:a3:b8:cd:39:
                    bf:9f:fd:81:26:a1:37:40:dd:b5:f8:68:dc:45:b2:
                    df:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D0:10:36:65:8C:C5:4A:EE:D4:16:BA:95:4C:08:58:B0:2F:B9:C9
            X509v3 Authority Key Identifier:
                keyid:EC:9A:21:C3:AD:48:E5:F5:A5:EA:4B:79:1A:32:F8:3A:35:A6:28:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Johw61I5fWl6kt5GjL4OjWmKKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/334b12-b17c-4bf7-8199-a4563a21a378/1/7Johw61I5fWl6kt5GjL4OjWmKKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/334b12-b17c-4bf7-8199-a4563a21a378/1/7Johw61I5fWl6kt5GjL4OjWmKKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:71:a9:20:61:3a:dc:89:a4:5c:bd:86:d4:ac:ee:f7:ea:b7:
         c9:2c:77:7c:a4:74:b3:cd:cf:64:33:e4:c5:db:a5:ad:92:19:
         ca:44:b0:a2:bd:6b:08:32:a6:db:88:88:ef:75:57:be:71:8d:
         73:97:a3:ad:e2:30:4e:f9:4f:cd:96:17:4b:36:30:0c:b0:30:
         40:07:9b:b2:8f:74:65:13:1f:aa:64:31:f9:a2:50:d8:86:53:
         d6:08:1a:e4:d9:44:9d:4e:00:0f:26:46:cb:4c:63:4e:db:32:
         51:93:09:f8:18:ab:ca:64:b3:a6:7c:a2:ee:ff:03:ff:6e:24:
         5d:f6:34:5f:5c:1c:fd:16:8e:9d:f9:da:64:70:2d:36:81:4c:
         1d:9f:9a:e0:7b:98:fa:9f:e8:df:8f:32:96:3a:c2:4d:1b:cc:
         a6:13:43:0c:cc:c0:61:c8:c3:2c:b3:0c:7b:79:2b:0d:4d:a2:
         d2:7d:71:87:68:2a:b5:e0:53:df:38:00:90:d3:c1:39:9d:d4:
         ef:08:c8:c5:ef:c0:7d:fb:2f:ee:98:e3:78:93:c5:23:9f:91:
         70:77:d3:2d:a6:0d:00:9e:c7:62:f7:11:a3:1c:37:aa:52:6e:
         3f:00:20:1b:33:d3:32:21:d1:6c:cf:45:b7:06:1b:27:c2:d1:
         aa:95:30:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBATlZ4LeeE7UJLpkSdPBCPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjOWEyMWMzYWQ0OGU1ZjVhNWVhNGI3OTFhMzJmODNhMzVh
NjI4YWIwHhcNMjYwODI2MjMwMTEwWhcNMjYwODI3MjMwMTEwWjAzMTEwLwYDVQQD
Eyg0N2QwMTAzNjY1OGNjNTRhZWVkNDE2YmE5NTRjMDg1OGIwMmZiOWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlK08dM2rESQnPnivzK5P/P8U+44K
kYUHqVfnuGFLGFpgSsX88cwDPqdbuD/4FgGyzHuDj14lWajBZF4VPHGsPfSWkiCE
psLpvFrSuQMikVEGcVUjS5t084ueveasNv5e3c6KvHuYGJI1t5sjfZbmt83+vb9D
Q43bFd8tkeW66L1S1fCVU/vYC+uuKuFUt3waJg0gfds+IRoRgQpGdlNcNUysSxox
baVdHujgLuPi0OtNZSd9oIpFfCQ+GVW2pf0NOaPbZNGGMmN7UeoW0sKopTv9VlM6
44168n0DXwpMhyOiMm+ig94r6Zd6qKO4zTm/n/2BJqE3QN21+GjcRbLfswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfQEDZljMVK7tQWupVMCFiwL7nJMB8GA1UdIwQY
MBaAFOyaIcOtSOX1pepLeRoy+Do1piirMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0pvaHc2MUk1ZldsNmt0NUdqTDRPaldtS0tzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8zMzRiMTItYjE3Yy00YmY3LTgxOTkt
YTQ1NjNhMjFhMzc4LzEvN0pvaHc2MUk1ZldsNmt0NUdqTDRPaldtS0tzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8zMzRiMTItYjE3Yy00YmY3LTgxOTktYTQ1NjNhMjFhMzc4
LzEvN0pvaHc2MUk1ZldsNmt0NUdqTDRPaldtS0tzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArnGpIGE6
3ImkXL2G1Kzu9+q3ySx3fKR0s83PZDPkxdulrZIZykSwor1rCDKm24iI73VXvnGN
c5ejreIwTvlPzZYXSzYwDLAwQAebso90ZRMfqmQx+aJQ2IZT1gga5NlEnU4ADyZG
y0xjTtsyUZMJ+BirymSzpnyi7v8D/24kXfY0X1wc/RaOnfnaZHAtNoFMHZ+a4HuY
+p/o348yljrCTRvMphNDDMzAYcjDLLMMe3krDU2i0n1xh2gqteBT3zgAkNPBOZ3U
7wjIxe/Affsv7pjjeJPFI5+RcHfTLaYNAJ7HYvcRoxw3qlJuPwAgGzPTMiHRbM9F
twYbJ8LRqpUwwg==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:37 2026 by rpki-client