Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft
File:                     7WtTyjBwQ0J-9OrInHfBuhP28C4.mft (raw, json)
Hash identifier:          mpWckvr63Cuc/IUu1EBHjZDRqnLdCvYSj3MngLQlW5Q=
Subject key identifier:   57:39:60:D0:AD:13:14:56:B9:50:47:E4:66:11:47:C7:B7:F1:FC:86
Authority key identifier: ED:6B:53:CA:30:70:43:42:7E:F4:EA:C8:9C:77:C1:BA:13:F6:F0:2E
Certificate issuer:       /CN=ed6b53ca307043427ef4eac89c77c1ba13f6f02e
Certificate serial:       01A001DCA1522E21A6809ACA1C3BF445ADED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7WtTyjBwQ0J-9OrInHfBuhP28C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft
Manifest number:          0FF5
Signing time:             Fri 14 Aug 2026 20:00:31 +0000
Manifest this update:     Fri 14 Aug 2026 20:00:31 +0000
Manifest next update:     Sat 15 Aug 2026 20:00:31 +0000
Files and hashes:         1: 7WtTyjBwQ0J-9OrInHfBuhP28C4.crl (hash: R/1Jp+FkENcR303BCoiUEUFzuRaStdd8yFvlNstn3Co=)
                          2: I3HAZf8rku9CbsUBC3F9P-EBYlg.roa (hash: Eycp5thHHdJu+vFCPvEGzpeSVr3x+pRAbitu/74D2KM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7WtTyjBwQ0J-9OrInHfBuhP28C4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dc:a1:52:2e:21:a6:80:9a:ca:1c:3b:f4:45:ad:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6b53ca307043427ef4eac89c77c1ba13f6f02e
        Validity
            Not Before: Aug 14 20:00:31 2026 GMT
            Not After : Aug 15 20:00:31 2026 GMT
        Subject: CN=573960d0ad131456b95047e4661147c7b7f1fc86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:51:ac:6e:4a:61:19:ed:b0:01:95:a0:8c:b9:
                    4b:78:cf:48:7a:77:35:30:98:33:84:c9:64:2b:4f:
                    66:39:47:1e:e3:31:e4:8c:94:04:27:ce:86:da:cb:
                    2b:6d:8b:cd:e4:51:a5:a1:f8:ea:f7:21:83:53:b1:
                    af:f5:53:43:32:f7:f8:80:07:53:a2:31:fe:59:5b:
                    43:64:3e:46:78:81:2c:06:fa:ae:7f:f1:50:4d:5f:
                    13:7a:80:3a:01:dd:a7:5a:b0:3b:9c:98:62:af:28:
                    8b:1c:87:7b:57:8e:a3:94:54:4c:da:dc:ac:22:3a:
                    d8:0c:da:9e:33:63:3d:f8:f1:62:68:3b:60:af:65:
                    18:09:bc:4d:16:a6:d3:5e:f6:b1:94:1e:27:7c:80:
                    90:9c:b8:ff:0b:fe:57:24:a8:d4:4f:75:ae:69:40:
                    22:76:50:3f:b7:00:50:b7:80:2b:53:03:f7:7b:1c:
                    7b:83:b3:64:67:38:86:ce:bf:33:b3:a7:d3:c9:31:
                    f6:7f:fd:a6:f2:3a:ca:54:19:ff:2f:f8:7c:7c:3d:
                    d5:d1:72:fb:c6:9b:b1:09:23:a3:76:b8:4c:27:92:
                    dd:dd:0e:82:d4:e2:4e:63:43:ef:fe:50:d2:49:f1:
                    ae:ef:6f:64:3c:c2:33:44:54:23:3c:65:71:95:ca:
                    a4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:39:60:D0:AD:13:14:56:B9:50:47:E4:66:11:47:C7:B7:F1:FC:86
            X509v3 Authority Key Identifier:
                keyid:ED:6B:53:CA:30:70:43:42:7E:F4:EA:C8:9C:77:C1:BA:13:F6:F0:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WtTyjBwQ0J-9OrInHfBuhP28C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:ee:3c:cf:20:42:62:63:75:e2:da:42:ff:d7:91:aa:19:04:
         b1:0f:e8:b1:0a:68:b4:37:2f:3b:52:c2:0a:bb:71:ea:b7:46:
         a9:f2:d7:67:bf:53:bd:ad:e9:c3:21:64:8d:b8:3b:92:ad:78:
         30:fe:bf:cc:b7:2b:a7:d2:27:9c:4d:1b:b9:53:23:58:7b:3d:
         9c:8b:1b:e9:cf:49:a6:b3:04:c0:55:a3:0d:17:ed:3a:f6:17:
         e0:a8:aa:be:1d:68:82:30:a3:fa:76:5b:81:ce:f6:09:58:4b:
         8a:9a:e4:46:90:82:0d:48:8e:06:15:62:53:60:7a:91:04:f8:
         aa:2c:7c:df:a5:bb:b9:42:88:a8:7f:c9:bb:65:21:d0:03:d5:
         a1:83:e5:f6:c8:87:88:2a:c1:f0:b7:3d:d7:5f:82:32:e2:7a:
         e9:3b:c2:f3:e1:ff:4c:28:78:d9:12:07:41:49:e4:b0:4b:6e:
         48:2e:12:09:cc:f8:b9:8e:62:9a:4e:f7:4a:13:87:e6:d1:6b:
         86:96:7a:80:c8:66:6c:b3:65:99:df:90:73:b1:72:16:93:ca:
         e6:a3:b7:e1:7f:5b:96:b9:6d:d6:d8:1d:0c:cf:ef:78:ed:08:
         ff:4e:4d:b6:e9:45:51:eb:e4:0d:dd:14:7b:4d:a5:13:f2:2c:
         eb:e3:05:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:29:41 2026 by rpki-client