Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft
File:                     EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft (raw, json)
Hash identifier:          MvpGe3s2xxEoljsERJgm0AEZuWSbLj8SEPLGo+0iChY=
Subject key identifier:   1B:6A:E6:8A:4B:1E:CD:DA:F8:D3:6A:95:92:56:92:07:2E:A7:E6:8C
Authority key identifier: 10:55:BA:8D:49:A2:DD:1E:91:C3:AA:CC:BC:F1:44:F0:45:93:F1:B3
Certificate issuer:       /CN=1055ba8d49a2dd1e91c3aaccbcf144f04593f1b3
Certificate serial:       01A001DD60C8072DE82DCE90A93A7BDC711A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft
Manifest number:          1A01
Signing time:             Fri 14 Aug 2026 20:01:20 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:20 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:20 +0000
Files and hashes:         1: EFW6jUmi3R6Rw6rMvPFE8EWT8bM.crl (hash: H/xinZ++JhlMsJtPYkkl6IJKYFgTcP9RpHsEC4z0joY=)
                          2: zpkqiEr6OZxmuI9IUaACDy7tIx8.roa (hash: p3BKr125MAv68ooq8iK1eGRE8YMR/faVc2WdwuZpJ74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:60:c8:07:2d:e8:2d:ce:90:a9:3a:7b:dc:71:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1055ba8d49a2dd1e91c3aaccbcf144f04593f1b3
        Validity
            Not Before: Aug 14 20:01:20 2026 GMT
            Not After : Aug 15 20:01:20 2026 GMT
        Subject: CN=1b6ae68a4b1ecddaf8d36a95925692072ea7e68c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:38:d5:70:23:74:44:b0:a1:98:69:b0:6e:d6:
                    73:6b:fe:56:96:59:53:ee:17:cc:20:1e:c2:7f:22:
                    bc:16:83:df:8c:b3:a0:ae:11:fd:8e:c7:27:50:b8:
                    f4:27:30:40:66:61:9b:1c:8e:e0:02:7f:b9:37:d2:
                    7d:bf:70:2b:ef:b3:19:f5:c8:d3:09:bf:86:ea:1b:
                    eb:3a:77:fe:48:ed:46:cb:0b:1d:f3:67:a0:5d:66:
                    21:da:cf:56:00:cd:58:77:d4:0b:f1:21:5a:6d:92:
                    2c:db:3e:bf:c3:46:c5:21:6d:30:d8:ba:7c:21:68:
                    a6:ac:e7:1b:37:c2:fe:b4:d7:30:4c:fa:de:05:4b:
                    a5:ed:af:f5:50:8d:5d:97:3b:2a:d3:0b:03:1b:7f:
                    a7:37:d4:38:3c:56:35:cd:30:25:a5:e1:e5:8c:ac:
                    42:2f:7d:98:29:46:f1:51:d2:3f:7a:0b:c4:dc:51:
                    ba:2f:16:2a:80:f0:97:cc:cc:92:3e:28:7b:1f:1e:
                    2b:23:d8:e6:71:a3:7a:47:fc:3e:1f:8d:64:2c:7f:
                    51:b5:a5:21:63:cc:fa:0f:7d:a6:a6:6c:b4:e1:e1:
                    25:1a:8a:ee:fc:41:d8:18:01:a4:c5:03:85:47:b4:
                    80:6d:76:a6:fb:49:aa:38:bc:8d:73:e3:52:56:9f:
                    4d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6A:E6:8A:4B:1E:CD:DA:F8:D3:6A:95:92:56:92:07:2E:A7:E6:8C
            X509v3 Authority Key Identifier:
                keyid:10:55:BA:8D:49:A2:DD:1E:91:C3:AA:CC:BC:F1:44:F0:45:93:F1:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:c0:f5:cc:3d:ae:38:f9:f7:45:85:6e:4a:8d:7d:75:fe:61:
         97:17:65:01:ec:da:0a:fb:a7:64:0f:2f:ab:01:38:fb:1b:90:
         9c:a1:ff:b6:cd:ef:cd:0f:38:a5:ce:e9:b3:7b:d6:76:97:81:
         55:82:a7:c7:3c:f1:ff:13:1e:46:c0:5e:a2:40:df:5f:32:5e:
         d1:75:f3:2b:92:19:fe:4a:93:43:d5:ce:4d:5e:00:10:75:e3:
         58:87:2e:4b:06:8e:eb:d8:2a:38:cb:fd:03:1f:87:98:fa:2f:
         ab:20:bc:b8:0f:da:0d:11:c4:a9:d0:44:ff:fb:3d:dd:ad:e6:
         07:9a:69:01:df:fd:38:74:6b:60:9c:73:ba:f8:30:85:62:94:
         4a:b9:ef:4f:ee:6e:70:08:d3:b4:d9:29:6d:34:81:88:9a:68:
         0d:ac:64:6b:2c:4d:89:6b:e0:61:27:f4:7e:ae:84:06:62:dd:
         a7:0b:c1:e5:ad:63:20:df:f4:02:da:99:d0:e5:52:02:4f:74:
         ba:32:52:db:04:f4:86:2c:bf:71:2a:e5:82:2c:f9:86:84:a3:
         1a:1a:cc:1d:a4:de:de:4f:e2:44:f0:55:34:c3:be:c5:62:b9:
         80:85:d8:df:f8:e0:c8:b8:ba:f0:16:ad:0a:3f:1f:3a:9d:bd:
         c1:fa:69:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:58 2026 by rpki-client