Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
File:                     7T_3g2Uw0cR09NCItrNiJPv2mC0.mft (raw, json)
Hash identifier:          WOFXiocIl+PFkG1SLiCSO/tUIv/mDgXWgkZ2O7Rnqqo=
Subject key identifier:   11:96:FF:D1:F4:60:4D:02:EF:8F:48:14:3E:C4:46:DC:54:49:06:B6
Authority key identifier: ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D
Certificate issuer:       /CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
Certificate serial:       01A0005D0AFC2B8204498D5EDF619B217B65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
Manifest number:          19FF
Signing time:             Fri 14 Aug 2026 13:01:32 +0000
Manifest this update:     Fri 14 Aug 2026 13:01:32 +0000
Manifest next update:     Sat 15 Aug 2026 13:01:32 +0000
Files and hashes:         1: 7T_3g2Uw0cR09NCItrNiJPv2mC0.crl (hash: nKa1P+09IS33yJFCpgNQX4ucqP3Uia/GAFMk++G45Vs=)
                          2: dDrbN1EnOvhkFc0_xZRFXvcNr40.roa (hash: 4F6zFoAlaZyrQw6r2Sapl4Rve7y38xHZ2sxhWgQcUxI=)
                          3: vqQIJ63USJ6tNbfIvkmeDNaWV-8.roa (hash: OsN69G3y8PdNZsFJ8bznX8F2lLtEi2mXTwt/+VGM68k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5d:0a:fc:2b:82:04:49:8d:5e:df:61:9b:21:7b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
        Validity
            Not Before: Aug 14 13:01:32 2026 GMT
            Not After : Aug 15 13:01:32 2026 GMT
        Subject: CN=1196ffd1f4604d02ef8f48143ec446dc544906b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f2:fc:2b:06:4a:43:3f:ec:c7:41:e3:0f:12:
                    ee:9c:12:66:cf:00:3b:1b:9d:2f:45:dc:e5:04:29:
                    f3:38:a1:aa:5e:b7:81:07:d2:ac:3d:fa:fd:7a:24:
                    9d:f0:ca:ae:14:70:b1:8e:25:5b:d4:18:8d:cb:b8:
                    d2:ed:1d:21:31:41:12:31:5a:1a:8c:88:0e:56:46:
                    6b:f5:55:bd:ba:15:25:0e:b9:f2:87:5f:16:98:76:
                    4e:b5:bf:c4:5c:10:63:20:4a:25:7c:4e:56:83:7a:
                    04:40:12:76:26:cc:7d:2a:16:ee:2b:9d:1f:6b:73:
                    e6:8d:df:55:56:38:d5:04:ec:70:7c:ed:df:30:9e:
                    fe:3c:91:6d:3a:6e:07:b9:67:d6:67:55:75:ed:b1:
                    6d:6a:7f:83:a3:40:6c:b8:32:f3:9e:3e:19:23:f4:
                    c1:39:86:f7:e8:c5:fe:2f:34:cc:08:bd:e1:48:33:
                    44:cb:f1:8d:19:be:b7:0d:cd:21:b2:0d:d3:fe:7c:
                    19:d8:c0:6b:53:6a:f1:29:92:8b:a3:14:85:83:89:
                    9a:2b:15:d0:b5:f8:a8:c1:cb:fe:ce:db:e3:78:b3:
                    5b:c4:4b:0d:f4:85:fa:dc:7b:07:27:41:eb:86:d9:
                    57:a7:45:ae:c9:fe:7f:5f:16:f3:72:df:69:80:7d:
                    6a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:96:FF:D1:F4:60:4D:02:EF:8F:48:14:3E:C4:46:DC:54:49:06:B6
            X509v3 Authority Key Identifier:
                keyid:ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:77:39:55:50:b5:66:ae:a2:86:52:80:e7:88:1a:70:81:a0:
         b9:4a:4d:ed:81:b2:b8:33:4b:3b:17:d7:c1:7c:22:1d:8d:2d:
         00:b6:ca:34:3b:ff:a0:17:52:42:5c:fb:78:94:a1:0c:5e:e1:
         e3:d2:da:ec:25:28:58:0d:f1:3a:1e:98:a4:c7:06:49:7e:fc:
         f5:8d:43:05:24:06:92:01:a5:25:bd:10:b6:8c:d6:93:5a:0f:
         15:6f:25:4c:92:5a:c0:e1:5a:9b:98:ac:4f:4a:00:6a:7e:50:
         d9:78:c9:bf:ce:5e:d8:a9:f9:b5:3b:32:fc:49:2b:59:1e:a7:
         97:19:73:e2:b4:c3:e0:05:9d:1e:ca:90:ac:86:fc:af:29:1c:
         88:93:2d:82:fe:e4:7d:07:1f:9a:53:92:1d:7b:00:f3:f8:45:
         50:89:17:ce:d8:3e:46:15:60:6c:3b:9c:6e:d7:34:f0:3f:8b:
         19:07:a6:7a:fb:6d:0f:c7:ab:47:59:96:85:23:2e:70:53:10:
         d0:d7:1b:68:9d:7b:1a:ad:01:e1:89:c8:f6:1e:17:a1:e0:00:
         3c:b4:f7:fd:53:ba:a7:22:7b:05:ef:fc:61:0d:e0:0d:4e:41:
         83:d8:29:a7:61:f6:f0:13:0d:df:09:c5:36:81:02:cf:18:65:
         fb:0e:e2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:35:59 2026 by rpki-client