Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/ec4769-eb6a-4c20-8bef-635726ccfdb0/1/7_bzoe97RhIN3qUDuRFA6kn0EoI.mft
File:                     7_bzoe97RhIN3qUDuRFA6kn0EoI.mft (raw, json)
Hash identifier:          63mj7ajuNIaKFsRMKdfFMwxsuCmsmMYGxAtBcXf0KNE=
Subject key identifier:   6B:42:4D:A9:A7:1F:CD:2F:90:66:12:02:8F:2A:BD:16:78:1B:FA:3F
Authority key identifier: EF:F6:F3:A1:EF:7B:46:12:0D:DE:A5:03:B9:11:40:EA:49:F4:12:82
Certificate issuer:       /CN=eff6f3a1ef7b46120ddea503b91140ea49f41282
Certificate serial:       01A040F30CC4CEFBA382069A3E077F67C756
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_bzoe97RhIN3qUDuRFA6kn0EoI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/ec4769-eb6a-4c20-8bef-635726ccfdb0/1/7_bzoe97RhIN3qUDuRFA6kn0EoI.mft
Manifest number:          016A
Signing time:             Thu 27 Aug 2026 02:01:05 +0000
Manifest this update:     Thu 27 Aug 2026 02:01:05 +0000
Manifest next update:     Fri 28 Aug 2026 02:01:05 +0000
Files and hashes:         1: 7_bzoe97RhIN3qUDuRFA6kn0EoI.crl (hash: Qucat8yqs8npiFdffkI3AdCTne/e1B6XLlzN99ikfl0=)
                          2: Q03Wrr-4bRfsym1mVZ38VCx0Qzc.roa (hash: QlIjxjh/GKAm5itGl6sVrB0RZN4x8cc0LZn3FPdxeAQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/ec4769-eb6a-4c20-8bef-635726ccfdb0/1/7_bzoe97RhIN3qUDuRFA6kn0EoI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/ec4769-eb6a-4c20-8bef-635726ccfdb0/1/7_bzoe97RhIN3qUDuRFA6kn0EoI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7_bzoe97RhIN3qUDuRFA6kn0EoI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:f3:0c:c4:ce:fb:a3:82:06:9a:3e:07:7f:67:c7:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eff6f3a1ef7b46120ddea503b91140ea49f41282
        Validity
            Not Before: Aug 27 02:01:05 2026 GMT
            Not After : Aug 28 02:01:05 2026 GMT
        Subject: CN=6b424da9a71fcd2f906612028f2abd16781bfa3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9b:01:f6:88:6e:b4:da:d3:bd:37:0f:d7:64:
                    aa:fc:f0:53:09:fc:7d:87:74:1c:ce:bf:7a:0c:c4:
                    29:b6:9c:24:b1:c9:8a:b7:fd:61:d4:72:38:7d:9f:
                    c3:29:68:c0:f4:2c:71:19:bf:75:6d:ff:28:c0:88:
                    7d:20:3f:13:10:c9:98:08:c5:f8:c9:7d:a8:02:3b:
                    58:58:6d:04:e3:2a:8a:63:30:24:9d:8b:bb:8b:bf:
                    a5:ed:23:23:93:7e:f1:c6:f8:21:26:52:c9:c1:b5:
                    60:e5:d6:d0:c9:41:cc:97:97:3a:4d:15:b9:f7:1d:
                    b2:6b:d3:2f:ba:c5:f7:12:ad:f4:22:60:1c:5e:30:
                    3b:e9:67:25:86:41:ad:76:2b:28:5d:51:01:db:77:
                    9b:31:33:2f:54:e2:e4:8b:0b:8c:3f:41:69:dc:30:
                    53:fc:41:fb:af:6b:da:1f:cf:1e:1b:91:3a:e5:77:
                    68:c8:cd:fe:d4:ec:e5:71:be:8e:6b:2c:55:55:99:
                    00:62:c0:3f:2d:eb:7a:95:6e:08:69:64:35:67:70:
                    fe:9b:c3:f8:45:cd:65:34:59:72:bc:6e:70:9b:81:
                    8f:9a:13:ea:5a:2e:8d:54:5b:6d:76:14:c2:c8:85:
                    3b:97:f8:7b:dc:8f:ef:e2:ff:27:88:e9:12:01:be:
                    e2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:42:4D:A9:A7:1F:CD:2F:90:66:12:02:8F:2A:BD:16:78:1B:FA:3F
            X509v3 Authority Key Identifier:
                keyid:EF:F6:F3:A1:EF:7B:46:12:0D:DE:A5:03:B9:11:40:EA:49:F4:12:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_bzoe97RhIN3qUDuRFA6kn0EoI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ec4769-eb6a-4c20-8bef-635726ccfdb0/1/7_bzoe97RhIN3qUDuRFA6kn0EoI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ec4769-eb6a-4c20-8bef-635726ccfdb0/1/7_bzoe97RhIN3qUDuRFA6kn0EoI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:f6:6d:fc:24:d8:d1:bd:99:31:90:07:c4:4e:87:95:98:7a:
         f8:d6:9e:2b:8d:46:b8:08:40:6b:1a:68:a3:69:a6:43:d5:f1:
         0b:55:73:f9:9a:91:9d:36:34:df:a0:3f:d5:bc:88:3a:b7:c3:
         b7:eb:fb:6f:33:b5:6b:a4:dd:fb:fe:c8:cf:2d:87:b1:28:2e:
         52:40:62:18:93:c7:0a:7f:b0:40:46:65:5c:99:d9:82:d0:b1:
         40:0d:41:46:c0:3d:b5:8f:33:47:ff:7a:3a:3b:1e:42:c5:a9:
         9b:d7:90:8b:46:4f:34:8b:f2:a1:e7:ba:36:25:af:f1:cb:97:
         5e:ee:4e:df:e2:52:a1:a5:be:b0:e6:ef:9d:03:8c:4d:ff:28:
         7d:9c:23:ba:ca:46:54:df:66:a6:f0:64:82:d1:5a:d4:51:96:
         cd:d4:df:fe:57:43:0b:ff:de:ce:19:61:8e:63:63:f3:79:01:
         4e:3f:a9:28:48:ef:6e:5b:f4:69:85:b7:7b:e0:87:64:2c:45:
         c5:20:2b:f5:53:4b:58:e4:b9:a6:72:59:77:1a:52:98:8f:89:
         32:69:d8:42:ed:80:dc:25:26:29:40:99:28:99:79:fb:7a:a0:
         52:ca:fe:eb:56:ac:80:95:61:e9:9a:72:6d:22:ec:c0:5e:9f:
         b1:aa:d5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:04:29 2026 by rpki-client