Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          7OEexmG6eTG72WEU/G/pqXRiyf7Kwxk9F1ZGV8b0yW0=
Subject key identifier:   10:FB:72:02:63:BC:33:4A:26:5F:EE:28:F9:58:48:0B:32:96:56:40
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       01A022E899C2096B248B3C5D44F2A4EA8D9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          1230
Signing time:             Fri 21 Aug 2026 06:01:04 +0000
Manifest this update:     Fri 21 Aug 2026 06:01:04 +0000
Manifest next update:     Sat 22 Aug 2026 06:01:04 +0000
Files and hashes:         1: ZmMT2z6YESzsqLiHHksh3zTPbG4.roa (hash: iwSuPLvK55sjZ7hNF2l1Dx0x0q3p0/ZnhsGr2wjMgc8=)
                          2: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: +cNCWaqEXRgnXDFEs1rs6/S82b6mw8gGtUpLbTmCc48=)
                          3: ijwDFvI6Hlh6qiz9W9UJGnIAyt8.roa (hash: moP/GDH/2J0pl8h5OiLf7BA6bBbW85uoOSfkVYm6rrs=)
                          4: jhZDQgS37cDeN0fg9TKpAHJ2J-0.roa (hash: 0zjaA0uaqIEPRMOa6F/AxIRFhD/Vgqi5oAKX2XbvGM8=)
                          5: yT1RKaA_jW_Fs_q2Xta-wqJ2rA4.roa (hash: Yhagr78CIxoIwhFIExPGHD+JkDFI98BZt35S7gqnNxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Aug 2026 06:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:22:e8:99:c2:09:6b:24:8b:3c:5d:44:f2:a4:ea:8d:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: Aug 21 06:01:04 2026 GMT
            Not After : Aug 22 06:01:04 2026 GMT
        Subject: CN=10fb720263bc334a265fee28f958480b32965640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6b:f8:33:4d:07:a2:06:a4:40:b1:eb:2b:3e:
                    0a:f8:c1:2d:d4:90:7c:cd:27:1e:d2:e9:c0:ad:3e:
                    8d:96:68:25:4e:04:75:56:57:c0:8f:8c:85:cd:0c:
                    e1:42:23:93:8f:a6:31:14:80:cf:6a:4a:d9:41:2f:
                    fa:56:6b:66:1e:46:f0:36:7e:76:b1:71:89:c5:da:
                    8c:47:a1:99:50:b0:f9:8e:d3:00:df:0b:2e:f8:58:
                    b0:91:c8:63:91:24:29:ad:ec:d7:24:1e:88:f5:40:
                    27:80:be:d4:1e:12:e2:36:b0:4c:f3:b9:5e:c9:e4:
                    0f:98:cd:20:d3:dc:c4:da:a3:57:31:9c:49:45:e7:
                    45:42:69:a3:d5:5f:49:98:78:f5:47:04:2e:18:95:
                    21:5d:f8:de:1e:e7:51:54:f8:6f:e6:b6:eb:72:05:
                    66:b7:7c:be:22:49:a1:0e:7a:84:e2:27:27:c1:2c:
                    88:c9:e0:d6:08:2e:04:ca:ee:5a:b1:27:de:ce:29:
                    80:56:f8:e2:71:4b:a6:79:57:8f:e4:d2:f6:bc:63:
                    b5:8e:a6:a5:92:81:37:1b:6f:ca:f8:13:2b:5e:52:
                    23:c4:de:7b:12:c8:d6:44:98:db:0d:a6:58:3c:bf:
                    cf:08:7b:34:89:d3:9f:68:1b:e7:9a:46:1d:61:5a:
                    12:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:FB:72:02:63:BC:33:4A:26:5F:EE:28:F9:58:48:0B:32:96:56:40
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:a0:a5:7a:66:6f:b2:3f:e4:e1:88:e6:e9:57:0e:dd:a8:45:
         16:07:e6:11:0a:72:2b:73:2f:5b:4c:0e:a4:fe:7c:fb:76:b6:
         e1:02:24:e6:28:64:44:6b:e4:bf:11:76:9e:0b:d0:ab:25:58:
         c9:25:30:9d:91:db:9f:9d:f0:1e:40:9b:62:bb:5b:8b:08:63:
         42:39:7a:6a:82:34:30:89:cb:bd:1d:c6:6d:60:cd:61:6f:0b:
         9c:8e:7a:84:ca:a1:65:de:8a:1c:fd:52:16:37:9d:6a:e0:57:
         8b:eb:c2:b5:d0:ef:d3:e6:7f:a7:75:10:2a:51:94:f5:00:4a:
         ca:f4:df:e4:58:49:9a:3f:65:25:3c:5f:b4:e7:1b:b2:73:2c:
         66:64:88:5d:78:00:c6:0d:e7:1c:7a:6a:49:9c:1c:8e:65:bc:
         7b:73:e0:48:fe:d3:09:71:6c:52:e9:9e:60:66:1c:03:c0:85:
         42:9d:6c:aa:72:70:fc:5c:cc:7f:d5:d4:9c:46:49:23:d1:5c:
         47:4d:09:ba:bd:18:cc:67:7c:4d:4f:64:2a:06:e4:c5:70:d4:
         f6:ca:53:ce:7c:68:eb:3e:2d:79:96:58:7e:23:07:5d:97:1f:
         1b:c7:7d:8f:98:86:42:90:7c:99:95:b3:d1:a4:a8:3f:4d:da:
         94:4a:cb:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 15:55:01 2026 by rpki-client