Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.mft
File:                     7kmddBz3poj_wsl2gT23xR68R0k.mft (raw, json)
Hash identifier:          xfvk1uM2/CR+TKiCZLOfSNBMkZ9qbmO1gcdX/Tx6Shg=
Subject key identifier:   12:4F:39:28:5D:69:9B:EC:77:6A:8B:74:BC:2A:F5:07:44:7A:0D:FD
Authority key identifier: EE:49:9D:74:1C:F7:A6:88:FF:C2:C9:76:81:3D:B7:C5:1E:BC:47:49
Certificate issuer:       /CN=ee499d741cf7a688ffc2c976813db7c51ebc4749
Certificate serial:       01A0404DD191347C5D3E6C03876649A12389
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7kmddBz3poj_wsl2gT23xR68R0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.mft
Manifest number:          04E8
Signing time:             Wed 26 Aug 2026 23:00:36 +0000
Manifest this update:     Wed 26 Aug 2026 23:00:36 +0000
Manifest next update:     Thu 27 Aug 2026 23:00:36 +0000
Files and hashes:         1: 7kmddBz3poj_wsl2gT23xR68R0k.crl (hash: Jbqyv3KplkeK8F03B1FhlmNr+iLl+L5w8MPCSJQc2V0=)
                          2: wKnEgD4LUjzl3Xg9ixLbselaklE.roa (hash: bAjcEWUJ0poUNC9tIVnKtSJHHlCTwxmRLAJtIzNX1ts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7kmddBz3poj_wsl2gT23xR68R0k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:4d:d1:91:34:7c:5d:3e:6c:03:87:66:49:a1:23:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee499d741cf7a688ffc2c976813db7c51ebc4749
        Validity
            Not Before: Aug 26 23:00:36 2026 GMT
            Not After : Aug 27 23:00:36 2026 GMT
        Subject: CN=124f39285d699bec776a8b74bc2af507447a0dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a8:26:10:de:9b:65:e2:c2:86:d8:57:b7:63:
                    8d:5b:f2:47:cd:ea:95:48:62:82:3a:cb:b9:3d:ed:
                    c5:e0:6e:58:60:4a:53:13:b6:39:79:fa:c8:76:a3:
                    a5:10:44:73:74:69:85:79:ae:b4:0b:f8:7d:a6:b2:
                    23:9e:78:96:b2:c5:de:f2:c4:ca:4d:71:01:45:8b:
                    32:53:d5:47:07:2a:6c:40:29:ad:a2:71:c1:ca:44:
                    65:37:74:dc:e4:44:10:0f:d8:84:c8:d3:79:91:8d:
                    59:02:ae:c5:87:30:c4:a2:54:f1:3c:2b:86:f6:c4:
                    d4:cb:37:8d:c0:22:b3:ca:61:0f:9c:dc:01:3b:a5:
                    b1:7d:b2:a7:99:86:f6:95:d5:b9:70:12:1c:98:24:
                    3b:51:e8:06:a2:40:96:c9:6b:69:e5:f1:c1:c6:44:
                    ed:cc:b4:ea:df:3c:21:3e:17:82:26:40:5b:06:e2:
                    10:b7:d1:ba:1d:6f:a7:49:04:bf:0e:21:09:c8:6e:
                    26:50:d2:cc:0e:d3:14:dc:79:39:bc:69:5d:7c:62:
                    0f:53:f2:26:39:5d:19:08:94:b7:05:65:ef:c1:48:
                    3a:a0:12:04:dd:6a:98:1a:9c:89:a8:d0:d1:78:58:
                    91:4d:10:cf:bc:57:16:e6:a4:3b:e3:dd:1b:1d:1d:
                    ac:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4F:39:28:5D:69:9B:EC:77:6A:8B:74:BC:2A:F5:07:44:7A:0D:FD
            X509v3 Authority Key Identifier:
                keyid:EE:49:9D:74:1C:F7:A6:88:FF:C2:C9:76:81:3D:B7:C5:1E:BC:47:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kmddBz3poj_wsl2gT23xR68R0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:74:d2:c9:cd:36:29:7d:9b:94:36:6a:7b:87:20:58:ac:84:
         15:0d:d9:83:6c:4a:bf:fa:79:e3:04:79:97:d5:fa:77:e5:e1:
         0b:28:9d:32:aa:1f:ff:c4:62:97:e4:60:92:51:b3:c4:ed:3a:
         c2:97:80:03:82:ae:14:41:8b:4a:61:c3:8b:48:39:ea:af:f9:
         42:cb:a9:7a:eb:cc:47:6c:7d:91:81:b6:57:42:45:2a:95:23:
         38:a9:9d:d7:14:73:f7:46:27:2e:ea:03:11:38:05:3e:21:97:
         46:0d:35:03:d3:36:1a:a9:e9:2a:7c:72:89:4f:17:7a:90:a6:
         72:1d:a8:04:50:25:90:05:f7:44:0b:b0:30:11:72:e8:ad:fd:
         da:8b:34:8d:37:29:03:f1:84:5d:0b:86:71:40:92:fa:38:cf:
         a7:0c:b7:93:87:b6:ca:93:87:86:fa:44:7e:07:12:24:1e:ec:
         33:e9:7d:23:9e:c7:0e:47:88:61:4a:09:14:c4:5d:da:19:ea:
         b4:e9:a9:0c:29:98:20:b5:d6:03:9c:30:21:1f:41:ef:b1:f3:
         c0:72:6e:6f:54:77:73:94:b0:d4:37:fd:e3:bd:c0:33:0d:1c:
         4d:42:8b:7c:65:ce:3c:37:a8:3f:ba:9a:1b:3e:a9:eb:2f:1f:
         22:1f:b8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:54:09 2026 by rpki-client