Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
File:                     p-7aZdzUOH1yJwBcHhOgbUSHe28.mft (raw, json)
Hash identifier:          seqxcTMuvfzPgKuAkW14X2TGcyUmNvMxOHpZlQnfNwA=
Subject key identifier:   D4:71:F4:A1:60:DB:25:6E:34:21:8E:26:FC:F1:A1:0D:F7:89:64:2F
Authority key identifier: A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F
Certificate issuer:       /CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
Certificate serial:       019FCC382971DCF851CF17087AD8C895414A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
Manifest number:          16F6
Signing time:             Tue 04 Aug 2026 10:01:00 +0000
Manifest this update:     Tue 04 Aug 2026 10:01:00 +0000
Manifest next update:     Wed 05 Aug 2026 10:01:00 +0000
Files and hashes:         1: 2U0mDkF6k188FlI68TZ1uJWmy1k.roa (hash: 7JEOUa3UIN+/J9E0Zd5VhYU2fI+uSkBnOTYRU58DUPc=)
                          2: p-7aZdzUOH1yJwBcHhOgbUSHe28.crl (hash: Qlu+AKEC2ZvXH7/21PWLbjlRqFeWursehIqYjJ5xx+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cc:38:29:71:dc:f8:51:cf:17:08:7a:d8:c8:95:41:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
        Validity
            Not Before: Aug  4 10:01:00 2026 GMT
            Not After : Aug  5 10:01:00 2026 GMT
        Subject: CN=d471f4a160db256e34218e26fcf1a10df789642f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:06:a4:2a:1f:ec:66:d8:a1:60:d9:9e:67:b8:
                    96:ad:3a:40:df:d5:83:9e:72:ee:77:0a:41:42:69:
                    c8:ef:8b:fa:e6:c1:40:46:1f:3b:9b:07:08:da:45:
                    7b:80:a9:45:14:60:3d:f1:fa:fd:29:33:ea:da:cc:
                    7b:5b:21:61:c4:3d:39:3a:d5:5e:62:b3:28:69:92:
                    31:56:77:7e:ac:b4:5b:64:d6:5e:00:66:19:dc:e9:
                    7d:0e:c7:1f:19:16:c9:65:67:87:64:16:d3:46:14:
                    17:a7:59:60:60:fb:d3:80:1c:23:30:16:98:bd:0a:
                    c4:8e:1a:21:45:ca:2e:aa:c3:ff:4c:35:b7:82:c6:
                    c1:72:56:4c:74:de:ac:77:76:7a:3b:ad:f2:b2:a1:
                    0a:ac:4d:5a:12:10:3f:fe:40:e4:95:0c:21:4f:eb:
                    96:c2:5d:85:09:0f:1e:22:76:91:fa:7b:5f:f2:23:
                    ac:89:1f:e4:55:b2:7e:db:d3:ce:18:38:a9:97:42:
                    b9:44:91:4b:14:1f:8c:78:3b:01:60:7b:71:71:3f:
                    5f:1d:fe:8a:e8:ff:02:2d:84:a3:75:71:42:a0:5c:
                    4e:9d:27:ce:23:8e:2c:c6:93:fa:5d:d1:72:e6:0d:
                    de:d8:35:bd:56:f0:ef:1c:48:2d:42:93:2f:40:f8:
                    84:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:71:F4:A1:60:DB:25:6E:34:21:8E:26:FC:F1:A1:0D:F7:89:64:2F
            X509v3 Authority Key Identifier:
                keyid:A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:e7:48:d4:06:f0:a3:78:45:fe:2a:3a:dc:a4:78:4b:b7:7c:
         19:78:d8:53:d5:97:17:c3:b7:c5:22:9d:c9:a4:62:f6:c4:bb:
         80:c9:0a:89:ce:0e:fc:d1:ad:18:53:b0:90:b0:bf:6f:e4:17:
         62:f4:3d:8e:6e:26:72:90:60:f5:14:f3:a6:b7:48:1f:73:c5:
         bb:2e:d2:15:ff:c4:c3:8b:ec:63:cd:9e:b8:8a:c3:46:ff:19:
         37:f6:ef:e5:75:f3:34:72:70:0a:6f:17:cc:5b:fc:3a:83:c3:
         15:5f:a0:3e:a3:49:18:3e:d7:52:71:b3:bb:e2:f2:e5:4d:85:
         70:ed:89:e5:5b:b8:2a:2d:b0:b1:b2:08:99:eb:63:5c:29:e3:
         1d:49:d4:4d:38:d0:09:22:6b:5e:4d:6e:82:12:74:21:f6:18:
         06:e5:b8:cd:6f:22:23:ca:43:27:8d:c9:59:39:28:d4:76:68:
         09:9a:a5:5d:76:b5:46:43:33:66:53:28:40:02:a8:6d:2b:e5:
         f4:b2:2d:02:28:07:32:5f:ee:5a:12:a9:fd:06:55:b3:49:90:
         a4:b6:45:fe:e1:90:3f:e8:8e:f1:ff:ba:df:41:44:30:22:b7:
         f5:85:c3:1e:6e:d2:68:b2:7d:e2:9d:8c:65:b7:28:8b:1f:a3:
         43:25:b7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 13:39:45 2026 by rpki-client