Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
File:                     jSmNY5cKsDzfv1FPoOjtITEJhfE.mft (raw, json)
Hash identifier:          Zo5nmq+LXIu5wDAM4KGXKwcHA2YWuyvuBCIwXhzrN1s=
Subject key identifier:   54:87:D0:94:68:3F:32:AE:6C:F5:C0:81:5B:BF:0E:6B:B4:81:13:CF
Authority key identifier: 8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1
Certificate issuer:       /CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
Certificate serial:       019FCD145F5F8B541A02AAB9F3E69A9559C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
Manifest number:          0447
Signing time:             Tue 04 Aug 2026 14:01:32 +0000
Manifest this update:     Tue 04 Aug 2026 14:01:32 +0000
Manifest next update:     Wed 05 Aug 2026 14:01:32 +0000
Files and hashes:         1: Av7Tod1G7bVf0RLE6AF_1uspRQ4.roa (hash: PKJbe7R30nXLIKZVxr4PxR3DgHe3p9fuHQbiz5PGfP0=)
                          2: MZF_p3jMKGfUhISu7itbGm8fVPc.roa (hash: 1+Bei67+jd9KSPOgvA1EOkdwYvs4YCuptX/4MdFdYpM=)
                          3: Yf20QMXkj8GFJGSLeIPw0rNOpPU.roa (hash: aWACKntsxHH3Va6cTR9cG1/KJpBjS153dDHspJ2qJ94=)
                          4: eeoFWs0EeMzDNXzBgME3-Q7Zi40.roa (hash: Ym0Iu/9+fRHj5itQ0uhzHv3jsEKnG3SriEsKFuazFW4=)
                          5: jSmNY5cKsDzfv1FPoOjtITEJhfE.crl (hash: nOS9BwZ0hDkqtwYmJq21/eGNhOEMzJL4YazFZHdlQKg=)
                          6: vJGJvViXMVBX0BbZQG8EMQcvzW0.roa (hash: CK8vF9DVV4u6Wl7ZCweYDeRm465qIE+BaL+zat2pNHY=)
                          7: wIUhBGTuKImx7aulKFE1Ny0r6XU.roa (hash: zCU3R87d6206H/R5hLlVlQg3BluxAlE0w7q2LusxUio=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cd:14:5f:5f:8b:54:1a:02:aa:b9:f3:e6:9a:95:59:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
        Validity
            Not Before: Aug  4 14:01:32 2026 GMT
            Not After : Aug  5 14:01:32 2026 GMT
        Subject: CN=5487d094683f32ae6cf5c0815bbf0e6bb48113cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a6:f5:c3:0b:84:8f:03:d8:3a:5e:15:26:f9:
                    eb:6b:54:a6:1a:2a:32:92:54:fc:40:fe:88:05:29:
                    05:b0:97:64:58:6e:3f:48:18:ee:ca:cb:0a:2f:b9:
                    85:2e:13:0f:09:ba:28:54:6e:3c:5d:5d:a0:ef:2f:
                    0a:d8:72:fc:62:2c:59:f8:12:24:ad:3e:d5:10:d1:
                    a4:44:08:3e:66:fd:93:0e:c1:42:4a:f0:4f:12:51:
                    ff:47:27:2b:33:4d:b9:7f:64:63:5d:34:19:e8:43:
                    f2:8a:aa:57:fc:c6:47:e6:df:a6:10:d3:b2:af:22:
                    8c:c1:2f:67:96:65:51:d5:a9:88:f3:58:9c:0f:66:
                    90:98:10:e3:39:9b:0d:c8:cd:dd:02:e4:0c:ab:f7:
                    72:19:5e:dd:f8:ea:41:0b:1d:21:9b:ad:1b:73:51:
                    27:0f:ce:c4:54:bc:db:f1:53:82:5a:be:23:46:3d:
                    78:fd:a1:10:73:35:b2:d2:c5:9a:59:f1:46:54:78:
                    d4:e3:a2:68:da:60:8c:96:33:fb:b1:6f:6b:69:92:
                    34:f8:60:7c:60:db:ce:a0:04:0b:c4:ab:12:4a:e8:
                    31:68:fd:e2:1d:80:68:ef:1a:cb:91:00:ec:45:88:
                    be:c6:60:6d:cd:9f:75:f7:31:63:b3:92:fd:77:1d:
                    45:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:87:D0:94:68:3F:32:AE:6C:F5:C0:81:5B:BF:0E:6B:B4:81:13:CF
            X509v3 Authority Key Identifier:
                keyid:8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:13:e1:97:ab:6a:17:f9:40:7f:b4:0a:5a:31:39:17:02:5b:
         45:21:80:74:37:c8:6d:12:d9:9f:7c:56:d4:9b:88:dd:20:d9:
         de:7e:17:79:2e:19:f0:6b:15:c0:03:e0:a1:0f:0a:bd:68:f4:
         8e:a0:45:7b:0f:6a:3c:32:37:e2:55:52:e1:b9:b5:50:d2:7d:
         2b:cd:36:0e:9b:cf:f3:68:4b:26:ac:19:ef:62:78:34:90:41:
         51:ec:b5:43:84:74:0e:d5:23:33:a1:89:e5:70:e4:8c:ab:9a:
         c8:50:34:69:28:6c:7b:d1:ae:e7:da:c0:16:65:89:72:58:e2:
         a2:a1:e4:af:e9:95:1d:5d:f0:81:f4:32:6e:45:01:16:30:6d:
         59:a8:f7:d2:23:7f:1a:e2:d1:4e:1b:b3:82:0d:23:7f:d5:91:
         66:db:a5:68:06:4d:84:19:04:bb:37:67:0a:28:d0:37:34:e1:
         83:68:01:31:98:a2:dd:be:49:aa:c2:1b:e9:10:b8:e8:84:50:
         0b:6c:65:1a:6d:47:31:67:24:b2:b3:94:16:8e:f1:72:bf:16:
         59:05:b2:a6:c7:35:60:e1:d2:66:f5:bc:51:c3:ab:59:74:55:
         75:3d:ab:c0:76:fe:13:43:2c:fe:10:86:ec:83:c0:b9:2a:97:
         79:4b:73:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 18:56:56 2026 by rpki-client