Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft
File:                     eXmGPOqCrrjp3zhLOapRdvS8-mE.mft (raw, json)
Hash identifier:          tVhF6UR5za5samSvh9rwmQe83G1Xr/5zLugoFRwmJh4=
Subject key identifier:   88:F6:4C:77:A0:2A:5C:95:D3:A5:7F:B4:BD:B5:E0:3A:A5:19:A7:C2
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Certificate issuer:       /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial:       01A06D95BC420E4E05CFC25769C25B7F7A7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft
Manifest number:          1A5E
Signing time:             Fri 04 Sep 2026 18:02:04 +0000
Manifest this update:     Fri 04 Sep 2026 18:02:04 +0000
Manifest next update:     Sat 05 Sep 2026 18:02:04 +0000
Files and hashes:         1: 3Uhad0KFSfjXI_TbydoftNMdE3g.roa (hash: j9tyqYt4el5e/EHBRQPaMKBm+kYVSqQDGKdC5+GV1fw=)
                          2: EEBu5rQ8hO5xN_RHJx_hFoO3qS0.roa (hash: BrnZ+O7PpPP2CgQz6l0MWy62IQSvfZEBI+G8ayJnLRE=)
                          3: GCKLMhjEZ4tgpahsAAW0b7v-pbY.roa (hash: vfauSOW8KSxhKm84diH34kDOUYgfp1RoadLmCV5cdWc=)
                          4: W0j6YSMe1GX3A4tZiQV8vzc_kpw.roa (hash: fb2PFmFnYQYmWpVf2HANiiXyOyVRMMcnLRhOHSluDkI=)
                          5: eXmGPOqCrrjp3zhLOapRdvS8-mE.crl (hash: 0tdAaVChsEwm3UMWaLByjPSzp4zIO+elP/K0V5kZxQ4=)
                          6: fuQjo-R8V7RgupEifO88mUFsfq4.roa (hash: XgKKf+T/JHflu47fZ8lbK7Ea+coPaRrFsg001BzHny4=)
                          7: m7kIh8Z3m5sUP7M-wKSvhAuoCII.roa (hash: RVNHVX31tSGpQABOxa6EqSIdwiAZEEfgy9G0c8Rv6CQ=)
                          8: njVUBNP2pawlmJYfjO-aqV7rHxg.roa (hash: KsrtTqSnlW3K+gpEPkMgT8sO+EsW0Fbd90twROTiMXk=)
                          9: qSxlathEcN6ZfWcqIYKI4rq_zNk.roa (hash: LYI2xAakIbFGxMC1GmxnDwbT1/w57IsHNS5Uguz6j68=)
                          10: tA_6j6gquShwOWQHuXqZmv-DGJ8.roa (hash: MBd1V9peNX1ONVT7gAUeTBj/y3gvMH+RO35qWdORDv4=)
                          11: xrlQxD2aCilEx5MBkW5ICdMkjmI.roa (hash: XyJhHEW8YK45zRLRx/h09ilca39SOfBBhQAfbZq7s3E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 18:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:95:bc:42:0e:4e:05:cf:c2:57:69:c2:5b:7f:7a:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
        Validity
            Not Before: Sep  4 18:02:04 2026 GMT
            Not After : Sep  5 18:02:04 2026 GMT
        Subject: CN=88f64c77a02a5c95d3a57fb4bdb5e03aa519a7c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cf:33:65:ba:31:6b:f1:71:4c:0f:7d:9c:d3:
                    01:17:1a:00:36:32:30:1d:1f:33:cb:e2:d0:0e:6e:
                    71:0a:67:47:66:58:81:13:09:0a:9f:8e:40:b2:a6:
                    ef:cd:83:56:a1:39:c7:f6:39:50:c8:2d:b5:3a:65:
                    ab:de:4d:c8:32:13:d2:d0:59:11:0b:b7:5e:42:fb:
                    14:be:7b:8a:58:44:e8:31:16:44:93:ba:90:fc:c2:
                    a5:27:94:b2:06:38:4e:94:64:fe:c5:12:35:dd:96:
                    7f:ca:ec:71:82:aa:96:2b:51:5e:9b:60:54:ac:97:
                    35:f4:6d:35:f6:d5:7c:a0:46:10:86:58:f7:03:d3:
                    c1:7c:49:27:14:f5:73:93:8c:92:83:6b:33:34:3b:
                    90:93:6d:7f:83:f9:57:03:b5:31:3a:20:24:26:18:
                    20:0c:d7:3f:28:85:b9:80:c5:95:29:98:00:c6:18:
                    ee:ef:fe:a5:3c:25:92:dd:95:14:6e:3b:17:5a:33:
                    b3:b9:2d:fd:a4:80:39:c1:8f:e3:9f:c7:a0:b1:a2:
                    b8:73:82:5a:9e:be:22:52:5f:01:1e:07:e3:55:cd:
                    7e:e4:ca:79:86:1d:2e:ac:ca:88:7f:1f:a0:54:d8:
                    ee:24:37:de:9f:08:2c:e9:66:9e:60:e9:e6:dc:8b:
                    a2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F6:4C:77:A0:2A:5C:95:D3:A5:7F:B4:BD:B5:E0:3A:A5:19:A7:C2
            X509v3 Authority Key Identifier:
                keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:31:ca:80:1d:16:2b:9e:e2:7a:6d:98:f8:0f:6a:21:ea:86:
         5d:3c:8b:55:38:68:7b:4b:5d:f1:3f:fc:f1:ae:a8:23:19:63:
         46:6d:22:f2:23:a4:3a:0a:07:9f:39:78:5c:2b:16:50:97:39:
         3b:e3:cf:e2:e3:49:dd:94:f1:b7:80:fe:4e:5e:b7:c6:99:47:
         d3:ab:cd:15:4f:97:46:1b:55:25:fc:f9:42:9c:f0:ce:50:8a:
         04:33:0f:8d:55:cd:00:0a:fd:3f:fe:c9:00:54:6d:03:6c:e2:
         2a:c0:24:73:2d:5d:57:f5:d0:6e:09:ab:0b:50:56:80:0b:31:
         15:94:c0:bd:50:7b:52:03:04:c2:fb:e1:84:68:f9:ea:81:f9:
         cb:38:cc:b5:7a:d9:d2:60:fb:b8:1e:15:b1:5c:29:f2:3e:78:
         c1:80:e1:b2:2e:2d:b3:db:46:1b:e3:bd:d4:90:7c:db:ac:db:
         85:20:c6:77:6c:a1:88:dd:e0:40:df:6b:91:f0:43:38:0c:b6:
         6d:9a:da:6a:0e:64:6a:29:a9:5f:6e:7b:08:83:90:04:f6:5a:
         25:94:f1:d6:31:da:f9:ad:14:71:56:76:67:19:56:5e:c0:1d:
         25:a5:ac:29:c4:07:7f:4a:a8:3a:e3:62:d5:10:a8:15:42:9c:
         fa:37:90:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:06:13 2026 by rpki-client