Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
File:                     _TfMjxazxsvTNGqj7WF3Hz6DrJc.mft (raw, json)
Hash identifier:          7z9YysaEE2wAMEFs7BXNMEGnlFpax77iyMAZn+mr8js=
Subject key identifier:   ED:F5:EC:A7:8D:F0:14:3E:63:6A:11:98:25:2E:F5:AC:15:D2:5E:BC
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Certificate issuer:       /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial:       01A002EFE0E2BB6CFB6B135C586C6F60C848
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
Manifest number:          1A6B
Signing time:             Sat 15 Aug 2026 01:01:10 +0000
Manifest this update:     Sat 15 Aug 2026 01:01:10 +0000
Manifest next update:     Sun 16 Aug 2026 01:01:10 +0000
Files and hashes:         1: 1onWddNgt-hbXxg-7fMMVDkSMv8.roa (hash: 6xbzz0JrjMO/4fz5zHo8PgQ0CyGaKVVD/UoDkWFGr1M=)
                          2: 4k3-HpRCXFW3j7_8C4stbYfFUYA.roa (hash: C8f2KuD10zOuLUQcMwm5C74B3yZTjBcW9yOV/aVWErg=)
                          3: 8MDk26A6HB8ESAemQVS635P3dlM.roa (hash: rxyUnW+DZGiT5coh/pmWc5vX6tfUq/igWAH5aJLS19c=)
                          4: Nsh_W4gT44WToqQeMBkvLdwLp7U.roa (hash: s1XEdXMI1+3uP5BkHw14NLcZMVjF5mmNtQSI8IR6ni8=)
                          5: OujepPxEWJf76CUpCTyqTjOXKpU.asa (hash: ThWY+hR9gmQ1aouAGBEnVouEZokSrfcbByNw6RJAbVQ=)
                          6: QKaa5M_Ls464BGXTJZlXMkecYvk.roa (hash: VYfsIkTwFvkSA3FB9Pu7FhpTVM9hzat73ShbqylONR8=)
                          7: Uhz_TUI3Hsi81u75mxMWZpekOT4.roa (hash: q9Go9HD9nYKVh+b76qK8j4mJsOQptkJ61FqLETJCZTU=)
                          8: Un_qTs_qUw6Cr9rSAjxMcB_qwIQ.roa (hash: /NZAsUlQyUhQsDytYI9yrui4/CAPCfbgRtz4l6TLnkU=)
                          9: Y1K-rQ-VX44rWAjvqhl_hw7Dweo.roa (hash: cEsowcsrRQw+N5wEyAbdQXCFdceUeFzwtiYgytJDtj8=)
                          10: _TfMjxazxsvTNGqj7WF3Hz6DrJc.crl (hash: JmOvGC55kQVed4XVWFBE114ayZrzPBRwgeGHbb+pJTM=)
                          11: aKvQ03F1bR1q6-Woc8m1q6jONu8.roa (hash: LcJqfZb4sulh5jvt0J4ioSYZjOzoPCpUud+7/IHHoW8=)
                          12: hzo97s4v3GMC9JemawE_G_69_xQ.roa (hash: be6E5XX2tZu6F19eYf6ITco22ZDHl9eZTJ8uq+1gKPc=)
                          13: ip7XsN0-IlSnuEP_E--FUjD8qf0.roa (hash: CO94Nw8OySvoAWy5RjY0I0/eplwWsGb3UO5iKzV120U=)
                          14: l0uiGfn0_Ao0KJi5bVUaMaNKV8Y.asa (hash: 5p613mEjLDKXtkZwHBWoFC0KynCvj30DBewuSTWYGQ0=)
                          15: osuU6cABAT-z_og2fdV709jwbR4.asa (hash: ItbTyIqWcJVCMwjVvKdgJl+ZPlR3yuOKXNSj6k02k90=)
                          16: rjxf5Ppv88saIf4NMrBg7Lnjt88.asa (hash: 8f9M0wG41PE6ZfVDs5zv6PTV0f6czRl9ExFIm9zaW0o=)
                          17: t0cVkqPZjARFv36ftR5F1LXB_P8.roa (hash: aH1VNEGWBhfBG6pKNECJ5Njp4Dom+Xvfv76b48XldZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 01:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:ef:e0:e2:bb:6c:fb:6b:13:5c:58:6c:6f:60:c8:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
        Validity
            Not Before: Aug 15 01:01:10 2026 GMT
            Not After : Aug 16 01:01:10 2026 GMT
        Subject: CN=edf5eca78df0143e636a1198252ef5ac15d25ebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:37:93:79:ce:cb:50:90:1a:c4:9e:a3:be:79:
                    48:f0:bc:f7:95:c6:0a:1c:64:d9:9f:69:5d:28:89:
                    68:2c:30:51:ad:cd:47:1d:46:43:d5:be:ab:1c:2a:
                    8d:bc:63:b4:7c:7b:25:b4:9e:01:33:0a:30:b5:93:
                    17:47:dd:6b:12:c3:37:cd:d1:37:12:6a:c8:cf:1f:
                    84:56:e6:2d:71:c9:ce:c8:b5:0b:85:db:db:d1:a4:
                    89:50:e4:89:06:40:26:9c:e8:7d:4c:b9:d9:67:9f:
                    22:92:63:a1:54:86:95:61:e7:4f:83:4f:8e:1e:8c:
                    34:32:90:ac:f6:0c:d3:f8:d3:de:b5:94:2e:81:ec:
                    79:b1:88:6e:2b:75:f7:0b:d3:c1:66:b3:68:9f:02:
                    c1:21:84:85:57:d0:f4:b7:1f:b0:99:b2:29:f7:f3:
                    77:7e:ec:de:89:5f:00:bf:1b:61:64:48:82:0d:cd:
                    21:ce:99:6e:76:9b:52:a3:40:20:89:7f:a6:b0:86:
                    50:de:c1:f0:88:60:03:a7:b6:47:81:d0:72:3a:2e:
                    86:ab:61:0d:7f:11:ce:7a:f9:3b:69:64:af:db:a2:
                    98:65:8c:e9:4c:8a:13:ed:fe:f5:13:df:0c:58:a1:
                    2a:81:fd:22:f9:4f:70:a5:1b:7e:60:11:66:9d:28:
                    89:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F5:EC:A7:8D:F0:14:3E:63:6A:11:98:25:2E:F5:AC:15:D2:5E:BC
            X509v3 Authority Key Identifier:
                keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:e2:64:15:ef:ce:87:cf:db:e8:7a:63:de:2b:d4:eb:b5:98:
         2b:8b:08:c0:63:00:71:9a:5c:15:7d:38:82:44:5b:b5:c2:86:
         e5:82:c8:03:95:8f:0b:c2:92:52:0c:54:98:71:de:4f:c5:53:
         52:a3:60:43:64:df:02:11:32:ca:fb:f3:70:55:54:67:10:09:
         b3:f3:25:fe:ab:d7:c4:c0:61:86:3b:c7:37:e0:6d:d1:a1:aa:
         4d:55:13:06:cf:97:28:3b:9c:d4:2e:5e:6d:c6:db:b4:5c:84:
         0e:ac:f6:af:4c:f2:35:79:d9:a2:f5:c2:80:7e:46:a5:42:01:
         d0:9e:8a:c1:04:09:7b:6c:77:19:7f:47:44:1e:2d:33:0b:bc:
         3b:cb:7d:0d:e6:5b:cf:9f:8b:59:0e:25:63:00:e3:b9:37:ec:
         a4:77:5d:6a:e4:84:b9:d7:ef:9e:af:d2:23:b7:d8:62:a8:ff:
         87:4a:ac:b1:ee:7d:82:46:78:80:35:51:ba:49:8a:3d:8f:3e:
         6e:d9:9d:51:24:02:18:68:ad:c0:e6:59:6e:74:2e:7f:3d:bc:
         a2:98:09:cb:d5:0b:03:5a:29:30:1d:22:3a:99:1e:e8:a4:e0:
         85:b1:dc:4c:b6:65:c5:63:2c:f7:fb:f9:c8:4b:1e:ca:52:d4:
         35:45:ed:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:07:28 2026 by rpki-client