Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          PcF+YtOOxq+hrOu/7hzp5YYUL7rSz/hB+5MqCivmofY=
Subject key identifier:   27:4F:0D:0D:73:B4:C5:3A:7D:51:EC:BC:60:4F:1F:92:F0:70:36:82
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       019F8FEC4E649727D4A0D33EC3822E0B543B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          1A13
Signing time:             Thu 23 Jul 2026 17:00:56 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:56 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:56 +0000
Files and hashes:         1: 7ELbo8DKD8QOXRjssYS6wePnETw.roa (hash: g47QYVMiNHnqnXov0OVk0NOhZUsS+pa9D0jOV0goZEE=)
                          2: 7nHuEYfzq0sxBotIwOTKnrsuqJc.roa (hash: 5KEXUpcoESrkEUXw6CAMFCGMGysz+4l5l9DNIsTbLrQ=)
                          3: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: dVY327BxSJMhtVva18nclIajDw9DrD6+GDy2VzA3Gpk=)
                          4: Nr7UmKzHvs5LFBWxclEXNby8v-w.roa (hash: 6yVyO1xkWu0C7uNE6Y6DPlWxOVCuyQgMCCzQsQV5E34=)
                          5: PBeIIGkcHysJPrw2bh6-t7i6h2Q.roa (hash: 8GRkaUrE7jPN3KtBvtWO8Y/2n25/ErqReEtBTVUOJOM=)
                          6: QKB2yXBKCucZIik_NUkIUu-0gsU.roa (hash: Az9ohs2u7S8Tz5MIQmRIq0++DK7ITljN4NySQ9ZLZEM=)
                          7: R15U4TurpGZ6_74GJTZ7B1mnB5w.roa (hash: nCR8dGZ8Kanmd+TAXuyL33xBxmEOGcczAv2h+qPOvfM=)
                          8: UCp9_ApWUbgQGIa1NKLJ-cS_tv8.roa (hash: yi6xNjGkjqnryzu2NNxC+M1I7oPuwMvhO/Hni9IEjDY=)
                          9: a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa (hash: S+5zYJa35rHTKnwj7CXJQB2mrb0WWFh2WpXU/4m9ZOc=)
                          10: b7L24DGacCv1Jjj0E2xwOpKR_rI.roa (hash: dn3nM0XrClq6tP6low/fe+MmlfMR2imBrruQdtqUDrY=)
                          11: eJZw4lvkyTThK1hHF7ea4kiJbjI.roa (hash: Z63CbP8wrCiSbcvLHW5lkv40Jr5h6n5yJBfP7IOdvMQ=)
                          12: fiC8FoDEV1wgGCem1X1XF0O_lZg.roa (hash: /O+AtGpBwjj3rjKwzdQACIuoL2216zBEBnUVLPCtJQs=)
                          13: gHV84Ce0tQPq0MuD_bkU9QPAns4.roa (hash: re+X2TGGK92eU/L6LtTiYjKBQ/FAo99HrBg3gP7PqYI=)
                          14: gtsveEMSshs3GcdNL4F4hWCTTWo.roa (hash: RJctdCivuPc3UqTwjVyyJO6uirIWfQK/cVIp5Hcrq4M=)
                          15: i99u0goUMp8noCiOxLvsF0PjThg.roa (hash: BlAXZTEbYm5C8kWdW14+SQaoI4/b99p1HyX+X4SArGA=)
                          16: j9jFZwTJ0znYArYrP_wb7FovBv8.roa (hash: ry2e+m/h6zjqugwIc/oTaduBcZ+a/pH5c4SrYte7lzE=)
                          17: knv596giWxC-Wv303dib7Qt8Zhw.roa (hash: RYC30OCfNr/qMd5J5JMtEIe4zUUHIA5/DP4BCkCZcl8=)
                          18: pf1pBUnzxjHov513TFJHTqE4Iy0.roa (hash: Gqdsv31psN3b7M2TvRqD53MdlcZ7EHjfjPl3nHfwAmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:4e:64:97:27:d4:a0:d3:3e:c3:82:2e:0b:54:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Jul 23 17:00:56 2026 GMT
            Not After : Jul 24 17:00:56 2026 GMT
        Subject: CN=274f0d0d73b4c53a7d51ecbc604f1f92f0703682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:81:bc:05:a5:d3:3b:bf:10:7d:94:9f:fe:fb:
                    11:1e:a4:94:51:e8:87:12:91:06:22:29:cf:78:d4:
                    ab:df:73:a4:7f:31:3e:fd:4e:25:dd:be:57:8b:68:
                    b9:db:72:13:38:f2:c7:d5:34:dd:b5:51:f6:63:a3:
                    36:3b:8a:70:2d:5f:d2:8a:86:62:46:46:19:48:9b:
                    67:7b:0a:fe:e7:5a:95:b6:de:65:a7:ad:43:0c:50:
                    48:b6:53:53:64:74:31:8f:10:d8:22:76:71:56:02:
                    fd:08:8a:40:36:46:87:1b:ae:5b:0b:b4:9a:12:0a:
                    45:ca:95:95:17:1a:29:77:f5:22:5e:9f:f6:28:81:
                    5d:43:82:cd:d1:ff:bf:44:1a:dd:2d:f7:46:48:c1:
                    4e:25:f8:f7:b9:18:29:31:63:4d:f4:76:0e:5c:e6:
                    7a:ed:39:b8:a8:a4:b4:28:2f:89:7e:8a:91:bf:49:
                    ef:9a:6f:dd:05:c2:95:b6:4c:8f:3b:56:de:18:2c:
                    99:df:c7:e4:a3:eb:c3:14:d4:6e:a3:38:25:07:8f:
                    9d:1b:22:09:50:90:ce:97:3e:d1:fe:a1:76:9c:bc:
                    5b:02:0a:8a:d0:50:02:5e:66:28:a2:25:ee:43:70:
                    75:1c:d4:9c:9b:69:12:c3:c8:58:57:22:9b:69:b1:
                    5f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4F:0D:0D:73:B4:C5:3A:7D:51:EC:BC:60:4F:1F:92:F0:70:36:82
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:6c:8a:76:9c:9b:67:e2:f2:5f:1b:61:99:9b:2a:c6:ed:bc:
         07:a5:78:50:5a:f5:1f:b9:9d:90:67:39:77:4f:e3:4e:53:36:
         11:f8:8d:10:46:ed:19:55:23:16:ba:6d:01:a9:af:eb:1e:86:
         fe:b9:92:ee:48:c1:e8:1c:d1:57:bb:e0:f3:51:36:c7:5e:59:
         6e:24:ae:6a:c5:08:32:a7:bc:cf:50:b6:00:d8:04:fb:80:79:
         98:3e:58:ab:bb:73:7e:24:c2:78:01:33:3d:40:3d:f1:5e:6b:
         16:d3:d1:90:2c:ca:22:69:0d:16:32:fd:8d:85:b6:88:a6:7f:
         78:29:1f:c0:87:13:7f:1c:2a:0f:3e:f6:39:fe:45:8b:08:df:
         e4:0f:9c:08:7b:ac:53:12:ee:98:3b:eb:9d:e8:2e:12:36:b7:
         ee:b5:8f:d5:7a:06:bd:39:57:22:03:e5:41:45:cf:4e:07:42:
         f9:1d:37:88:6b:80:45:23:51:1d:60:d1:fd:48:f1:ed:78:36:
         66:33:e0:92:3f:e1:20:02:9f:86:9f:46:0d:96:0b:63:34:13:
         a4:de:26:78:ac:7a:fc:d7:56:79:ec:b2:c8:ea:be:b9:4f:88:
         b7:fa:c1:69:d7:a5:eb:d0:e3:28:3a:d6:5b:e1:47:09:37:93:
         e9:ef:71:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:53:59 2026 by rpki-client