Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ed8llh8UGyFYbrmkC11BZtc7uMY.mft
File:                     ed8llh8UGyFYbrmkC11BZtc7uMY.mft (raw, json)
Hash identifier:          b04LtS2rqrgs+YvTLQho8WPW7Ka6nljoxmzHU4Kdb8o=
Subject key identifier:   9D:F6:C1:28:5D:5B:5D:A0:03:2C:24:AD:16:8F:08:B5:A1:36:AA:A3
Authority key identifier: 79:DF:25:96:1F:14:1B:21:58:6E:B9:A4:0B:5D:41:66:D7:3B:B8:C6
Certificate issuer:       /CN=79df25961f141b21586eb9a40b5d4166d73bb8c6
Certificate serial:       019F935B8B6286ECC21EA75961B9EE08F5CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ed8llh8UGyFYbrmkC11BZtc7uMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ed8llh8UGyFYbrmkC11BZtc7uMY.mft
Manifest number:          41
Signing time:             Fri 24 Jul 2026 09:01:17 +0000
Manifest this update:     Fri 24 Jul 2026 09:01:17 +0000
Manifest next update:     Sat 25 Jul 2026 09:01:17 +0000
Files and hashes:         1: 14vJMYWPfWJwLTm41EvJP3dxv0s.roa (hash: 6ta2h79FQjtJwBWFhRNFFHbCANlnZ9ggluTNDumd/P8=)
                          2: 2S_ID7M9u_dFUxvYaa-rOKZfxVo.roa (hash: azGZRtp2vi+dLaLafqy17TsgwENfpndyykRPxlFzCt8=)
                          3: ColFWMx2SicSK2vPCJtdp35IxLw.roa (hash: rN/XHcCGJxpspXE9IogMlXoXWrc2sWRTkNIB4nxC/V8=)
                          4: JfePGHZn8PdBCpyVxuC72hLezmU.roa (hash: qUZTXfZZMQWlR7HAmT2PJRdk8x5fYttpFcNmzhQ5xI0=)
                          5: XsO2HaqGs-17M3S_0Vkj-FO0Hco.roa (hash: hE1KJAdLZvP7FX5UT1YKHBqj5sFEzuymXQsrErEPbpw=)
                          6: ed8llh8UGyFYbrmkC11BZtc7uMY.crl (hash: CwxLzAjcZomCPk5u8oVUI1S1SAzEaJkeTigvj3Fy8Bw=)
                          7: z3o1Wljd8fwYujmKWAy7mtR3VdE.roa (hash: E81csimlsIdRleSilJPwt5zMyJxZ+MqkzRlol8b0D5U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ed8llh8UGyFYbrmkC11BZtc7uMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ed8llh8UGyFYbrmkC11BZtc7uMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ed8llh8UGyFYbrmkC11BZtc7uMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5b:8b:62:86:ec:c2:1e:a7:59:61:b9:ee:08:f5:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79df25961f141b21586eb9a40b5d4166d73bb8c6
        Validity
            Not Before: Jul 24 09:01:17 2026 GMT
            Not After : Jul 25 09:01:17 2026 GMT
        Subject: CN=9df6c1285d5b5da0032c24ad168f08b5a136aaa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:01:fa:4f:9f:1c:ba:88:f2:8a:a9:5c:49:e5:
                    13:d5:e3:9b:b3:93:3a:aa:d8:14:54:93:c2:27:4c:
                    bf:4c:7e:eb:c7:3d:dd:dc:f1:97:3f:d2:b3:b0:fe:
                    e7:68:ba:b4:f9:af:c4:9d:86:c7:0d:3b:16:40:9a:
                    85:de:8c:0e:01:14:aa:21:a7:9d:8a:66:fa:13:e3:
                    77:13:ab:41:9c:80:32:0f:22:a9:db:7b:92:bb:4f:
                    1f:3b:88:cd:39:90:d1:ae:a6:14:0a:06:4c:80:cd:
                    16:8c:fd:8f:4b:f0:98:20:ff:ca:44:9e:b0:93:1e:
                    dd:05:da:4f:d5:21:8c:74:fb:49:dd:dd:cc:e2:e0:
                    03:ce:47:bb:56:4a:53:3b:71:c8:89:90:e2:97:a7:
                    75:69:a2:f6:e8:57:47:0c:54:9d:e7:96:23:cf:17:
                    94:ae:a0:f9:21:81:6a:23:5f:82:55:7c:e0:60:42:
                    68:84:e8:d4:6e:b4:21:4e:61:da:95:2e:7a:27:ff:
                    5f:4f:9e:f7:fa:f3:79:0b:18:f5:c5:28:20:e8:0c:
                    ad:f6:bd:34:e5:a9:bc:10:9d:a3:8e:7d:f5:7e:d2:
                    f8:b5:2d:dd:a0:f0:db:5a:96:23:53:ff:34:6d:84:
                    5e:de:ab:80:d1:79:54:da:55:e0:b6:ae:2b:b1:58:
                    5b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F6:C1:28:5D:5B:5D:A0:03:2C:24:AD:16:8F:08:B5:A1:36:AA:A3
            X509v3 Authority Key Identifier:
                keyid:79:DF:25:96:1F:14:1B:21:58:6E:B9:A4:0B:5D:41:66:D7:3B:B8:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed8llh8UGyFYbrmkC11BZtc7uMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ed8llh8UGyFYbrmkC11BZtc7uMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ed8llh8UGyFYbrmkC11BZtc7uMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:59:8b:5d:a1:b8:dd:20:6e:40:04:b9:98:f5:e2:fb:be:46:
         c5:55:59:92:3e:a3:4c:99:10:2c:91:d0:a4:49:c3:8b:f2:05:
         5e:7f:3a:8f:03:1a:dd:6c:21:06:bd:03:30:95:d4:ed:d3:86:
         b0:12:41:1f:b3:d6:e8:b7:6f:cc:14:95:72:8e:d8:bd:17:ab:
         b9:c0:00:40:b4:97:ce:73:3c:da:2e:5d:e5:d3:4d:ee:e9:89:
         47:f3:8b:a6:33:d7:09:91:99:2e:e1:95:ed:34:af:2d:1b:8f:
         8e:45:18:9b:03:e2:61:9a:d9:87:54:0c:3b:5d:92:10:d6:97:
         ad:ce:4e:d4:9e:7d:f0:ac:53:14:4c:6f:21:3e:b4:7a:88:76:
         38:a5:05:b8:f8:ca:c3:d2:f9:33:9f:92:88:51:5b:83:e2:b4:
         fd:7f:2d:9c:c5:60:18:a0:11:7f:7e:32:17:a5:e2:d6:9c:6c:
         e9:a8:ce:0e:3f:7d:50:93:72:20:35:77:f0:eb:1c:a9:da:7d:
         40:a9:7e:f0:02:4a:07:35:0f:80:7c:13:7a:5a:a6:0f:0d:b4:
         6a:9b:8c:97:9b:90:1d:f3:82:2a:1f:f8:64:ae:6e:be:53:dd:
         a9:de:38:9f:7a:63:74:bb:32:c1:6b:9c:fb:ed:ef:ce:5e:91:
         85:37:5b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:21:25 2026 by rpki-client