Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
File:                     fQakK7JEblHxkuo3W99-7FpRx38.mft (raw, json)
Hash identifier:          BJWmxBpD2+qm+rUESjlXaRMx/ne1+bmAWXYLffS1zBs=
Subject key identifier:   C7:84:4D:56:27:DA:CD:F0:A1:58:9A:A5:25:E4:9E:B9:CF:D3:8F:46
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Certificate issuer:       /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial:       01A1DB7019A7E80FDD75F70A30AFA9FC3AC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
Manifest number:          1719
Signing time:             Sat 14 Nov 2026 19:01:59 +0000
Manifest this update:     Sat 14 Nov 2026 19:01:59 +0000
Manifest next update:     Sun 15 Nov 2026 19:01:59 +0000
Files and hashes:         1: 0KFRQQB9Lc0XuWKXvA0dnIy2njg.roa (hash: 9PNcCkZrauXgW+3YFUtyOx9/rmS3W9JA5UUSg4BFsGU=)
                          2: 2diwtm0Zbf_bmsdktiMcMcOMQg8.roa (hash: eVMbVKsLzh2plyfnoFozWhZn/xVtpLdpwRt+PjQnri4=)
                          3: 2hKTftFtuQRMT1oaso9aJ2Fwbhs.roa (hash: yt73gkjCnEpWOl4mDI2UvWLYkd+MzKzlxXOQLXQ8/rg=)
                          4: 3Q5j-7Pt8HcUq6bBHu3dKDediOU.roa (hash: 5c1NCBuQPjwD9eR+7rowyJnrFaKqJ48pXAIHslQmr00=)
                          5: 8NYcGLI50NHf_-GqbpzZZr4ltLA.roa (hash: fEaVNw2Wyd4+MGZ7FzjbEUafcEBr+2hDrYVvqLoZo5Q=)
                          6: 8jfqpIUKuOw3bEeNl0QjuTIts5w.roa (hash: lA+JjzalnUsshqDeIEjkif9B6fmiylkMishkEuJTw+c=)
                          7: 9JzLr_kY6fV9XLrISkFEllTE8Yg.roa (hash: vLCl7UqAkvLu4Gv7Uv3OI5gYhrAd84MopPXeYDD7onk=)
                          8: 9gIUZ3-KWFOqbPCbkWI5yHzecO0.roa (hash: jjpO0DxwKQMyYQwBPNQVarsVnFCb4DMo73zMMJVeyFI=)
                          9: BHMecBG9x9xUY8jTjlOT7nNxN9k.roa (hash: HYJY2r76YQlta0gJBproON2MhOd3SZjrPkPVpXkWpDU=)
                          10: Ez7vdg6eB07lFL05DPjqJKCOdIo.roa (hash: fBYYvlQ87n8J9SuhX/gsPnpOFHNxq/I9XnmkEjxP+Js=)
                          11: FLQX7VTxwFaQrQRyhh5AZ1ehPTU.roa (hash: TCoATecBzXKE+6xHAeP7h7guA+jHThVu36yV5nbsOcM=)
                          12: HMUv5O_IloNPK-xnYoboUUQaw9I.roa (hash: pWKPihhcLAd/kMZDUiPWP3Bf2PaOFgTs9krixFbyXKg=)
                          13: M23E5jFvo9QE4PZ22sZCcc77gm0.roa (hash: ez6ZtNmZWmq4SxAtsTn9ZRzqCWD4ICp/AVepQiwyNEI=)
                          14: M9SkjzKgp0C1w36F_3V-rwxzPrM.roa (hash: NOgmWBFIBR8qfeBLcrBHcBrGBBxychhI5zlw8nvAaeE=)
                          15: TCIbufkPjrOPAFHbaMVz2PJuwNQ.roa (hash: WtRiQqaxy0ZXMWLqBVnrOC4eZHImJ1xhzNYsapZ1pnA=)
                          16: UiWVNnunpHFmIczXpq49fnvJeYs.roa (hash: w0Bd3rOlh3OoeFYCrP5Yaea4iK5WgTyMFaHq0kqZRqk=)
                          17: WToUjwUwqxWGFX7YfgHrsOMgM_8.roa (hash: kIIRszKRMT6GNaYzUy0dv+/IIIR5RaGl85LSnUgSJ+k=)
                          18: ZmxAzTdpyOHGn1oGXDJkCvMWh_A.roa (hash: RJ1urSQtZ0MaFoKerRAcxgAUxsoMUSf8Kqmy+pHBJcs=)
                          19: bxDMk8rDIjX1JIaOhPkkS6agVn8.roa (hash: qdJb7Cn9TFHTehw1Um25RR8YIvGg9qXGmexGQanw2Jc=)
                          20: fQakK7JEblHxkuo3W99-7FpRx38.crl (hash: 4g7GKriRw8x6uH1ONWlniXZuV1rn2j20Fdr/+zwMuzc=)
                          21: gnDB9W02-r6mUcSzv9GpwgZT3jo.roa (hash: xF1q8i5GseG2Y/ChOFm114hCxbfrQRyX8F0vQWk71OI=)
                          22: go1rZLit0ECxEQHq3kpBk2CE4Qg.roa (hash: hJVabNE+muWiI6lmIeSiA8icGMZrwMb4YKQs1wbCUu8=)
                          23: kx0iDFbsXmf1_joPchYNl-Qa3D0.roa (hash: 0natnuOE/XONkp7+7SAGpqgXtC+NNO9MQZlBw7eJSr0=)
                          24: lqCu78LtvHJishdD6N4eR-R7RIM.roa (hash: iKTkz66NrpLAcH4+xiDnu+/37wuOGvm5ZNIxFMyUSUw=)
                          25: ovaw2-C0aLc15MUNM--nHeVzXAk.roa (hash: k6KOhUlHQLtwN5AMkDyj19Newr/qZ7SL0hXw1sn09K8=)
                          26: ovqAK3pYOqxaHlVK-LqO8cHqIYM.roa (hash: W0pJB/sjr5+69ynLbPfenFx2cuPhFShby13x0oho2no=)
                          27: pv9Cpord1y0tCGV7NVJXrmWgS28.roa (hash: ue24VSBSX2J82akgvFk1ddcbgpuIzB8HeE+GFQFimS4=)
                          28: qvYAP-lSXmNoClOM3rygyr0zdI0.roa (hash: XZWaUj3+lj06izt55k5PBSAGEgz79sdEGihL99kraEo=)
                          29: xWAzCmZMcG-JDSiQJKOLozSrRc0.roa (hash: lzdIYy1HSi547j5LHsPdxL03SsyIBHEZ8dTINmo4ArY=)
                          30: zN7eJocMGhWq5niF73RM-dIuVIM.roa (hash: oo32X248IIf2Wa+j4gsxo5ikGlQv9o+0FiBYs6RXCgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 19:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:70:19:a7:e8:0f:dd:75:f7:0a:30:af:a9:fc:3a:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
        Validity
            Not Before: Nov 14 19:01:59 2026 GMT
            Not After : Nov 15 19:01:59 2026 GMT
        Subject: CN=c7844d5627dacdf0a1589aa525e49eb9cfd38f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e9:c6:3c:33:de:c1:60:77:76:bc:70:12:a9:
                    c2:16:ab:86:8e:fe:ae:ca:73:7a:61:13:3a:78:6e:
                    47:d0:71:87:fb:ff:d3:4f:de:8f:7c:60:91:1a:26:
                    2d:09:29:64:86:28:18:54:20:ee:aa:be:be:85:cf:
                    28:c2:58:e3:a8:aa:4e:3a:e8:c4:e0:50:0a:ba:25:
                    19:5a:3b:78:32:59:e6:72:50:09:69:73:e4:bf:ec:
                    f1:f3:d6:21:22:f4:7d:6e:b5:a5:91:8d:c3:47:54:
                    5d:67:3a:ae:1b:e8:e7:31:16:02:83:77:96:0a:61:
                    73:b3:ad:cd:ea:c2:8a:36:14:70:a8:f6:a9:63:b2:
                    0e:98:e0:7b:fa:bd:d0:ee:bc:35:c9:db:34:10:ee:
                    a1:b0:17:e2:4d:8b:69:85:a4:26:ef:ff:89:72:3e:
                    2a:5e:a8:57:79:69:82:d6:3d:ac:d4:9a:f8:eb:fa:
                    4a:91:15:be:e6:6c:d2:08:2d:a2:35:87:6f:d4:f4:
                    0c:9c:f8:75:68:2a:54:a5:47:8a:9b:02:a5:4b:b2:
                    4e:cc:d6:c3:19:1d:43:04:48:41:0e:99:89:d2:ec:
                    cd:2a:a6:81:e8:46:cc:69:e0:b8:75:18:d5:c6:e7:
                    0a:3c:7b:b5:10:f1:48:ae:71:13:fb:2e:73:e7:6c:
                    37:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:84:4D:56:27:DA:CD:F0:A1:58:9A:A5:25:E4:9E:B9:CF:D3:8F:46
            X509v3 Authority Key Identifier:
                keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:6d:60:fb:ad:03:2d:fe:e1:59:7a:84:51:8b:2b:6b:31:92:
         bf:49:95:fc:79:12:b6:2f:de:d7:c0:50:3d:5b:76:3d:db:46:
         6c:f7:54:65:03:8d:b5:34:02:11:9f:f6:03:b2:5c:17:cb:66:
         77:c7:50:e2:09:35:5e:72:79:13:f9:71:94:a2:5d:8e:11:0c:
         5f:2e:00:5f:67:77:76:5f:59:da:44:9c:fc:1a:cb:eb:e4:03:
         fa:9a:98:83:65:04:5b:26:73:ab:5f:85:35:44:b5:58:82:5a:
         37:ea:f8:d0:e6:5f:ef:a3:01:d0:b6:a6:b4:01:60:58:71:94:
         c4:1f:75:c1:8b:c4:41:b3:32:35:6f:ed:b8:e1:72:43:90:97:
         e7:0b:da:ce:e0:a3:7e:b0:62:ba:0e:95:cd:65:f3:ee:02:02:
         dd:5a:2c:c9:a8:17:1e:e6:6b:d9:23:9c:10:50:30:35:97:9e:
         7b:70:3d:41:21:cb:39:55:fc:7b:6b:f2:6d:7c:4d:5d:f4:37:
         54:90:a1:59:d2:da:29:dd:0e:ae:2d:a0:b2:b9:b3:5a:99:72:
         fb:ba:1d:21:7b:4f:70:37:6f:d3:dd:ee:f8:59:d2:c3:81:46:
         60:1e:4e:f1:52:7d:a7:6f:ad:96:63:ab:82:e7:bc:22:9e:3c:
         cf:08:55:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:09:03 2026 by rpki-client