Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/eA-Kp9juLNFxq6aAElVCf5qr5UY.mft
File:                     eA-Kp9juLNFxq6aAElVCf5qr5UY.mft (raw, json)
Hash identifier:          b0P5v6DOIG96jd42iIMRszd5zJWjo/KpniSbdKNlp+4=
Subject key identifier:   6A:8E:0C:81:67:B7:A5:04:78:58:B1:57:8C:AD:13:FC:62:61:64:E0
Authority key identifier: 78:0F:8A:A7:D8:EE:2C:D1:71:AB:A6:80:12:55:42:7F:9A:AB:E5:46
Certificate issuer:       /CN=780f8aa7d8ee2cd171aba6801255427f9aabe546
Certificate serial:       019F8F100AC1C9225CD914FEF21D0C743F38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eA-Kp9juLNFxq6aAElVCf5qr5UY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/eA-Kp9juLNFxq6aAElVCf5qr5UY.mft
Manifest number:          FB
Signing time:             Thu 23 Jul 2026 13:00:20 +0000
Manifest this update:     Thu 23 Jul 2026 13:00:20 +0000
Manifest next update:     Fri 24 Jul 2026 13:00:20 +0000
Files and hashes:         1: 00GxFGgSEySvshhLvY9ijcX9cHQ.asa (hash: XgApdRt20J6F9KR7+CzL9K2aoKUuYUpSKhKCy3ZojEY=)
                          2: eA-Kp9juLNFxq6aAElVCf5qr5UY.crl (hash: dHaVH9QpXlyn69XgmnkAOUxpsvTWIU70DoYRpKxU+SM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/eA-Kp9juLNFxq6aAElVCf5qr5UY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/eA-Kp9juLNFxq6aAElVCf5qr5UY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eA-Kp9juLNFxq6aAElVCf5qr5UY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:10:0a:c1:c9:22:5c:d9:14:fe:f2:1d:0c:74:3f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780f8aa7d8ee2cd171aba6801255427f9aabe546
        Validity
            Not Before: Jul 23 13:00:20 2026 GMT
            Not After : Jul 24 13:00:20 2026 GMT
        Subject: CN=6a8e0c8167b7a5047858b1578cad13fc626164e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:09:ef:cf:2a:b0:0a:b8:3f:d9:33:be:ac:c0:
                    7b:af:0a:d8:1a:a8:ec:a0:06:dd:c5:e9:c5:98:ce:
                    d1:a2:e3:45:11:ab:c9:cb:e5:f9:9c:39:ee:b2:20:
                    ef:72:04:65:52:00:2b:bb:f1:5b:ee:f8:37:4b:ba:
                    30:2b:d9:06:b8:75:43:23:31:95:37:f3:76:d5:ec:
                    11:45:04:af:71:8d:96:0b:bf:7b:42:56:44:bd:4a:
                    73:52:fa:d7:06:c4:ce:95:da:71:7a:a6:f2:a0:88:
                    99:0c:0c:1f:33:8c:44:39:7c:a2:28:88:45:04:67:
                    22:86:34:bb:fb:27:45:de:36:be:c3:e7:db:61:d8:
                    9f:37:7f:65:e4:c9:be:44:95:23:4c:59:f6:55:23:
                    53:1d:c4:5f:8f:99:66:8c:1b:c8:97:66:1d:96:4c:
                    7d:20:81:d6:14:dc:a2:d2:31:19:c5:b7:35:fb:e1:
                    82:15:ed:1c:4f:41:f5:65:27:21:36:f9:7d:50:29:
                    25:33:df:0f:03:73:9c:d9:a2:5f:6c:8e:a7:ad:e7:
                    73:34:38:5b:87:02:81:ca:f4:03:fe:24:ed:bb:f3:
                    4d:f6:76:05:32:23:87:6a:0b:0a:f8:91:4e:03:d7:
                    0e:af:4c:f4:c7:0b:6e:2e:15:09:d9:97:d6:f1:29:
                    29:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:8E:0C:81:67:B7:A5:04:78:58:B1:57:8C:AD:13:FC:62:61:64:E0
            X509v3 Authority Key Identifier:
                keyid:78:0F:8A:A7:D8:EE:2C:D1:71:AB:A6:80:12:55:42:7F:9A:AB:E5:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA-Kp9juLNFxq6aAElVCf5qr5UY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/eA-Kp9juLNFxq6aAElVCf5qr5UY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/eA-Kp9juLNFxq6aAElVCf5qr5UY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:67:fa:56:eb:19:f5:a9:d4:de:18:1f:34:58:f1:46:c1:c5:
         28:3b:19:7d:b6:b7:f2:73:2e:3f:59:f7:5c:92:b3:8a:71:05:
         d9:65:e8:69:97:92:7b:57:56:e3:c1:66:5f:8c:66:97:b0:1f:
         2d:76:45:64:f0:0d:8a:d0:d0:d3:db:8b:cf:97:f8:44:ae:99:
         d5:e8:9a:9e:72:40:ca:05:96:0a:47:87:de:26:6e:ea:85:1f:
         7e:bd:a5:40:53:86:e4:df:d2:2b:87:96:cf:74:94:be:52:c9:
         28:dd:44:03:53:21:fe:f8:81:4a:34:68:38:74:d4:50:3f:96:
         26:5d:ab:35:0b:8a:c3:c7:34:5d:6b:44:a6:94:5b:0b:4e:9d:
         9e:ad:4c:1b:db:52:78:75:6d:2a:70:b8:83:a4:df:25:ce:98:
         48:5a:ec:8e:6e:54:82:61:9e:7f:fe:e0:90:0f:ae:42:68:4f:
         78:74:c7:d1:b9:e7:05:db:2b:ba:b0:98:0e:75:33:60:f0:58:
         58:a6:ac:44:c1:3e:d9:58:8e:a8:10:61:5b:57:dc:11:20:20:
         16:bd:bf:57:6d:2e:18:a8:2d:b7:bc:f3:12:c3:4f:b7:52:69:
         9c:7f:7f:c6:8c:35:30:23:33:f5:46:0c:05:4d:22:2f:4a:a9:
         fb:83:42:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:10:35 2026 by rpki-client