Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
File:                     7bkm-MYDqrectGqIO_YyVko_qr8.mft (raw, json)
Hash identifier:          +4oHMo1IhOBYY9I6rMwyjhzFerxzj1G6EVRMbMNqpHM=
Subject key identifier:   15:DD:4A:20:0F:05:68:82:C5:D7:9E:9E:7E:69:6A:1A:0E:A6:09:E4
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Certificate issuer:       /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial:       01A1AB5E918E10393704D2A4B6446C74C761
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
Manifest number:          1B0D
Signing time:             Thu 05 Nov 2026 11:01:03 +0000
Manifest this update:     Thu 05 Nov 2026 11:01:03 +0000
Manifest next update:     Fri 06 Nov 2026 11:01:03 +0000
Files and hashes:         1: 5CiJxwVbdUZ8eM7me5oInvUUaLg.asa (hash: dP8XoNIksXb4H+NwZjef9TLwaeJ0Qhddyzp+zEO5+gw=)
                          2: 7bkm-MYDqrectGqIO_YyVko_qr8.crl (hash: /zXoKj/pfA9J1h3j3C1Hs90g88EA71mx1AlhwDQP+5s=)
                          3: ZOavrk-QF97rJP_2jNT7lmVgOvE.roa (hash: r2s3h1w3Hjfzrez9cKoP8cqtXCYOTfAkva8ue3B7Z2Q=)
                          4: b4zo6KiTgoc5L-wE1iEGLa3ot54.roa (hash: 7qq5CHWNx2oa5BEGotuEcxfckS6TczcC6U6UJrqCLzo=)
                          5: ffZakNnkJ9qo1A3shFhtl9qXd_Q.roa (hash: zf21A+pRvsATbzNE1edRMBnzKSA0PFpPQRbeA3NRvG4=)
                          6: g2nNQ5VhHao4Apal56-pguzsiBg.asa (hash: gNuWJZ3S7x7XLK2/IgqTwexYiw/r4lDYIjTdNxVRqcE=)
                          7: ySpczFe0bFDpQcjPCdkMrRLgsk4.roa (hash: 4bkzvAWfxVndAxO5MdGK6YbLnfuFOHsrNBENCi5CdAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 08:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:ab:5e:91:8e:10:39:37:04:d2:a4:b6:44:6c:74:c7:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
        Validity
            Not Before: Nov  5 11:01:03 2026 GMT
            Not After : Nov  6 11:01:03 2026 GMT
        Subject: CN=15dd4a200f056882c5d79e9e7e696a1a0ea609e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d9:b4:d5:c0:98:80:9f:f9:de:43:de:cf:6e:
                    92:36:19:66:7b:2e:16:83:3b:f3:00:b5:6e:f9:5a:
                    53:4b:ea:16:9f:5c:56:38:1c:97:48:d5:b9:96:d1:
                    19:19:0c:85:de:a7:60:b3:50:81:98:11:c5:63:bb:
                    ea:ad:23:47:fd:ea:d9:b8:fc:7f:ca:28:74:f0:00:
                    80:32:f6:04:41:67:00:4a:92:ff:e2:b0:c0:b2:f2:
                    8a:96:22:77:65:25:39:5c:f7:d1:9c:e8:d7:bb:af:
                    ad:2e:9f:1f:90:eb:16:67:cc:4d:e0:40:33:9d:af:
                    d0:d8:1a:aa:0b:13:37:94:c8:cc:d4:55:60:25:7b:
                    29:e4:bd:0b:7b:5b:87:be:4c:5d:33:83:2e:17:37:
                    6f:ca:39:3e:d9:45:aa:98:53:ed:e9:e4:c9:4c:5b:
                    dd:ef:56:87:12:ac:fa:ab:44:79:fd:95:94:7e:a9:
                    5c:f8:e6:fe:be:dd:34:45:11:41:01:f4:e6:73:f6:
                    05:bd:de:3c:f6:fb:07:fc:d4:67:38:ca:ec:70:20:
                    0a:9f:01:aa:e3:a3:97:5c:9a:8a:7e:2a:ad:f2:74:
                    2c:6c:62:24:df:4a:b4:4f:5a:2f:04:94:81:b2:55:
                    87:8a:d3:ab:6b:fb:5e:6b:81:b2:aa:81:af:4e:90:
                    49:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DD:4A:20:0F:05:68:82:C5:D7:9E:9E:7E:69:6A:1A:0E:A6:09:E4
            X509v3 Authority Key Identifier:
                keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:b9:11:f1:b7:13:57:19:29:6c:24:4f:4b:77:33:6d:21:78:
         8a:90:b2:fb:e6:b9:4b:e5:63:e0:45:5b:d5:3f:54:95:44:8e:
         23:88:72:6b:80:d3:ba:49:cc:9f:c6:05:92:34:ad:38:24:0a:
         33:40:cd:d6:4d:af:92:45:8a:60:8c:0d:67:b3:50:3d:5c:86:
         54:b1:5f:00:41:8c:07:d3:be:74:f2:8c:84:d5:bf:56:50:bc:
         54:bb:69:25:05:77:4f:02:af:18:3b:50:89:56:ab:54:ff:39:
         a3:fa:b2:b5:1a:dd:f2:ba:16:1f:cf:0d:22:51:aa:af:5f:d3:
         26:9c:1f:ef:6c:44:78:26:de:e6:c8:37:e5:f4:56:51:30:15:
         ff:2b:d2:14:07:75:e7:b8:8f:cb:d8:fc:c0:c0:63:9e:16:13:
         e2:82:22:a0:97:8e:6a:87:eb:22:a2:eb:ae:a3:db:15:df:e8:
         c9:c9:cf:e0:bb:88:5e:a7:94:a1:1a:bf:3b:4f:56:d1:1a:81:
         09:83:18:84:fb:e6:2f:67:60:97:00:97:fb:e5:83:85:3c:70:
         b9:5e:2c:27:58:be:cd:b0:f6:1c:38:68:c8:9f:05:ca:48:84:
         0b:5b:53:d2:45:25:76:46:b7:b9:bb:d0:01:68:c3:8e:f6:02:
         fc:95:3f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:31:45 2026 by rpki-client