Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
File:                     p-7aZdzUOH1yJwBcHhOgbUSHe28.mft (raw, json)
Hash identifier:          sGGdUU2Z5I6b6BxttqWKDK4Mi8ErIoAWm+DDSnI2fiQ=
Subject key identifier:   A2:9C:B9:38:52:A4:0A:33:8E:C2:39:CF:22:49:42:7B:A4:F5:34:43
Authority key identifier: A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F
Certificate issuer:       /CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
Certificate serial:       019FA97579E3E3045020D49A430BC834EF65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
Manifest number:          16E4
Signing time:             Tue 28 Jul 2026 16:01:16 +0000
Manifest this update:     Tue 28 Jul 2026 16:01:16 +0000
Manifest next update:     Wed 29 Jul 2026 16:01:16 +0000
Files and hashes:         1: 2U0mDkF6k188FlI68TZ1uJWmy1k.roa (hash: 7JEOUa3UIN+/J9E0Zd5VhYU2fI+uSkBnOTYRU58DUPc=)
                          2: p-7aZdzUOH1yJwBcHhOgbUSHe28.crl (hash: 0Y9o5iwiNTCrfent3KLljGI08BIayd26czT7MTJNd+o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 16:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:79:e3:e3:04:50:20:d4:9a:43:0b:c8:34:ef:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
        Validity
            Not Before: Jul 28 16:01:16 2026 GMT
            Not After : Jul 29 16:01:16 2026 GMT
        Subject: CN=a29cb93852a40a338ec239cf2249427ba4f53443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ef:4f:6b:91:f5:88:8f:9c:7f:75:b3:f0:36:
                    d7:b1:a8:6c:77:05:22:c5:34:f0:c1:39:ab:ae:ec:
                    d4:54:05:16:ee:6f:20:41:4d:c8:a4:1e:fc:7d:c4:
                    92:50:94:82:d6:92:d7:61:44:4f:b3:7e:e4:0a:b7:
                    f8:1b:87:ee:8d:8e:39:88:19:d2:4b:df:82:f8:e9:
                    43:86:76:7e:69:10:ba:f4:77:cf:09:82:38:fd:7a:
                    f2:01:da:6c:53:3a:ca:5f:0e:e0:ba:a9:97:e8:e1:
                    d3:d5:75:af:dc:b5:64:84:11:25:5e:7e:6a:c6:7f:
                    46:46:9e:a0:e8:41:f8:7a:0c:2f:0f:29:6a:a5:26:
                    fb:2e:d8:47:c3:c2:1d:fa:80:b4:3a:bb:fb:15:e7:
                    46:77:3e:8e:31:b5:3f:00:52:66:49:6a:f3:84:14:
                    07:be:4e:b2:49:5f:73:8d:cb:0e:32:f1:51:7b:09:
                    4b:23:b4:dc:71:a9:a8:0a:5a:90:93:95:43:af:ce:
                    87:0d:00:05:20:5c:86:d8:92:e0:1a:2f:cf:fe:09:
                    58:89:22:b6:18:39:ba:99:70:1f:82:c2:71:4c:8b:
                    f8:43:3b:20:ad:c0:0c:5a:b7:9f:9d:a9:ea:0a:80:
                    6c:9e:93:a7:ca:54:85:9b:40:1c:d9:82:b3:4d:b5:
                    10:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:9C:B9:38:52:A4:0A:33:8E:C2:39:CF:22:49:42:7B:A4:F5:34:43
            X509v3 Authority Key Identifier:
                keyid:A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:9f:61:46:fc:cc:3c:e4:2f:e0:d1:13:d8:eb:19:84:68:c5:
         16:d5:c1:bb:aa:28:5f:78:ae:db:8d:3a:ed:c1:67:dc:9b:e1:
         25:b6:6b:29:4b:2a:db:01:78:b7:2a:ab:84:a5:ea:88:82:72:
         b9:c3:03:dc:76:ac:f8:ac:cd:43:ba:00:ef:8d:33:4d:0e:7d:
         1b:0f:5a:19:b3:20:80:54:01:f6:b5:ee:53:29:28:b8:32:cb:
         07:b8:96:0c:fd:a8:db:cb:40:a6:6a:9c:d2:4b:e0:33:c7:c3:
         6a:63:86:4e:1a:31:0d:36:03:1c:8e:72:e3:f1:01:f2:26:a7:
         13:29:65:2f:b9:f5:2f:d0:70:8f:04:89:39:a9:07:9e:29:de:
         cb:91:6f:84:f7:b4:55:c7:3e:9b:16:fb:39:ef:31:f3:5f:54:
         c6:37:cd:04:3f:73:2b:0a:2f:69:e4:f5:59:54:70:40:e3:2e:
         22:b0:09:8d:62:eb:24:ed:d9:b9:04:30:4e:10:6b:e4:93:52:
         96:dd:5b:1d:72:4e:35:24:ec:99:0d:95:5f:b0:60:e1:d1:2b:
         eb:43:b5:93:d4:76:35:79:2c:4c:f8:ae:40:92:52:16:1d:98:
         12:30:a5:d4:3e:a0:bd:9c:a6:8b:aa:9b:54:2e:e0:26:11:2d:
         ae:41:84:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:08:13 2026 by rpki-client