Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
File:                     7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json)
Hash identifier:          XDmHhRz3UHQTfdCEYsTIm1ss5tQt7uDNkSHh0+JP6Ps=
Subject key identifier:   70:11:EE:33:BB:BD:F5:A3:79:81:6A:D4:0D:61:83:A0:70:BF:16:C4
Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
Certificate issuer:       /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Certificate serial:       019EC4130D64CD8B39FF46DC3A0457C21A61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
Manifest number:          127E
Signing time:             Sun 14 Jun 2026 03:00:43 +0000
Manifest this update:     Sun 14 Jun 2026 03:00:43 +0000
Manifest next update:     Mon 15 Jun 2026 03:00:43 +0000
Files and hashes:         1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=)
                          2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=)
                          3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=)
                          4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=)
                          5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: /SgIWZ9jkQoTSp0vU62kd3ZtNcrAM86zRIRDPTlWSng=)
                          6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=)
                          7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=)
                          8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=)
                          9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=)
                          10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=)
                          11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=)
                          12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=)
                          13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=)
                          14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=)
                          15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=)
                          16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=)
                          17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=)
                          18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=)
                          19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:13:0d:64:cd:8b:39:ff:46:dc:3a:04:57:c2:1a:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
        Validity
            Not Before: Jun 14 03:00:43 2026 GMT
            Not After : Jun 15 03:00:43 2026 GMT
        Subject: CN=7011ee33bbbdf5a379816ad40d6183a070bf16c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d4:e3:ab:b7:f3:7a:a7:6c:55:86:35:34:54:
                    e2:88:59:df:cd:cb:70:e6:5c:c6:b1:4a:9b:7d:04:
                    5e:84:2f:a2:17:d3:10:78:56:31:5d:62:85:8a:77:
                    bd:9d:f9:87:fe:a3:03:ed:48:d4:e7:3c:0f:07:18:
                    5b:13:77:ff:f0:f2:c9:95:8b:72:65:51:d9:0e:f6:
                    da:8f:d4:81:de:db:98:40:d6:1e:78:86:88:02:43:
                    6a:99:89:2b:71:50:9c:45:06:9d:32:aa:ff:6d:1b:
                    c3:f3:89:57:15:c4:d3:8d:5c:b8:2e:5b:fa:b3:27:
                    2f:04:c3:e7:e4:38:ca:b1:19:00:46:60:49:5a:e6:
                    69:20:52:06:36:51:43:7d:6d:a0:0c:57:48:42:b6:
                    43:d5:ad:72:b8:74:bf:c4:fc:fd:01:24:8f:d5:09:
                    36:40:6a:93:e4:b3:2a:ca:73:9c:82:8b:70:a1:4f:
                    40:ab:52:9b:1f:71:74:92:1a:74:4b:7f:a7:a5:83:
                    8f:72:69:e4:14:33:b9:83:89:93:d2:40:3b:f0:00:
                    1f:bf:82:54:20:59:86:7d:a6:e2:c9:83:7a:13:bd:
                    31:31:74:88:17:8f:9a:50:ac:74:9d:77:73:e1:cc:
                    23:bc:b3:63:56:38:22:94:a3:d3:79:c9:a7:58:da:
                    9d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:11:EE:33:BB:BD:F5:A3:79:81:6A:D4:0D:61:83:A0:70:BF:16:C4
            X509v3 Authority Key Identifier:
                keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:f4:47:67:56:62:cd:9c:8c:ff:63:b9:ec:8b:30:1f:b7:f4:
         be:62:9e:db:6d:42:35:be:41:ab:b5:b5:7d:55:9b:a8:0e:05:
         05:0f:81:d3:f6:67:46:f4:00:e8:3d:b4:c2:90:8d:0f:ef:09:
         81:6c:fd:c8:d8:e9:be:a5:d7:7b:c0:fc:6d:43:fd:d0:65:4c:
         f4:0d:e8:6a:a8:e0:bf:ed:1a:f8:18:12:c3:2c:00:dd:97:5e:
         36:91:c8:de:19:42:ca:49:ee:9b:4e:55:6e:9e:81:7c:71:7a:
         e9:a4:f8:1e:5d:a1:cf:e9:10:53:c0:66:74:9d:2e:fd:70:21:
         40:42:4d:89:19:ec:2e:50:3b:cb:9e:59:eb:7b:02:50:d8:36:
         f4:a0:76:c0:dd:39:c9:f3:e0:fa:42:92:f9:f5:6d:08:0d:69:
         f0:88:06:86:99:be:fa:df:2a:1d:33:d7:b9:31:88:de:8d:a6:
         c7:2e:8a:c5:c9:ae:38:16:58:da:2d:d9:5a:a3:7e:88:c7:df:
         84:19:f9:6b:d0:4b:62:07:c9:8f:46:f4:be:d7:1e:ea:b3:bb:
         47:52:81:12:9e:20:3d:8c:37:aa:3a:19:65:21:4a:f2:ca:44:
         2f:e1:2c:64:99:7b:60:cf:3a:fa:49:46:a7:fc:d0:1a:af:3b:
         34:20:c2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:43:42 2026 by rpki-client