Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.mft
File:                     7vUxSu71EyMZT9himFitIPuS3-c.mft (raw, json)
Hash identifier:          HrbZIpidzENxpAfwoNim6xVZMoG5x8esQWjzKP7LFoI=
Subject key identifier:   60:CF:28:FF:A9:CC:BF:04:C3:4D:0D:61:39:64:87:5C:CE:ED:76:9C
Authority key identifier: EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7
Certificate issuer:       /CN=eef5314aeef51323194fd8629858ad20fb92dfe7
Certificate serial:       019F3A861EB4DF7D638F8A98858C66B500A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.mft
Manifest number:          13
Signing time:             Tue 07 Jul 2026 03:01:35 +0000
Manifest this update:     Tue 07 Jul 2026 03:01:35 +0000
Manifest next update:     Wed 08 Jul 2026 03:01:35 +0000
Files and hashes:         1: 1-uHXLfEeiYHiTch5MI0Zp7Q1bh4.roa (hash: G3Wer1Ja0Zg4WiASwJya45QDTKp9SQuCj+KiMND2RVA=)
                          2: 5_lXPJSQU9TySGTavGFbItKITBs.roa (hash: DekZ9D2qFWZa7Ez80mvuUtfA/Ri8J/rWEExk+hN+XO8=)
                          3: 7vUxSu71EyMZT9himFitIPuS3-c.crl (hash: /1nxfI5V1F9x34Tta0WMAsG7q5OHyqnJweJPzLsm12s=)
                          4: 96qX2JLpDjn2X07felwpqaF7sjY.roa (hash: 8OLwijPizXuspcA2/2yKy+kso5hdoNgbsBiOkwU1wxA=)
                          5: 9bd2LKn8XCQKvN2LMDzf8_9A0sI.roa (hash: TbUpkh62Q6DCQx4wcGP/0x2T9DL2M0Cq6VM3i1VEMz8=)
                          6: HhZ_QfAVVWEjTUgyEZALP1SKayk.roa (hash: pzcqmWDZa4DD01+YgVwG705sYe7vn0DSP8QcQqTdsWY=)
                          7: IM-GaBMyAt8Wx5LQkr0Q2YeWPKo.roa (hash: WNroGT5F6T4UYLI7vxb3TnN4UxlV1OI9972pLF7MpP8=)
                          8: Jp0cb6lmAjIofXK10GnisV8ZJq0.roa (hash: E8QA5JIxNVXPh+bj011j4mkyCxYWDlMzp8siE3PNiv8=)
                          9: O9sZuea9ueIX-lBdeStJj66-2JI.roa (hash: B1HtqKm4bakXSo5Bvqf1h8mPwoWz2JJwr3pKb7a7K4Y=)
                          10: TXIMOOFbySOl_fCyrIFwzH38_Nc.roa (hash: zx/ZoqOHnaqrqnJEUUNhOkPvA4KyM2M6D+k4QPkptDg=)
                          11: _0QOD1iLOQ7nNSalXlUFq8l1DKc.roa (hash: 9LxeCfnSlKfLVjaLSznS7g6keBzye2Y5wzmO6/J4hdM=)
                          12: _3ArQV0WIang3Y6566MNDlymPSM.roa (hash: S0JVvSQqWxE9GBFw98DT6M/IND88wYzRZCFMXx8E6pY=)
                          13: fsEmSsUpWyo53f9AQKnorEz_4ww.roa (hash: tkIjMfF+pTOIvEkol8ZxDkjRrmIQ6yvvI8WH2ZoXkO4=)
                          14: oGynhP4aXvthVu259k5PADuu7eI.roa (hash: oFg8RD6YZkwg8VcybZyXsgYWwcUBqNDlpQuxw8vIo6c=)
                          15: uLYhHXi716fKyjZfx2gzJ3EGUdo.roa (hash: Ui8rN3SnhBXRoOn5kXrAN5pwwH6pPo/nTDK8l35up3k=)
                          16: up_4n9Lp5vZ0pW68blQb7h8SkG0.roa (hash: GmaLLFqrP/x4pgyZv+ywc9zn/BT0CMhI9r8ah9CWbhA=)
                          17: wOVkqT7ztZXxGTTzuM5l0LfJavk.roa (hash: jmFTZuFqzg3pZRsa0IUrlDUzQ6n73sahy63N4xlRN5w=)
                          18: yFXrcqKEf7nJS9o-jQnPMUU9qVg.roa (hash: UNp8aNbRb0sX19Cut1y01pHMseIIL4CXte8eLcUOE4w=)
                          19: ypq3zheWfc4DE8P4z1cwHhkjBYI.roa (hash: VKYU1qGd4RJ3o10B1EDz3EAb01WtMqx2qvaOQyXihWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 Jul 2026 03:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:3a:86:1e:b4:df:7d:63:8f:8a:98:85:8c:66:b5:00:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eef5314aeef51323194fd8629858ad20fb92dfe7
        Validity
            Not Before: Jul  7 03:01:35 2026 GMT
            Not After : Jul  8 03:01:35 2026 GMT
        Subject: CN=60cf28ffa9ccbf04c34d0d613964875cceed769c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:07:6e:d9:33:b0:c9:66:a0:a7:93:03:37:99:
                    0c:89:9b:a1:37:88:67:d0:ce:3d:38:44:b1:d4:f3:
                    2a:21:51:08:61:47:f9:0e:9b:37:14:11:28:41:f8:
                    e0:a3:e7:bc:17:12:f4:e1:18:7b:1f:74:d9:33:e0:
                    c1:22:ec:6b:ff:eb:dc:1b:c1:1a:35:0c:9b:43:20:
                    68:bb:0e:4d:06:b4:30:01:2f:75:94:5d:e5:4a:a0:
                    aa:ab:45:be:ec:b5:6c:ed:c3:4a:71:ae:53:48:dc:
                    99:f8:89:c3:d1:87:43:41:c0:53:9f:6d:b3:02:84:
                    40:e2:b6:6c:65:b4:5b:42:a1:ce:01:68:fb:25:93:
                    66:92:00:8c:bf:88:6c:2d:bb:e0:9e:d3:e5:0a:05:
                    40:17:ed:89:3f:1d:b9:3b:29:51:f8:37:36:99:cd:
                    71:1e:22:2b:6e:23:03:b9:6f:47:d3:0c:97:e3:ad:
                    25:61:47:1b:6f:a8:83:7b:dc:a7:47:96:16:51:1c:
                    c6:0b:09:90:e7:aa:e3:93:5f:37:b5:95:6c:a1:23:
                    48:57:4d:34:4f:4c:7f:20:26:4c:3c:c1:d8:04:4f:
                    90:82:cf:52:ce:c5:d7:c9:c0:42:31:8b:e0:ab:5d:
                    4a:5a:0f:af:79:99:68:22:8f:c2:4a:5f:d5:d2:87:
                    19:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:CF:28:FF:A9:CC:BF:04:C3:4D:0D:61:39:64:87:5C:CE:ED:76:9C
            X509v3 Authority Key Identifier:
                keyid:EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:e8:dc:77:8b:cf:32:72:31:4d:35:af:28:03:18:bc:01:69:
         ba:e5:3d:c4:44:ef:d8:c9:1a:f7:0c:a9:8b:e9:9f:35:f8:f4:
         26:bf:54:f2:17:20:b5:38:9a:ca:40:15:d3:39:33:d2:e9:1f:
         f9:fb:aa:4c:86:6b:a8:22:29:80:1d:ef:00:3f:b7:04:5e:c6:
         95:88:70:b8:cd:94:c6:a8:0a:b7:f3:b3:33:8e:71:03:cb:0a:
         e8:f0:4e:48:ae:da:7a:da:c4:79:f9:e4:bc:af:7a:39:9b:a5:
         af:eb:87:02:3f:39:10:c4:ff:75:e2:11:2b:61:16:93:19:5d:
         a5:d3:92:ce:35:b1:a7:6f:65:f8:6b:84:de:8d:60:78:c0:aa:
         c6:9d:da:41:3f:41:65:db:52:fe:2e:80:54:33:eb:f0:27:5b:
         c9:cb:66:f9:5c:fc:06:e6:5e:8b:c0:fa:b5:07:e7:09:35:b8:
         37:6f:31:c2:f5:61:f3:a9:7b:64:55:fc:c6:d2:86:e0:74:20:
         b9:15:fa:79:7e:55:db:8d:ae:2a:94:0d:da:d4:ce:fc:aa:92:
         d2:4a:a4:ef:ad:fd:3d:99:fe:e1:60:c6:b0:54:c3:94:ea:d9:
         04:5a:79:8f:e0:a7:50:fa:e3:dd:cd:18:2c:a3:c3:0a:35:0f:
         c2:ca:bf:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ86hh60331jj4qYhYxmtQCnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZjUzMTRhZWVmNTEzMjMxOTRmZDg2Mjk4NThhZDIwZmI5
MmRmZTcwHhcNMjYwNzA3MDMwMTM1WhcNMjYwNzA4MDMwMTM1WjAzMTEwLwYDVQQD
Eyg2MGNmMjhmZmE5Y2NiZjA0YzM0ZDBkNjEzOTY0ODc1Y2NlZWQ3NjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwdu2TOwyWagp5MDN5kMiZuhN4hn
0M49OESx1PMqIVEIYUf5Dps3FBEoQfjgo+e8FxL04Rh7H3TZM+DBIuxr/+vcG8Ea
NQybQyBouw5NBrQwAS91lF3lSqCqq0W+7LVs7cNKca5TSNyZ+InD0YdDQcBTn22z
AoRA4rZsZbRbQqHOAWj7JZNmkgCMv4hsLbvgntPlCgVAF+2JPx25OylR+Dc2mc1x
HiIrbiMDuW9H0wyX460lYUcbb6iDe9ynR5YWURzGCwmQ56rjk183tZVsoSNIV000
T0x/ICZMPMHYBE+Qgs9SzsXXycBCMYvgq11KWg+veZloIo/CSl/V0ocZUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDPKP+pzL8Ew00NYTlkh1zO7XacMB8GA1UdIwQY
MBaAFO71MUru9RMjGU/YYphYrSD7kt/nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3ZVeFN1NzFFeU1aVDloaW1GaXRJUHVTMy1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt
OTI4MTlkZThhMDM2LzEvN3ZVeFN1NzFFeU1aVDloaW1GaXRJUHVTMy1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2
LzEvN3ZVeFN1NzFFeU1aVDloaW1GaXRJUHVTMy1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuujcd4vP
MnIxTTWvKAMYvAFpuuU9xETv2Mka9wypi+mfNfj0Jr9U8hcgtTiaykAV0zkz0ukf
+fuqTIZrqCIpgB3vAD+3BF7GlYhwuM2UxqgKt/OzM45xA8sK6PBOSK7aetrEefnk
vK96OZulr+uHAj85EMT/deIRK2EWkxldpdOSzjWxp29l+GuE3o1geMCqxp3aQT9B
ZdtS/i6AVDPr8Cdbyctm+Vz8BuZei8D6tQfnCTW4N28xwvVh86l7ZFX8xtKG4HQg
uRX6eX5V242uKpQN2tTO/KqS0kqk7639PZn+4WDGsFTDlOrZBFp5j+CnUPrj3c0Y
LKPDCjUPwsq/Tw==
-----END CERTIFICATE-----
Generated at Tue Jul 7 10:40:43 2026 by rpki-client