Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
File:                     7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft (raw, json)
Hash identifier:          jc0CToTJqDQDEEK8iAhWtUtMx5vpjxmqWjrJNzk72Uc=
Subject key identifier:   BF:51:57:DA:8E:1C:85:74:77:96:FE:39:9B:BB:5F:2C:32:C4:33:4A
Authority key identifier: EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44
Certificate issuer:       /CN=ecfd8eaab5aeac3ce941fe125859b32a35251344
Certificate serial:       01A0024A78781CAC0B0625CF261454798E68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
Manifest number:          1760
Signing time:             Fri 14 Aug 2026 22:00:29 +0000
Manifest this update:     Fri 14 Aug 2026 22:00:29 +0000
Manifest next update:     Sat 15 Aug 2026 22:00:29 +0000
Files and hashes:         1: 7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl (hash: oLM29xJZFXtZteno2cKV9Fj0kSd/fn714XpflCwL720=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4a:78:78:1c:ac:0b:06:25:cf:26:14:54:79:8e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecfd8eaab5aeac3ce941fe125859b32a35251344
        Validity
            Not Before: Aug 14 22:00:29 2026 GMT
            Not After : Aug 15 22:00:29 2026 GMT
        Subject: CN=bf5157da8e1c85747796fe399bbb5f2c32c4334a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:76:3a:b7:cf:51:57:b1:eb:dc:a0:73:58:d0:
                    2c:30:b2:e2:c5:78:21:a6:07:5c:93:56:bb:36:04:
                    78:88:be:3f:ba:08:c5:cd:af:3f:b0:ac:80:6c:07:
                    a7:a1:51:c6:b6:69:95:9f:32:3c:ad:a1:20:7f:42:
                    8f:e5:0a:a9:02:b2:10:92:8b:87:7f:a3:6f:64:c5:
                    d6:93:24:d1:37:df:fa:38:c7:ba:4d:9e:d9:a0:03:
                    7d:d8:8a:fc:f6:1b:5c:cd:fd:f0:dc:79:e2:6b:51:
                    55:48:ab:77:be:ad:41:63:5f:d8:19:25:9d:e4:aa:
                    7b:1e:79:f5:e3:8e:32:16:d3:ae:9b:ea:37:d5:a5:
                    d0:80:d3:63:5a:af:19:9c:95:f1:1e:d8:29:93:3f:
                    34:f3:e4:a5:ae:80:55:b4:c3:6d:db:78:ef:ed:c2:
                    d6:ad:fe:e8:ad:78:ba:05:e1:00:e3:42:47:5b:38:
                    22:91:cf:7e:4c:db:cd:96:2f:ca:a7:e6:d6:37:7a:
                    9a:24:d7:16:a4:66:1e:02:27:75:e0:d8:40:fc:eb:
                    77:46:4e:0e:e0:4c:01:60:8d:cb:50:99:af:0d:ff:
                    cb:6a:bd:68:2c:6a:0c:4c:a0:cd:db:ab:40:7b:b9:
                    88:73:cd:97:8e:46:e9:ee:ac:17:da:1a:23:44:6b:
                    5d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:51:57:DA:8E:1C:85:74:77:96:FE:39:9B:BB:5F:2C:32:C4:33:4A
            X509v3 Authority Key Identifier:
                keyid:EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:d2:67:65:40:3a:9b:79:23:8a:f6:e9:40:ce:53:ea:30:5c:
         b0:d1:1d:a2:a0:aa:c8:85:fc:83:3b:e0:4c:c7:1b:8c:cc:b6:
         19:ef:51:75:48:34:37:df:15:c8:1a:d9:7e:28:dc:c7:d6:45:
         ea:24:7f:aa:4b:cf:86:80:4e:98:be:4e:79:43:ca:72:6b:d4:
         20:88:81:e3:b5:e2:35:65:43:64:ef:e5:b6:09:c0:61:15:0c:
         f5:85:b9:25:b6:9f:ee:da:f3:ac:04:57:cd:9f:fd:ab:24:c0:
         a2:a8:4b:d2:b5:97:6d:08:36:04:e0:29:1d:cd:63:a6:43:32:
         d6:7f:03:d5:79:74:56:94:41:9c:01:dd:59:f3:c4:36:51:dd:
         38:40:7b:d1:08:a2:56:8d:b2:49:f1:5c:e0:61:57:c9:ca:20:
         55:31:b8:3e:31:e1:4f:e2:35:65:f3:98:54:1e:5e:ac:49:63:
         93:69:7b:40:b5:3d:5a:c2:c2:44:17:8d:85:c5:27:80:d5:b8:
         d7:ba:48:ca:1e:de:a0:f6:fd:05:5b:dc:da:2c:2a:22:bc:0b:
         06:17:20:86:d4:2e:07:fd:b9:2a:54:6a:37:30:85:f6:fb:f0:
         25:12:cb:20:b8:8c:0f:22:31:9e:d7:e6:2a:da:d6:3f:49:f3:
         8e:2a:b1:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACSnh4HKwLBiXPJhRUeY5oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZmQ4ZWFhYjVhZWFjM2NlOTQxZmUxMjU4NTliMzJhMzUy
NTEzNDQwHhcNMjYwODE0MjIwMDI5WhcNMjYwODE1MjIwMDI5WjAzMTEwLwYDVQQD
EyhiZjUxNTdkYThlMWM4NTc0Nzc5NmZlMzk5YmJiNWYyYzMyYzQzMzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nY6t89RV7Hr3KBzWNAsMLLixXgh
pgdck1a7NgR4iL4/ugjFza8/sKyAbAenoVHGtmmVnzI8raEgf0KP5QqpArIQkouH
f6NvZMXWkyTRN9/6OMe6TZ7ZoAN92Ir89htczf3w3Hnia1FVSKt3vq1BY1/YGSWd
5Kp7Hnn1444yFtOum+o31aXQgNNjWq8ZnJXxHtgpkz808+SlroBVtMNt23jv7cLW
rf7orXi6BeEA40JHWzgikc9+TNvNli/Kp+bWN3qaJNcWpGYeAid14NhA/Ot3Rk4O
4EwBYI3LUJmvDf/Lar1oLGoMTKDN26tAe7mIc82Xjkbp7qwX2hojRGtd7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9RV9qOHIV0d5b+OZu7XywyxDNKMB8GA1UdIwQY
MBaAFOz9jqq1rqw86UH+ElhZsyo1JRNEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1AyT3FyV3VyRHpwUWY0U1dGbXpLalVsRTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYjg4M2EtNDg2ZC00OTc1LThkYmMt
ZDRiOTBiNmY0NjU5LzEvN1AyT3FyV3VyRHpwUWY0U1dGbXpLalVsRTBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iYjg4M2EtNDg2ZC00OTc1LThkYmMtZDRiOTBiNmY0NjU5
LzEvN1AyT3FyV3VyRHpwUWY0U1dGbXpLalVsRTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFNJnZUA6
m3kjivbpQM5T6jBcsNEdoqCqyIX8gzvgTMcbjMy2Ge9RdUg0N98VyBrZfijcx9ZF
6iR/qkvPhoBOmL5OeUPKcmvUIIiB47XiNWVDZO/ltgnAYRUM9YW5Jbaf7trzrARX
zZ/9qyTAoqhL0rWXbQg2BOApHc1jpkMy1n8D1Xl0VpRBnAHdWfPENlHdOEB70Qii
Vo2ySfFc4GFXycogVTG4PjHhT+I1ZfOYVB5erEljk2l7QLU9WsLCRBeNhcUngNW4
17pIyh7eoPb9BVvc2iwqIrwLBhcghtQuB/25KlRqNzCF9vvwJRLLILiMDyIxntfm
KtrWP0nzjiqxiA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:30:06 2026 by rpki-client