Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
File:                     7KM8lvAqnwvvJc04BqJGfKFlY3s.mft (raw, json)
Hash identifier:          GG9QFzsBS1uktHkGM0BHjVlitNu49doG7kO2CNBs1j8=
Subject key identifier:   B7:51:9D:4F:64:8F:F5:48:4E:97:38:A7:B8:FC:9A:79:60:DF:01:BB
Authority key identifier: EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B
Certificate issuer:       /CN=eca33c96f02a9f0bef25cd3806a2467ca165637b
Certificate serial:       019F1943CD5B543444CF700EAFBFB8FD7847
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
Manifest number:          1987
Signing time:             Tue 30 Jun 2026 16:01:41 +0000
Manifest this update:     Tue 30 Jun 2026 16:01:41 +0000
Manifest next update:     Wed 01 Jul 2026 16:01:41 +0000
Files and hashes:         1: 7KM8lvAqnwvvJc04BqJGfKFlY3s.crl (hash: qC6mN7h6Vg31rHtvPMUJay4cLbqqc9DCqhjSks5wdV8=)
                          2: C7fQ7Ve9jd1KjW3OO8oxR9QhSyI.roa (hash: R/aIjhVfQy4DuH2HYkC6Yf9teDlMa+Wx7kzzvb2vFZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:43:cd:5b:54:34:44:cf:70:0e:af:bf:b8:fd:78:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eca33c96f02a9f0bef25cd3806a2467ca165637b
        Validity
            Not Before: Jun 30 16:01:41 2026 GMT
            Not After : Jul  1 16:01:41 2026 GMT
        Subject: CN=b7519d4f648ff5484e9738a7b8fc9a7960df01bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:61:24:e0:9f:79:b4:77:4b:1c:4b:52:f0:d4:
                    e5:fd:17:27:4f:41:49:41:00:37:62:4d:bc:d4:68:
                    01:48:02:7f:7a:82:09:f1:9e:df:cd:45:b2:e8:aa:
                    15:74:56:ab:96:26:8d:68:a7:51:e2:95:e1:39:01:
                    36:76:de:ad:59:17:95:03:d1:4d:14:fa:04:cd:97:
                    96:7a:ce:4a:20:7d:bb:91:7d:bf:36:48:1d:cb:2d:
                    ea:2b:36:b2:5a:70:f4:d3:d1:2a:23:9d:7a:1e:17:
                    f5:23:c5:60:fd:dc:28:26:99:8e:75:ad:1a:4c:37:
                    bd:05:18:23:1f:fd:30:41:c7:c2:5d:d7:2c:4e:8e:
                    38:87:42:f7:d4:07:f9:0d:da:18:bf:d4:3a:b1:e1:
                    8c:a1:60:35:a8:bb:20:c1:39:1b:a0:33:1f:52:b4:
                    98:87:1f:b2:dc:90:0d:2e:f9:17:b5:93:9c:ec:33:
                    aa:17:11:a0:3a:e7:c6:06:1f:85:70:a2:f8:2d:7a:
                    b4:90:52:bd:09:03:9e:7d:11:99:68:a6:de:c8:79:
                    d5:a5:65:53:06:b3:79:cf:a9:38:76:b3:1a:f4:6c:
                    0f:bc:5c:ea:91:d0:1a:25:e7:5b:6f:74:ce:19:95:
                    d8:7b:c6:67:51:c1:5a:83:6f:74:4b:e7:cd:f0:21:
                    5d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:51:9D:4F:64:8F:F5:48:4E:97:38:A7:B8:FC:9A:79:60:DF:01:BB
            X509v3 Authority Key Identifier:
                keyid:EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:8f:7a:fb:14:d1:4b:dc:34:45:cc:83:c8:05:5f:1a:17:72:
         dd:f0:42:e7:07:7c:66:21:83:38:3c:ff:ef:8d:73:6f:34:e4:
         00:a5:8a:2e:06:62:c5:86:84:54:09:4e:12:fd:00:94:3e:bb:
         5b:26:92:63:ed:9f:26:29:c7:aa:a6:fa:bd:1d:75:04:04:c8:
         eb:99:5c:43:06:6e:6c:5e:b2:9d:03:e6:e8:b4:ac:17:42:b1:
         d9:e6:03:b4:f0:e4:3d:e3:e9:b0:9c:62:9c:fd:92:ec:2b:0c:
         d7:9e:4c:cd:27:10:b4:ce:4d:4e:09:26:25:23:f8:f3:7d:09:
         36:5b:30:bc:34:e7:5e:58:71:bf:bc:31:55:cf:4c:62:27:23:
         9c:be:c9:c5:28:23:2e:f8:39:f6:bb:68:6d:1d:1e:57:fb:ec:
         6f:22:fd:83:67:7d:51:04:72:73:69:95:f8:5c:1f:78:1d:f2:
         7a:ca:3b:19:0d:91:b2:2f:02:b5:67:be:26:50:ed:0e:1e:db:
         cf:e7:a9:a2:2f:e6:a4:3b:01:e9:1d:fd:3a:02:3f:af:04:47:
         5a:ab:ab:db:87:bd:34:af:ae:5d:db:a1:15:23:f7:86:68:fb:
         1a:c7:c3:03:2b:6f:d8:9f:02:53:53:ba:9d:e9:54:60:e7:40:
         ba:f7:50:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZQ81bVDREz3AOr7+4/XhHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYTMzYzk2ZjAyYTlmMGJlZjI1Y2QzODA2YTI0NjdjYTE2
NTYzN2IwHhcNMjYwNjMwMTYwMTQxWhcNMjYwNzAxMTYwMTQxWjAzMTEwLwYDVQQD
EyhiNzUxOWQ0ZjY0OGZmNTQ4NGU5NzM4YTdiOGZjOWE3OTYwZGYwMWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWEk4J95tHdLHEtS8NTl/RcnT0FJ
QQA3Yk281GgBSAJ/eoIJ8Z7fzUWy6KoVdFarliaNaKdR4pXhOQE2dt6tWReVA9FN
FPoEzZeWes5KIH27kX2/Nkgdyy3qKzayWnD009EqI516Hhf1I8Vg/dwoJpmOda0a
TDe9BRgjH/0wQcfCXdcsTo44h0L31Af5DdoYv9Q6seGMoWA1qLsgwTkboDMfUrSY
hx+y3JANLvkXtZOc7DOqFxGgOufGBh+FcKL4LXq0kFK9CQOefRGZaKbeyHnVpWVT
BrN5z6k4drMa9GwPvFzqkdAaJedbb3TOGZXYe8ZnUcFag290S+fN8CFdYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLdRnU9kj/VITpc4p7j8mnlg3wG7MB8GA1UdIwQY
MBaAFOyjPJbwKp8L7yXNOAaiRnyhZWN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0tNOGx2QXFud3Z2SmMwNEJxSkdmS0ZsWTNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi80OWFlNDItMGU5YS00ZTI0LWJhMTUt
MjVlZjI5OTBmMTY2LzEvN0tNOGx2QXFud3Z2SmMwNEJxSkdmS0ZsWTNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi80OWFlNDItMGU5YS00ZTI0LWJhMTUtMjVlZjI5OTBmMTY2
LzEvN0tNOGx2QXFud3Z2SmMwNEJxSkdmS0ZsWTNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe496+xTR
S9w0RcyDyAVfGhdy3fBC5wd8ZiGDODz/741zbzTkAKWKLgZixYaEVAlOEv0AlD67
WyaSY+2fJinHqqb6vR11BATI65lcQwZubF6ynQPm6LSsF0Kx2eYDtPDkPePpsJxi
nP2S7CsM155MzScQtM5NTgkmJSP4830JNlswvDTnXlhxv7wxVc9MYicjnL7JxSgj
Lvg59rtobR0eV/vsbyL9g2d9UQRyc2mV+FwfeB3yeso7GQ2Rsi8CtWe+JlDtDh7b
z+epoi/mpDsB6R39OgI/rwRHWqur24e9NK+uXduhFSP3hmj7GsfDAytv2J8CU1O6
nelUYOdAuvdQ6g==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:41 2026 by rpki-client