Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
File:                     7oAELqPLNIc97Q6wZJWU4v8jkIE.mft (raw, json)
Hash identifier:          t9nXWj5s1wD0LuKoyM0duX9NM4OTW/sDykEBgAvvzFY=
Subject key identifier:   72:18:17:BA:45:E0:BD:0E:4C:CC:B9:97:A3:FB:21:97:32:AC:00:5E
Authority key identifier: EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81
Certificate issuer:       /CN=ee80042ea3cb34873ded0eb0649594e2ff239081
Certificate serial:       019F194367451509FBD4197CA9E4BECD1A8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
Manifest number:          0D94
Signing time:             Tue 30 Jun 2026 16:01:15 +0000
Manifest this update:     Tue 30 Jun 2026 16:01:15 +0000
Manifest next update:     Wed 01 Jul 2026 16:01:15 +0000
Files and hashes:         1: 7oAELqPLNIc97Q6wZJWU4v8jkIE.crl (hash: NR/PKk/5HILOPoMOrDCy/IrMA4fhuXtY5hLfgVwUaiQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:43:67:45:15:09:fb:d4:19:7c:a9:e4:be:cd:1a:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee80042ea3cb34873ded0eb0649594e2ff239081
        Validity
            Not Before: Jun 30 16:01:15 2026 GMT
            Not After : Jul  1 16:01:15 2026 GMT
        Subject: CN=721817ba45e0bd0e4cccb997a3fb219732ac005e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b5:d6:c2:a3:27:9d:bb:1c:a9:dd:fe:97:c1:
                    bf:6c:43:81:4f:24:1c:e7:8d:57:61:7c:46:26:ca:
                    65:81:64:55:74:0f:32:c7:50:d1:5a:c1:bc:34:1f:
                    1a:8d:a6:2e:ec:b0:88:fa:6b:89:4b:52:51:3e:1a:
                    91:14:7d:94:94:9d:ed:a8:13:77:9d:15:9c:83:37:
                    3e:c1:d9:68:6e:d1:c1:5d:d5:00:ae:cb:6c:49:b2:
                    cd:62:c2:d2:86:ad:78:65:f4:72:0d:ae:aa:69:0c:
                    90:70:23:8d:12:12:e2:cc:be:d1:2a:62:68:4f:59:
                    32:09:ae:d6:4b:de:94:44:b6:f2:54:f5:f4:22:05:
                    2b:6e:fc:e6:38:e1:e4:c4:88:28:8a:10:8c:5e:ae:
                    2f:4b:6a:09:09:6a:40:66:2e:53:88:8c:81:44:55:
                    d7:ff:bf:32:2e:cd:68:dc:d3:d8:78:c3:e8:0f:e4:
                    ef:6d:e9:e5:ed:26:54:c7:ae:ee:0f:fa:54:a4:26:
                    ca:5b:94:c0:62:7c:e3:b4:9a:c4:3e:13:57:06:39:
                    0a:db:60:eb:7b:40:4a:d1:21:d3:eb:c1:a8:fe:1d:
                    86:e4:b7:23:3e:ff:4b:5e:a4:10:31:99:a8:76:cb:
                    fb:cd:30:98:40:b6:c3:72:db:b2:e4:ba:98:f6:00:
                    dc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:18:17:BA:45:E0:BD:0E:4C:CC:B9:97:A3:FB:21:97:32:AC:00:5E
            X509v3 Authority Key Identifier:
                keyid:EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:7b:0e:b4:7d:bc:b7:0a:9a:04:c8:f8:ba:fd:eb:ec:bf:a6:
         87:78:b8:6e:21:b8:41:e4:0a:06:e8:35:2f:09:68:8f:03:4b:
         ca:88:1a:c2:5f:8c:6c:f2:3a:bb:9d:f1:39:4a:df:e6:15:26:
         06:e5:7d:a7:5a:5c:9a:0e:de:33:9d:ae:50:4f:dc:84:6d:ea:
         16:38:e3:23:c4:61:f6:0e:10:4c:7b:e7:24:72:67:19:55:51:
         1e:fb:a0:18:b7:9c:79:5a:30:86:61:3f:c1:a9:1d:95:9f:d7:
         c5:7d:32:fb:9d:94:fa:5c:ee:0d:45:f1:ee:78:b4:5f:5a:88:
         ae:ef:32:2f:69:71:4b:a2:5d:c5:64:fb:41:46:18:1e:4f:73:
         0a:f7:98:ac:e5:46:b8:79:0c:ad:76:cc:75:10:3d:62:d0:09:
         80:0f:95:ca:47:c3:bc:b8:0e:7f:70:df:11:03:5a:62:4d:9d:
         3a:e9:0e:97:52:ed:cb:c6:e5:5d:18:74:1a:fd:cd:39:d3:c2:
         16:9c:cf:b9:ce:af:33:6e:77:48:ff:dc:05:df:05:6b:06:80:
         f6:ba:cc:37:4e:46:85:eb:34:4f:bf:35:77:81:ce:8a:c0:bc:
         e0:b9:5c:2c:1d:77:34:27:50:37:2d:14:aa:fe:7e:19:34:5a:
         85:dd:3a:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZQ2dFFQn71Bl8qeS+zRqMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlODAwNDJlYTNjYjM0ODczZGVkMGViMDY0OTU5NGUyZmYy
MzkwODEwHhcNMjYwNjMwMTYwMTE1WhcNMjYwNzAxMTYwMTE1WjAzMTEwLwYDVQQD
Eyg3MjE4MTdiYTQ1ZTBiZDBlNGNjY2I5OTdhM2ZiMjE5NzMyYWMwMDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbXWwqMnnbscqd3+l8G/bEOBTyQc
541XYXxGJsplgWRVdA8yx1DRWsG8NB8ajaYu7LCI+muJS1JRPhqRFH2UlJ3tqBN3
nRWcgzc+wdlobtHBXdUArstsSbLNYsLShq14ZfRyDa6qaQyQcCONEhLizL7RKmJo
T1kyCa7WS96URLbyVPX0IgUrbvzmOOHkxIgoihCMXq4vS2oJCWpAZi5TiIyBRFXX
/78yLs1o3NPYeMPoD+Tvbenl7SZUx67uD/pUpCbKW5TAYnzjtJrEPhNXBjkK22Dr
e0BK0SHT68Go/h2G5LcjPv9LXqQQMZmodsv7zTCYQLbDctuy5LqY9gDcdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIYF7pF4L0OTMy5l6P7IZcyrABeMB8GA1UdIwQY
MBaAFO6ABC6jyzSHPe0OsGSVlOL/I5CBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN29BRUxxUExOSWM5N1E2d1pKV1U0djhqa0lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9mNWUyYTctNWRiYi00YjM2LTk2MTQt
ZDUxNjE3ZTAyOTgzLzEvN29BRUxxUExOSWM5N1E2d1pKV1U0djhqa0lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9mNWUyYTctNWRiYi00YjM2LTk2MTQtZDUxNjE3ZTAyOTgz
LzEvN29BRUxxUExOSWM5N1E2d1pKV1U0djhqa0lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiXsOtH28
twqaBMj4uv3r7L+mh3i4biG4QeQKBug1LwlojwNLyogawl+MbPI6u53xOUrf5hUm
BuV9p1pcmg7eM52uUE/chG3qFjjjI8Rh9g4QTHvnJHJnGVVRHvugGLeceVowhmE/
wakdlZ/XxX0y+52U+lzuDUXx7ni0X1qIru8yL2lxS6JdxWT7QUYYHk9zCveYrOVG
uHkMrXbMdRA9YtAJgA+VykfDvLgOf3DfEQNaYk2dOukOl1Lty8blXRh0Gv3NOdPC
FpzPuc6vM253SP/cBd8FawaA9rrMN05Ghes0T781d4HOisC84LlcLB13NCdQNy0U
qv5+GTRahd06IQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:27 2026 by rpki-client