Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft
File:                     v7CXo2wjJdEDH_QJG6AKhkWdQog.mft (raw, json)
Hash identifier:          Lv7zKCXlqcX7cylyeikb6WtE85JwOvlmaXd8bs2+niA=
Subject key identifier:   09:5B:94:7B:44:EE:69:EC:44:B4:50:23:64:04:25:5E:D9:41:78:D2
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Certificate issuer:       /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial:       019EB6FC3FC9A1CCFD01B0CCD1635DCBA1F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft
Manifest number:          196F
Signing time:             Thu 11 Jun 2026 14:00:45 +0000
Manifest this update:     Thu 11 Jun 2026 14:00:45 +0000
Manifest next update:     Fri 12 Jun 2026 14:00:45 +0000
Files and hashes:         1: 2JAGeWqOz-z8FVKdPCxyLtHJNFA.roa (hash: +TySuOsOtYESlmt3r8OIGn1Nao4rCD0nAMni4cCzhG0=)
                          2: 37plEvr9_SAxpS24SOyNrKA9Ebo.roa (hash: T+3X8+kwm0mxKJkDFOwSTGKX5y/yChg7gIfBo7o4fzc=)
                          3: 4v2abVtxmKK1EfY1UKsh5vBwTBQ.roa (hash: Fs7Ab7yQf/ulu1DAd1ofgpYjehocmFGlxjUMdJ2h/+Y=)
                          4: 6FvTo5bRSodTC6FDiz2fehPBQHE.roa (hash: apDjsNYn3O+BU+7M5QZsfrZaIB7/OL7UKbfG6C5NerE=)
                          5: 9KcHIAUvzuR2GWge4D-VK2067f8.roa (hash: 9sijw09CpBSxcD1XyR49IxKSXJ+lbUtfOT6XCsfhPs4=)
                          6: B8mKcjnkQ06bQ0cYOYl4NuSVaMg.roa (hash: BHHwvopeV4L0Tgx1rARSKD5k/JLb/fI5L/vuVF66caI=)
                          7: BmKkxsvsllYGRv2VQUx8x8IPybM.roa (hash: iJVvCwQgSkbFGgNZWYbEzkgvbnxvQYXvysN7fV/Jo/I=)
                          8: CTkFnxq5k5gkKBOyHIjTnJxEA10.roa (hash: wNOA1anlJOJNxwL/khfQbYI7GWefAhmxsi5L1GTuKvA=)
                          9: CybUaoE-1zIBrxVRyCGND427ieM.roa (hash: 8GMC+ouN1TxZrZlKa6hwbH6dJmnjXnGYbHSveCF/7PM=)
                          10: ELqztzBTOVJ9TbgArZg2cCQeUqs.roa (hash: RpN+biF12RBn9jYvgP/g7LA1mBZiYaf6GKLjllO7nRY=)
                          11: JO5erv-vSOU_O-xUynzRSVbHmIc.roa (hash: zMiR3ptMJOgOIdKG+IIwNcZj+cGNLnGMV7wyCQljD4s=)
                          12: JXnrULMb6DsHyM2cbpC7FtDo9UY.roa (hash: iamRHWkLnsJiPb+n+IZVDqFiRKag4o4LNxuZZzmL0jQ=)
                          13: Jb979-aOtFrxIQewqtQtN3rvkPY.roa (hash: h5kBwpidUiteAllQX66DeU4MAx24NppeXa8u24NM7iI=)
                          14: SybLZ24hhMiBkVFRqMhgG4Tt_So.roa (hash: jdIOIL7oBwjwXGbHbND2Uo+qRIMM4Rdpr2383Sxr5BI=)
                          15: TEEJpugeYt1F43E2tJGuUV3FeZA.roa (hash: DLdME2cAIv/rSNCUPiFiPYf01huYXXEj3+nEaRucgYU=)
                          16: Tg7LpYV7I-GpxinThcktcQRnm_4.roa (hash: BbXoN3AQWQv407qJGvIy6QX/6IL8zec6zQB0QjsD6HA=)
                          17: ZPlBlPD-W-maIRDabAoyZWrxupE.roa (hash: MQ/ql1GxKXsn5YKKa+q3cWZtrV1Ms5Llr3f8Hh6BGNE=)
                          18: c9_fZRRZyW0XDy9Nuj5gaWSKFjw.roa (hash: 1Hs4IJDmnuMEMdz/1IBBL0atJ2FMVY2hg6chmbt42Mo=)
                          19: lUbooQJTqUPsGNWs9whSoRmQ9io.roa (hash: kluWa3I7Ato5aw2LG6KL/4iV6N2sUDy3GUsBbZKsEa8=)
                          20: mhK9zCgXdFlII0XrtCsgCaL9xjI.roa (hash: hSBJb7L+mvFAKQjClhKXrHgKgsxf+0/Ah1GNpCqTJNQ=)
                          21: sMNPbaJ2swpQDptjsmEdLRBAjsE.roa (hash: wMrNQ1Dt9RdtalTcVqalUbl+Cb5VgC4Yw+MpJfT4roY=)
                          22: sWFQ2639y5fQaDmU5ThRk6YSWFs.roa (hash: YXKPoBXjKE1eqIFJiy/DtB2fJyWSkDcytdS8/Lx36Lc=)
                          23: ul8RfOvZQFi7b7h3CYZZMyB1Thc.roa (hash: ftj7d2qkg7awZuZD1JzEyU8qjVc4i/LwIGNmp8+f9gY=)
                          24: v1XAMryHcbVYBLXiFz1wOW3tUKk.roa (hash: JN1atA5xt1OyKxkpHh4rNxtPiXKSK2GbqwVySmKSgl0=)
                          25: v7CXo2wjJdEDH_QJG6AKhkWdQog.crl (hash: X7WaXQDLK9Xr0INfV5wyqR7Vll8/wOQv2mf5t0i0YQI=)
                          26: x0heqVIS4ldbm4VvDuHpvjwdG18.roa (hash: Q0/M1s9b+ez//kkSZOV821TfmbgQGcZ8JApzRiFz1/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:fc:3f:c9:a1:cc:fd:01:b0:cc:d1:63:5d:cb:a1:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
        Validity
            Not Before: Jun 11 14:00:45 2026 GMT
            Not After : Jun 12 14:00:45 2026 GMT
        Subject: CN=095b947b44ee69ec44b450236404255ed94178d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:85:b9:fa:0c:af:5d:c2:c6:5d:c5:a6:31:46:
                    0e:00:f0:dd:32:f3:ed:0c:bf:fa:5f:9c:d9:a5:8a:
                    7b:49:39:23:e8:16:39:c1:0e:62:d6:0f:af:71:63:
                    9a:11:ef:51:3e:72:77:35:01:88:69:77:4c:bb:30:
                    24:18:1b:21:33:a0:d7:4f:f8:83:d9:44:98:6d:6a:
                    89:25:9b:59:50:2e:66:d1:87:60:a8:97:4a:41:fc:
                    9d:e7:51:14:a8:10:a8:68:0c:46:4d:8a:ba:ab:18:
                    98:c2:fe:59:2b:95:63:82:67:d2:a1:48:94:fa:ff:
                    7d:71:4f:ad:b9:93:26:4a:23:b4:bb:5a:3e:65:46:
                    a7:37:78:21:ba:07:23:48:92:5a:8f:d1:9a:7d:bd:
                    4d:35:11:6d:5e:4b:b1:88:51:0e:eb:2e:d0:5d:bb:
                    fe:2f:2c:b1:63:d9:b3:fb:a0:ef:31:cd:56:ef:47:
                    8f:c7:9d:f9:cf:7c:af:4a:3e:75:ca:6b:44:5e:09:
                    ab:57:b8:92:cd:a8:a9:81:ba:42:8d:6e:1f:ed:7e:
                    35:d6:b8:c5:bf:c0:97:04:bf:52:56:a5:a0:36:5c:
                    1d:23:26:39:2d:7c:e0:13:86:55:01:47:04:dd:81:
                    ce:78:06:27:43:90:36:c7:14:bf:23:5f:d1:f7:6b:
                    fb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5B:94:7B:44:EE:69:EC:44:B4:50:23:64:04:25:5E:D9:41:78:D2
            X509v3 Authority Key Identifier:
                keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:5b:7e:0a:7e:cc:e5:8c:21:ba:d2:f5:0b:1b:74:6a:e2:c1:
         ac:9e:ae:6a:1e:e2:f0:4d:aa:77:6e:4d:06:41:b6:99:7b:b7:
         f6:67:03:02:93:ec:6d:81:7b:65:d5:32:e6:85:56:bb:71:c7:
         b5:50:3e:b3:31:ab:bc:15:cd:22:64:e9:c9:4c:b6:37:5d:b5:
         7a:00:88:5b:a3:e5:3a:26:6b:fc:62:a0:62:f8:a2:fd:78:2f:
         3d:58:89:4e:0a:f7:7d:35:e3:34:85:a3:0a:4c:35:a9:5c:a8:
         ba:9a:23:38:98:04:6c:96:bb:34:8d:4b:9b:64:ed:1b:42:93:
         c1:b7:37:6e:d8:2c:4d:02:3e:11:dd:7c:94:38:5d:32:17:f0:
         4e:11:32:9e:28:ac:85:aa:b4:91:48:b6:22:1b:5f:ec:d3:58:
         0a:f4:56:19:0f:11:75:99:02:58:90:bc:34:cc:a6:0a:d6:04:
         be:99:f6:63:ad:33:2a:29:91:a8:89:35:e3:0c:89:42:9a:15:
         14:81:43:9e:e5:7d:44:f4:a0:27:49:1b:8f:e0:98:72:49:f4:
         1a:6d:b9:23:c5:c8:e5:80:1d:b8:5a:2c:7f:c6:a8:19:b3:24:
         f0:8c:e8:2d:8d:02:6e:d3:28:38:ed:01:0d:de:b1:74:07:4d:
         e1:dd:6d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:52:25 2026 by rpki-client