Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft
File:                     7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft (raw, json)
Hash identifier:          z6QvmHYm/2UT5xRue9+SqATQbAWfEAJYePr3F23IucI=
Subject key identifier:   B8:93:97:CF:38:45:3E:86:58:C5:E3:75:D0:6D:E5:DF:99:BE:B2:C8
Authority key identifier: EC:CF:DA:EE:1E:9E:AB:D8:02:37:60:29:61:BA:A2:5A:BC:69:CD:64
Certificate issuer:       /CN=eccfdaee1e9eabd80237602961baa25abc69cd64
Certificate serial:       019F1A56A07B3378368ED6EB2B251A38EA5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft
Manifest number:          198A
Signing time:             Tue 30 Jun 2026 21:01:52 +0000
Manifest this update:     Tue 30 Jun 2026 21:01:52 +0000
Manifest next update:     Wed 01 Jul 2026 21:01:52 +0000
Files and hashes:         1: 7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl (hash: 47QduhMMtcMX1TxFxtiyX5X9TIYlDP+OcImaQnoX0Lk=)
                          2: ice_LDnA6TShJ0tbBNY5iT0MS20.roa (hash: Ne/xr7FxI4PoMf09Z/160yY/95SJ/bfXY5TJhx10TCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1a:56:a0:7b:33:78:36:8e:d6:eb:2b:25:1a:38:ea:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eccfdaee1e9eabd80237602961baa25abc69cd64
        Validity
            Not Before: Jun 30 21:01:52 2026 GMT
            Not After : Jul  1 21:01:52 2026 GMT
        Subject: CN=b89397cf38453e8658c5e375d06de5df99beb2c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3b:f0:97:37:bd:54:91:3b:aa:2f:44:37:44:
                    f0:c9:c9:f2:3e:3f:4a:93:a0:92:b6:a7:7c:03:4c:
                    f6:69:f3:66:f3:f0:25:da:ee:34:f6:d6:c2:85:0c:
                    3d:b8:b5:11:d7:94:00:f3:6b:76:11:5c:c9:9e:66:
                    13:86:4f:4e:49:8d:c0:a6:06:04:69:3e:64:bb:7f:
                    a6:a4:dc:76:81:81:27:e5:5b:a6:01:5b:d4:38:58:
                    4c:90:2d:61:f7:ba:da:6b:d7:f4:b6:d1:da:75:6a:
                    ba:a9:02:e9:66:30:6c:c8:bc:c6:44:4c:7f:df:c4:
                    51:40:8a:31:a6:e6:a0:86:16:f7:7d:d2:72:4a:4e:
                    06:4a:ca:a8:82:47:a3:e3:fe:4d:c0:4b:e4:47:c0:
                    c9:af:37:92:31:66:d7:37:a7:66:ab:0f:82:a3:12:
                    b5:e8:94:b9:05:21:fc:7a:c1:ef:e5:8d:b2:87:52:
                    e6:c4:98:91:c3:3d:45:5f:64:4d:f9:df:ef:3a:7f:
                    f9:6d:e7:25:6a:7d:d7:14:70:e7:1e:6f:b6:de:58:
                    a9:c2:07:e0:e4:a0:02:76:55:92:8e:89:24:c5:15:
                    cf:d6:55:6a:7b:bf:b5:a1:0e:9e:6a:5e:72:af:e7:
                    bf:0c:22:2b:77:0f:6f:2e:cf:b3:7d:e7:50:72:a2:
                    72:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:93:97:CF:38:45:3E:86:58:C5:E3:75:D0:6D:E5:DF:99:BE:B2:C8
            X509v3 Authority Key Identifier:
                keyid:EC:CF:DA:EE:1E:9E:AB:D8:02:37:60:29:61:BA:A2:5A:BC:69:CD:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:29:f0:b0:bc:f6:5d:62:92:6f:aa:18:1c:e3:42:34:a1:43:
         24:e6:98:3a:cf:23:b3:50:03:88:65:b1:94:1a:bb:6f:47:7b:
         5e:cb:96:8d:09:8d:6e:a9:87:ff:d6:8e:38:6d:b0:c4:98:74:
         f2:9e:a7:b9:3e:d6:83:f9:76:df:6b:89:6e:c9:bc:54:18:bb:
         14:61:17:f6:42:02:0d:3a:66:cb:8f:7e:fa:7b:7f:4c:57:a6:
         0c:ec:5d:b5:ba:48:ef:8b:dc:37:f7:92:4b:4b:22:73:c9:bc:
         53:10:34:d5:b5:31:4f:2f:75:e7:26:6d:7e:62:ce:e8:5b:e2:
         8c:6e:25:45:81:b6:4f:91:3d:28:f1:64:6b:4a:ec:e0:58:19:
         1a:da:31:e4:92:91:4b:03:c5:bf:77:08:58:20:e2:55:76:56:
         c9:f1:ac:8d:36:7d:0a:c0:8a:bb:a7:00:41:e1:8e:37:35:f9:
         59:4a:0f:00:61:11:41:b1:41:23:64:18:65:a6:88:d7:8a:e8:
         2f:91:f9:b2:34:f8:d7:47:91:8a:28:a5:7e:a3:c1:c0:71:73:
         db:1b:e9:84:83:c2:77:d6:e5:12:42:5e:ce:59:a5:6f:ee:0b:
         07:d0:68:25:a9:e0:77:84:5d:ba:c5:1f:3f:ae:d6:13:10:69:
         d5:41:ac:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:35:08 2026 by rpki-client