Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
File:                     ejUNAkrwH46vElcXyqA6r60YTh0.mft (raw, json)
Hash identifier:          4v2cTw8DwdgiTQ6zrJNv5x75v6j1NiPl7qq4Xpo/Ymg=
Subject key identifier:   7E:E3:48:73:E3:CD:A8:E0:A2:6E:05:11:43:F9:C1:76:45:A2:21:04
Authority key identifier: 7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
Certificate issuer:       /CN=7a350d024af01f8eaf125717caa03aafad184e1d
Certificate serial:       019F130AA2196C15CFC4A790C194F8D02ED3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
Manifest number:          1986
Signing time:             Mon 29 Jun 2026 11:01:31 +0000
Manifest this update:     Mon 29 Jun 2026 11:01:31 +0000
Manifest next update:     Tue 30 Jun 2026 11:01:31 +0000
Files and hashes:         1: 1-r7_fUEpPJ7LUjRWlFNkAxAOLSs.roa (hash: QA7GMjXjaXuTwdxfPne5d0+pqwIBxuYEEIDse7vYIO0=)
                          2: ES59hOIvPLDzVlJ0I-0JDt9aHrQ.roa (hash: uICrLcYcQwJ8TrC2iTXXi0SFYCmHd+cO9NYWiYi1hEQ=)
                          3: LyXo3omYYFGu0x-1vxCVc0jOXXk.roa (hash: tP3+/CoTgyHttLpNnNbTKpXPtaBjJcLwdaSRY8FXziI=)
                          4: Ux0GK8vhew9-6Io06jn8phMnWko.roa (hash: nIk3ffbMCGpJ8s89KtcodgQ7duWnbnupf2+qt/z+NVY=)
                          5: XOGzJgiv8zAvESFhap-saZBvegs.roa (hash: eulsgNSz45FKPDyCpVhnxj2XCa1xVua9poOew9IQNuQ=)
                          6: ejUNAkrwH46vElcXyqA6r60YTh0.crl (hash: H3114StLsjH20Uv4ONWh9SXHOj3SEfpm+nT1fm8GUKI=)
                          7: npu-xEBPXBXxkjcFkM42ClvBry0.roa (hash: oFDGroXu7G/kMj4/zbhdw+C0K6I1N4oL3NK6l6o4+Dw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:13:0a:a2:19:6c:15:cf:c4:a7:90:c1:94:f8:d0:2e:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a350d024af01f8eaf125717caa03aafad184e1d
        Validity
            Not Before: Jun 29 11:01:31 2026 GMT
            Not After : Jun 30 11:01:31 2026 GMT
        Subject: CN=7ee34873e3cda8e0a26e051143f9c17645a22104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e1:79:90:94:6e:92:67:54:76:15:e3:fe:e0:
                    17:03:d9:7a:5a:5b:cf:7c:6b:c7:62:39:5b:cd:65:
                    c2:41:cc:6e:ff:ba:c5:f6:91:e7:7d:cc:cb:bb:12:
                    bd:1e:ed:09:d0:48:b2:63:c0:71:2e:cb:5e:8f:c1:
                    89:23:13:40:e8:c8:7c:53:8d:9b:9e:22:23:29:92:
                    b3:d2:10:fa:3a:b7:48:75:db:34:1d:4c:d8:bb:3b:
                    98:98:49:c7:82:46:ad:f3:e0:d7:52:a7:97:4a:36:
                    87:8a:b2:27:c6:05:7d:77:df:a4:e9:d3:9c:fc:cc:
                    48:b1:5f:fa:cb:a1:33:76:85:b6:7e:fe:8a:5d:3d:
                    ae:b1:1f:77:11:1a:1a:74:23:4a:35:46:53:56:04:
                    24:c1:45:e1:2a:37:fe:60:eb:e8:90:fc:97:79:c1:
                    b1:81:16:82:30:d9:28:3f:b9:dd:2c:96:c1:86:6b:
                    a1:09:9f:6d:d3:d7:83:47:3e:26:06:87:89:2e:72:
                    da:49:c2:7a:25:aa:9f:8a:8d:02:fa:1c:3e:d5:c9:
                    9f:ac:d4:dd:4b:6a:20:e6:fe:e1:c1:1e:2d:dc:99:
                    5d:e2:02:c3:3e:6f:80:f0:af:77:d4:07:e6:72:09:
                    d4:92:eb:7f:aa:d1:a1:7a:c1:5a:1d:a3:38:f2:59:
                    c9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E3:48:73:E3:CD:A8:E0:A2:6E:05:11:43:F9:C1:76:45:A2:21:04
            X509v3 Authority Key Identifier:
                keyid:7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:ac:ab:b1:16:f0:cb:84:e5:1c:bb:46:0b:45:6a:ad:a0:4c:
         96:0b:06:01:ac:1d:a0:ca:cb:08:29:5a:f0:cc:23:a7:01:61:
         4b:91:bd:fa:92:f0:aa:a5:09:57:f4:2e:78:a3:bc:8c:80:1a:
         83:4f:4e:26:49:7d:f0:49:f3:ac:e3:5f:e1:53:a0:8d:88:04:
         63:47:ab:ff:e2:4d:ca:21:79:ea:79:61:ff:0c:6d:cc:59:52:
         f7:1c:3c:ca:e4:99:6b:6a:4e:71:df:f5:50:13:ed:dc:3a:4f:
         63:6a:21:8e:d2:25:0a:c3:00:86:67:cd:09:05:6a:70:47:20:
         3a:9b:2d:70:f7:8e:e5:3b:35:7b:29:3d:6b:06:a5:84:ba:a6:
         ff:c5:21:88:8e:43:c6:b8:ce:15:54:c1:9b:a4:84:c9:06:28:
         43:50:36:d7:83:2a:38:b6:eb:76:6a:4c:89:d6:e4:2d:3e:e1:
         62:cc:52:55:e7:b8:0e:24:71:89:df:66:54:08:33:40:49:41:
         00:2c:4e:00:41:c8:29:09:cf:34:60:c8:42:eb:c0:16:be:e2:
         55:67:f5:9e:b7:d6:90:39:35:8b:06:bb:96:57:3e:c4:70:ed:
         65:77:42:e3:de:1f:eb:00:38:dc:5c:d3:2e:01:54:4d:4d:ed:
         70:33:cd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 14:41:43 2026 by rpki-client