Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
File:                     7We7dYi4LXDYy3PU5FF39n7O8hM.mft (raw, json)
Hash identifier:          UZRG22IXn06DJaPIDJmSNkcfLKJfI+4v1LS6Y/NoVVU=
Subject key identifier:   A0:29:94:B0:DA:68:84:DC:A9:42:79:B2:35:E9:2B:EA:26:74:CE:43
Authority key identifier: ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13
Certificate issuer:       /CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213
Certificate serial:       019F18D662DDCB9BD04874AD2F9A23697519
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
Manifest number:          06CB
Signing time:             Tue 30 Jun 2026 14:02:10 +0000
Manifest this update:     Tue 30 Jun 2026 14:02:10 +0000
Manifest next update:     Wed 01 Jul 2026 14:02:10 +0000
Files and hashes:         1: 7We7dYi4LXDYy3PU5FF39n7O8hM.crl (hash: rPEXIXYzn+L5N1uvlZ3jeE/bZsG7rqsiAp1XHJEnBVM=)
                          2: s7LS5E2_BqhGC5kkRJyj8qADFIY.roa (hash: F29Cc0fGTR/n9/kt6ymI38j28/wC/Ug/3ed8suC1jpQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:d6:62:dd:cb:9b:d0:48:74:ad:2f:9a:23:69:75:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213
        Validity
            Not Before: Jun 30 14:02:10 2026 GMT
            Not After : Jul  1 14:02:10 2026 GMT
        Subject: CN=a02994b0da6884dca94279b235e92bea2674ce43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f9:46:ef:9a:59:4d:f0:c9:4a:08:d4:df:e7:
                    10:b3:26:5d:70:56:d3:a7:f0:13:5f:8c:00:5d:46:
                    1e:51:bc:f8:de:73:a2:7f:b5:17:03:8f:1b:d6:1b:
                    9e:e1:5f:c6:8a:3a:b3:7a:aa:11:89:0f:80:ae:82:
                    e7:9c:63:70:58:50:0c:dd:e9:d0:43:a6:c8:c9:dc:
                    f3:65:7e:28:f1:61:26:7f:90:1d:8b:48:f3:13:01:
                    d4:bd:68:83:52:d7:8c:b6:1a:2b:cd:72:20:9b:dc:
                    12:de:a4:40:2d:3b:37:6a:cf:49:3c:2c:de:61:2e:
                    0b:5c:2f:30:c0:21:b6:ff:f9:a4:44:8e:00:89:d1:
                    03:04:1c:64:0f:85:60:d4:62:b4:05:e2:85:ac:59:
                    c1:c4:10:ae:4f:68:5e:12:a3:0c:f6:8d:99:a8:21:
                    9b:b2:0e:17:5c:78:ee:29:7e:28:0b:bb:83:69:31:
                    b3:64:8a:58:68:d9:57:2d:bb:e1:2b:de:92:ca:27:
                    7b:bf:9d:38:8b:78:ff:88:69:d4:4d:fa:f5:6e:7e:
                    9b:b8:47:c3:3a:7a:0e:f6:10:3e:09:c2:cd:c5:6a:
                    b5:95:26:ca:0f:4e:8a:64:08:eb:47:03:f8:9e:c9:
                    16:22:71:3c:31:ce:ad:6d:1c:71:68:3c:9f:8a:b6:
                    6e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:29:94:B0:DA:68:84:DC:A9:42:79:B2:35:E9:2B:EA:26:74:CE:43
            X509v3 Authority Key Identifier:
                keyid:ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:04:62:4a:5c:ce:65:47:c4:76:ad:37:d6:eb:b4:94:26:98:
         21:ff:bd:6a:38:1a:c2:a3:d4:96:20:64:16:19:44:73:1b:c2:
         00:39:86:d3:46:65:e5:7a:12:bc:f9:60:87:3b:1b:e8:33:0b:
         98:84:fb:46:2b:d1:41:7b:e7:c8:2f:0b:fc:09:7d:16:3c:dd:
         c0:eb:df:08:b8:b5:e7:03:a1:c5:ab:dc:68:6f:c5:6b:34:1d:
         76:1f:84:f8:ab:60:1b:40:68:92:7f:93:22:e2:73:b0:17:af:
         b0:15:64:83:04:32:09:18:73:4c:c4:c4:57:11:b9:1e:86:2a:
         79:dc:20:eb:a2:60:5b:ec:f4:54:70:f2:8d:50:1a:5e:38:8d:
         73:45:8a:e8:53:ec:d3:33:b0:87:fb:aa:35:f4:04:f5:a5:ee:
         6f:20:41:44:cb:05:20:a8:6c:7d:eb:8e:b3:15:8e:9e:ec:db:
         43:d3:33:8f:ce:e8:3a:f3:e2:54:dc:ca:0a:7e:1b:64:3c:26:
         27:71:05:01:90:46:18:64:d2:ff:09:41:1b:8a:88:86:93:1a:
         7f:41:bf:66:3f:0e:4f:4d:de:c9:51:f5:a7:02:f3:ea:55:0e:
         bc:bf:52:ea:10:02:c4:8e:8e:d9:2b:59:47:5e:17:34:a2:6f:
         bc:9e:0c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:21 2026 by rpki-client