Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.mft
File:                     7xU1l4vmsK16nLcOsFIvjJUJgqk.mft (raw, json)
Hash identifier:          IcFKMq95xPdW3s1EP3PTahy/aLLY8jhwvodjHgEgfEY=
Subject key identifier:   74:1A:C8:B9:CF:CF:B4:22:DE:1B:3F:72:2D:66:74:6F:41:9C:1C:40
Authority key identifier: EF:15:35:97:8B:E6:B0:AD:7A:9C:B7:0E:B0:52:2F:8C:95:09:82:A9
Certificate issuer:       /CN=ef1535978be6b0ad7a9cb70eb0522f8c950982a9
Certificate serial:       019EB5B2F164444446A27087E711BB474292
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.mft
Manifest number:          0265
Signing time:             Thu 11 Jun 2026 08:01:03 +0000
Manifest this update:     Thu 11 Jun 2026 08:01:03 +0000
Manifest next update:     Fri 12 Jun 2026 08:01:03 +0000
Files and hashes:         1: 1-iB6z21RZrpXkSnGvhiW2wYr8L0.roa (hash: 51tw/udP13YguOvYrb1xizkGBlXzZHexEK8HlcpRMGs=)
                          2: 2VIoG8QN-zjnAemqLtXlhO_Jltw.roa (hash: cZjTIR9f7TdWlH+cvp6k0DHUwZH3r7HLXpRNG9UZVIM=)
                          3: 7xU1l4vmsK16nLcOsFIvjJUJgqk.crl (hash: dWxVEzOoarBQH9V+PVFjsWOEZmHJpdwuU28bPyQLwLI=)
                          4: EJwMuFYK1wsM5hee91ic9tZZCHs.roa (hash: AQoucDoJ40lM0+JsqQe1B2wvG+y+JOvu/h9zeWafMiQ=)
                          5: aMiNXiZTn0auDW0z6jWzMcVy5es.roa (hash: mTYhpZfI6W//js6v7bdR+EJfQ3pBaYPmRe515ss9poI=)
                          6: w_c3ITOoCkFf0DnaSmtgq6Rn678.asa (hash: J6tFhX6N1Hura0xZcR4F7V51t3AR4eoZPi1JRBlD4q4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 08:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b5:b2:f1:64:44:44:46:a2:70:87:e7:11:bb:47:42:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef1535978be6b0ad7a9cb70eb0522f8c950982a9
        Validity
            Not Before: Jun 11 08:01:03 2026 GMT
            Not After : Jun 12 08:01:03 2026 GMT
        Subject: CN=741ac8b9cfcfb422de1b3f722d66746f419c1c40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:62:58:af:63:b1:e2:3b:c7:6c:86:c7:55:ff:
                    dd:6d:fa:0c:25:86:ca:13:3a:9f:d8:59:60:a5:75:
                    eb:28:94:8a:b4:bc:28:34:35:d5:1b:ce:ac:db:8e:
                    c4:e8:39:be:e8:47:28:68:dc:fc:67:6c:d2:e0:89:
                    77:b6:93:9b:4a:6b:49:ba:77:0f:62:e1:80:15:2a:
                    13:17:c3:11:27:9e:6f:49:1c:df:e6:89:b1:aa:01:
                    be:93:f0:3e:48:0f:44:20:45:26:26:47:e3:11:13:
                    e2:b4:49:35:8a:22:44:5c:e5:42:4c:83:3a:b4:fa:
                    99:da:dd:67:08:30:d1:44:5c:d5:ed:aa:a3:72:5e:
                    f3:be:f7:fb:84:30:e8:2f:ca:28:b4:7e:bf:0b:01:
                    8c:0e:2b:5f:28:0d:9f:a7:a0:d0:95:b0:82:8c:b1:
                    49:97:3e:f0:59:b9:8b:9a:8c:89:96:0c:65:0f:83:
                    59:f7:34:f8:f9:12:f7:4f:52:04:a0:a5:35:25:20:
                    77:9e:d5:a4:66:30:5a:b3:5a:df:90:c7:7d:c5:89:
                    a7:e0:5a:39:f9:30:19:ba:4f:55:74:1f:3d:5d:04:
                    a1:3b:84:39:1c:e8:66:2a:f5:64:b3:be:c6:1a:cd:
                    43:a8:20:1f:30:f0:11:f2:4f:59:d8:41:d5:b1:42:
                    66:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1A:C8:B9:CF:CF:B4:22:DE:1B:3F:72:2D:66:74:6F:41:9C:1C:40
            X509v3 Authority Key Identifier:
                keyid:EF:15:35:97:8B:E6:B0:AD:7A:9C:B7:0E:B0:52:2F:8C:95:09:82:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:99:97:1c:df:c1:03:0d:55:08:b5:29:ed:32:79:da:dc:74:
         32:ec:de:c5:b5:41:ab:29:14:1d:84:7c:96:69:d6:e4:21:57:
         fb:ea:96:57:3b:99:fc:55:0c:d1:89:73:b0:20:9d:c4:9a:60:
         54:d4:eb:df:fb:b0:a6:64:5d:54:cb:76:e2:ce:db:37:2a:c9:
         5b:01:77:4f:78:7a:28:e1:ea:98:9f:4d:86:1c:7a:3a:9f:f8:
         03:a8:3a:ff:67:f8:9d:dc:7e:1c:83:31:e7:cc:9d:f6:f0:a4:
         86:34:55:d6:68:e9:05:bf:0e:c0:c1:cf:97:8e:7b:93:3a:ee:
         4f:43:a1:f8:47:f8:6a:a9:1f:53:8c:93:9f:45:ee:29:10:33:
         58:40:64:38:fb:d1:4e:6f:bc:0e:19:c3:3b:ac:27:26:ab:50:
         4e:f4:9c:36:ff:35:b5:b0:3e:5c:24:4d:50:71:1a:4a:2d:78:
         09:5a:c8:47:35:91:4e:c8:f4:47:d8:29:84:4b:62:4d:73:be:
         7c:cf:78:2b:f7:5c:24:2e:05:77:dc:f0:0e:8a:81:f8:eb:5d:
         dc:a9:b7:62:74:4f:77:fc:08:ef:17:3f:f8:5a:3b:81:a8:e8:
         d5:7c:00:a5:d1:39:48:46:17:a0:04:ed:dc:9b:a4:b5:14:b7:
         5d:26:a6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:54:13 2026 by rpki-client