Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
File:                     7lsNNqN0qzXENu4Awuyu-7KjVEg.mft (raw, json)
Hash identifier:          Shf8VRBCPFuuckxkqB0g4tKXZqlEKN2RE7q1rV4mX6w=
Subject key identifier:   6B:0A:1B:0F:4A:48:D0:96:2C:6C:47:7F:3D:EB:3C:DF:5B:25:0B:05
Authority key identifier: EE:5B:0D:36:A3:74:AB:35:C4:36:EE:00:C2:EC:AE:FB:B2:A3:54:48
Certificate issuer:       /CN=ee5b0d36a374ab35c436ee00c2ecaefbb2a35448
Certificate serial:       019F10E51D628D2FC2675CA88928DAEC905C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
Manifest number:          03A3
Signing time:             Mon 29 Jun 2026 01:01:18 +0000
Manifest this update:     Mon 29 Jun 2026 01:01:18 +0000
Manifest next update:     Tue 30 Jun 2026 01:01:18 +0000
Files and hashes:         1: 7lsNNqN0qzXENu4Awuyu-7KjVEg.crl (hash: 2E3M1bL93xMm3vRBrorJbzc34EWphJLMlgHsHsMTTq8=)
                          2: fHCIkDI_tyAmmW1GOo4OCmgrWOQ.asa (hash: mjIlqPcdqEqZv1LLEdjujFp2APfTOPyNRkl6rj99vbo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 01:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:10:e5:1d:62:8d:2f:c2:67:5c:a8:89:28:da:ec:90:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee5b0d36a374ab35c436ee00c2ecaefbb2a35448
        Validity
            Not Before: Jun 29 01:01:18 2026 GMT
            Not After : Jun 30 01:01:18 2026 GMT
        Subject: CN=6b0a1b0f4a48d0962c6c477f3deb3cdf5b250b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3e:91:3f:c9:01:6c:94:54:85:23:89:b7:85:
                    41:40:1f:e0:c1:bd:3a:d4:19:8c:54:a4:f4:fc:7a:
                    19:af:41:13:78:79:3b:b4:f3:12:84:72:ff:b8:2c:
                    31:39:9b:c1:7e:74:81:75:56:eb:44:39:29:66:ed:
                    1d:1f:dc:57:3b:4f:bd:79:56:4e:3d:f7:92:0f:47:
                    20:d9:dc:cc:54:f5:e3:79:92:69:92:6e:69:77:e7:
                    c3:23:04:41:b8:77:40:d3:21:73:d3:45:1c:dd:39:
                    2d:c9:3f:15:8a:8b:01:ca:75:42:be:2b:7b:a2:f7:
                    1a:fc:82:f3:3e:c1:51:f4:f6:fa:0b:12:aa:3f:3e:
                    ea:d5:b9:15:b1:ab:99:64:6e:c0:6c:3b:81:e7:94:
                    14:48:f5:38:14:b4:8e:65:79:e9:a9:28:8e:53:14:
                    a2:8b:be:2b:76:33:39:24:a2:b8:7e:67:b7:6a:68:
                    82:eb:01:5c:6c:26:d9:96:76:b1:b9:5c:1a:33:1b:
                    de:54:64:d4:71:f0:6b:50:7a:7f:cf:dd:a1:62:8d:
                    86:fe:1c:98:4d:9c:94:5b:e0:9f:79:35:9f:3b:9b:
                    d5:29:be:ef:e9:07:99:fe:03:bf:4a:31:93:1e:8a:
                    b9:32:e6:08:c7:92:ba:4d:f9:01:b4:6e:3f:f2:63:
                    8a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:0A:1B:0F:4A:48:D0:96:2C:6C:47:7F:3D:EB:3C:DF:5B:25:0B:05
            X509v3 Authority Key Identifier:
                keyid:EE:5B:0D:36:A3:74:AB:35:C4:36:EE:00:C2:EC:AE:FB:B2:A3:54:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:d6:9e:21:de:da:54:ad:36:0b:b5:63:ce:e4:c4:77:95:6f:
         dd:23:15:d5:60:ef:c4:c9:32:4c:ce:04:75:62:b9:be:b4:1e:
         82:67:59:9c:1d:4e:3b:cf:2c:37:83:e9:d8:be:59:de:7e:67:
         96:a3:9a:6a:96:d4:bc:96:09:45:f1:a5:91:15:94:e9:72:b0:
         95:b8:fd:83:6d:be:09:15:21:94:7d:ff:1d:6a:09:fe:df:2d:
         07:c4:a5:2b:13:47:66:fe:1a:a5:7a:da:51:52:f3:c7:e1:8a:
         6c:d6:c2:16:40:ea:42:12:1f:c5:30:65:15:b7:66:19:18:ac:
         b5:56:3b:c0:28:8b:31:92:14:8b:0c:d6:e9:e4:5c:aa:e0:3e:
         f1:4e:94:e3:57:27:60:05:f7:65:f7:c5:d4:8f:5f:b3:84:a2:
         6f:e0:9f:c2:c4:4a:8e:29:44:6c:02:89:37:b1:ee:94:1a:0f:
         63:04:bd:cd:df:4e:6c:ee:dd:21:04:0b:4d:26:47:cf:06:ed:
         d1:d1:de:15:b6:5f:c6:6a:6d:1b:0b:de:eb:0c:22:e3:2f:32:
         c1:c5:d3:29:6c:9f:8f:23:51:60:77:fa:35:78:59:bb:b0:b5:
         ae:96:cd:13:6a:93:02:e4:ef:4d:f0:bf:b7:3b:02:94:a3:57:
         d3:0f:b4:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Q5R1ijS/CZ1yoiSja7JBcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlNWIwZDM2YTM3NGFiMzVjNDM2ZWUwMGMyZWNhZWZiYjJh
MzU0NDgwHhcNMjYwNjI5MDEwMTE4WhcNMjYwNjMwMDEwMTE4WjAzMTEwLwYDVQQD
Eyg2YjBhMWIwZjRhNDhkMDk2MmM2YzQ3N2YzZGViM2NkZjViMjUwYjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz6RP8kBbJRUhSOJt4VBQB/gwb06
1BmMVKT0/HoZr0ETeHk7tPMShHL/uCwxOZvBfnSBdVbrRDkpZu0dH9xXO0+9eVZO
PfeSD0cg2dzMVPXjeZJpkm5pd+fDIwRBuHdA0yFz00Uc3TktyT8ViosBynVCvit7
ovca/ILzPsFR9Pb6CxKqPz7q1bkVsauZZG7AbDuB55QUSPU4FLSOZXnpqSiOUxSi
i74rdjM5JKK4fme3amiC6wFcbCbZlnaxuVwaMxveVGTUcfBrUHp/z92hYo2G/hyY
TZyUW+CfeTWfO5vVKb7v6QeZ/gO/SjGTHoq5MuYIx5K6TfkBtG4/8mOKHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsKGw9KSNCWLGxHfz3rPN9bJQsFMB8GA1UdIwQY
MBaAFO5bDTajdKs1xDbuAMLsrvuyo1RIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2xzTk5xTjBxelhFTnU0QXd1eXUtN0tqVkVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9lMmYxNWUtYzg5Yy00MzUyLTg3MjIt
NjlhMjM4Zjk4ODlhLzEvN2xzTk5xTjBxelhFTnU0QXd1eXUtN0tqVkVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9lMmYxNWUtYzg5Yy00MzUyLTg3MjItNjlhMjM4Zjk4ODlh
LzEvN2xzTk5xTjBxelhFTnU0QXd1eXUtN0tqVkVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAstaeId7a
VK02C7VjzuTEd5Vv3SMV1WDvxMkyTM4EdWK5vrQegmdZnB1OO88sN4Pp2L5Z3n5n
lqOaapbUvJYJRfGlkRWU6XKwlbj9g22+CRUhlH3/HWoJ/t8tB8SlKxNHZv4apXra
UVLzx+GKbNbCFkDqQhIfxTBlFbdmGRistVY7wCiLMZIUiwzW6eRcquA+8U6U41cn
YAX3ZffF1I9fs4Sib+CfwsRKjilEbAKJN7HulBoPYwS9zd9ObO7dIQQLTSZHzwbt
0dHeFbZfxmptGwve6wwi4y8ywcXTKWyfjyNRYHf6NXhZu7C1rpbNE2qTAuTvTfC/
tzsClKNX0w+0hQ==
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:43:21 2026 by rpki-client