Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.mft
File:                     5jAbF0RrPssIF-QA6YL3Km2AHTE.mft (raw, json)
Hash identifier:          mD0Czx6U4MyW5qZvWmSOsRfkHOFqQUMsCyDBYUeno/g=
Subject key identifier:   C7:F7:26:80:FF:C6:C4:8F:9D:62:10:2A:FD:F5:C7:DC:1C:F6:39:E0
Authority key identifier: E6:30:1B:17:44:6B:3E:CB:08:17:E4:00:E9:82:F7:2A:6D:80:1D:31
Certificate issuer:       /CN=e6301b17446b3ecb0817e400e982f72a6d801d31
Certificate serial:       019FA003C9FD9292A221E702E3534369AB9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5jAbF0RrPssIF-QA6YL3Km2AHTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.mft
Manifest number:          7E
Signing time:             Sun 26 Jul 2026 20:00:30 +0000
Manifest this update:     Sun 26 Jul 2026 20:00:30 +0000
Manifest next update:     Mon 27 Jul 2026 20:00:30 +0000
Files and hashes:         1: 5jAbF0RrPssIF-QA6YL3Km2AHTE.crl (hash: IYOdKEijLiSgCKiXkmudH7jlOx9AyHHOF5T8yjS/bjo=)
                          2: y8-zYgb68sCKmok28fSORVZTV7k.roa (hash: kb393sHwSxydXSQ1l80qzXOkKVqcGzDmY/nU6zerbuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5jAbF0RrPssIF-QA6YL3Km2AHTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 15:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:03:c9:fd:92:92:a2:21:e7:02:e3:53:43:69:ab:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6301b17446b3ecb0817e400e982f72a6d801d31
        Validity
            Not Before: Jul 26 20:00:30 2026 GMT
            Not After : Jul 27 20:00:30 2026 GMT
        Subject: CN=c7f72680ffc6c48f9d62102afdf5c7dc1cf639e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:23:95:50:a0:57:b9:0b:13:28:fc:c1:32:7a:
                    9d:5e:9d:48:30:c6:40:30:25:31:f2:bf:fc:9f:82:
                    01:8e:83:db:13:de:d3:9c:82:53:10:09:68:0f:41:
                    1c:81:6c:40:23:07:b0:b0:cb:dc:82:61:a0:fd:05:
                    84:49:fb:4b:b5:a4:f0:8c:ce:a7:a9:9e:09:d2:60:
                    64:40:f5:be:52:ca:83:21:f7:34:39:89:62:ac:6f:
                    67:44:bb:d0:88:8c:0a:29:3e:69:a1:c6:39:57:6a:
                    a8:f3:7f:1b:c6:c9:09:7f:79:11:20:95:4d:a5:cb:
                    f4:50:a0:74:b1:bc:16:fc:af:b1:f6:ad:08:76:0c:
                    41:79:f1:73:e1:88:8d:18:9c:95:9a:c6:42:1d:46:
                    a0:f7:11:30:18:b3:23:89:88:01:c9:9b:b6:9f:ab:
                    bb:1a:02:15:d1:57:55:d9:a2:1f:e3:ea:c7:99:5d:
                    02:d0:a0:11:a3:e1:55:02:d8:d1:a7:29:34:c7:22:
                    10:83:90:f5:bf:7f:73:a7:54:0a:d4:8e:32:6b:99:
                    03:cc:79:52:6e:32:f0:cf:1f:3d:65:2e:f1:58:a0:
                    5c:3a:c8:49:3f:69:f9:29:df:2d:66:ff:d3:ef:e8:
                    61:04:71:02:22:65:12:b5:1d:a7:fb:39:0f:e0:72:
                    f6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F7:26:80:FF:C6:C4:8F:9D:62:10:2A:FD:F5:C7:DC:1C:F6:39:E0
            X509v3 Authority Key Identifier:
                keyid:E6:30:1B:17:44:6B:3E:CB:08:17:E4:00:E9:82:F7:2A:6D:80:1D:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jAbF0RrPssIF-QA6YL3Km2AHTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:6b:8a:b3:d5:8f:d7:1e:ae:d1:91:5f:96:7e:95:73:21:2e:
         b5:eb:45:8a:99:04:ff:1c:fa:28:f4:5d:7a:d4:42:9a:a3:25:
         3a:77:60:e5:81:18:e3:69:61:12:ab:08:84:14:e2:fc:08:a5:
         3b:16:36:f2:cf:37:1e:aa:e0:cf:c7:de:18:89:5c:8d:db:fa:
         e5:7e:37:13:2c:54:77:6a:84:13:29:fd:ba:d6:c3:8c:db:13:
         b3:85:be:91:48:1e:e5:d8:ae:87:95:85:ac:fa:09:f4:a7:60:
         b7:23:a6:cc:d2:86:9f:21:6b:17:6f:e8:f1:76:4c:79:af:2f:
         47:88:c5:12:dd:8e:5f:1e:fe:fb:ea:17:49:c1:e0:10:3c:fa:
         50:fa:22:45:aa:62:30:1c:c4:56:88:02:ba:1e:90:89:d4:b1:
         a3:6d:66:cc:df:32:f5:ae:b5:21:a1:38:bc:c0:97:7f:84:f4:
         92:0f:46:13:49:92:ca:56:5c:bf:e5:9b:e6:15:d7:fc:32:8d:
         db:27:51:86:e3:0a:42:2b:2e:2b:72:53:b0:1e:33:7e:51:5b:
         62:ea:fe:c9:01:b2:64:db:f6:64:f6:3b:08:27:6f:9c:bd:96:
         4e:83:53:ed:24:b8:ec:20:9f:1d:84:65:c7:a9:ab:0c:2e:05:
         3d:52:e7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:41:58 2026 by rpki-client