Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
File:                     7AWYaJfQJOSMfNJeGJHEII_zu7I.mft (raw, json)
Hash identifier:          r54W0Pd/wMAJxuBXBg9NeNdLjZE1xZiV1FAH8AVIrto=
Subject key identifier:   2F:C5:3C:42:E6:4B:42:90:B1:05:F9:2E:F3:50:C5:B4:5C:A1:73:AC
Authority key identifier: EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2
Certificate issuer:       /CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2
Certificate serial:       019F1755458C256830B588495B3EB4F7D1BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
Manifest number:          1345
Signing time:             Tue 30 Jun 2026 07:01:31 +0000
Manifest this update:     Tue 30 Jun 2026 07:01:31 +0000
Manifest next update:     Wed 01 Jul 2026 07:01:31 +0000
Files and hashes:         1: 7AWYaJfQJOSMfNJeGJHEII_zu7I.crl (hash: qMMoeuhU/hext9XI8cR1QkgEuwrgbmUhstVhdFznSs8=)
                          2: HXGNMLUxYfLt2IxSXdMd7iMfgVw.roa (hash: rGZ8j3Yypq0spYgSmlQPy3xpKi1OQAliNPVd0/dnsVw=)
                          3: NdtOCJvzGmFZlmDg7mwNpBd1B_Q.roa (hash: W9vZQt0X+AIDjmeyVAUiJ2h6aMzNBj5GBkBeIxqmyoM=)
                          4: zb3M5sCfdcroGbb7sb_8fFyKbFk.roa (hash: DT+a2ocZ5cYF7PMlIn/Yq8jpDiPXnKsM/EWJpn65oWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 07:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:55:45:8c:25:68:30:b5:88:49:5b:3e:b4:f7:d1:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2
        Validity
            Not Before: Jun 30 07:01:31 2026 GMT
            Not After : Jul  1 07:01:31 2026 GMT
        Subject: CN=2fc53c42e64b4290b105f92ef350c5b45ca173ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:00:97:41:b0:a4:58:a3:2f:d1:7f:c3:86:7b:
                    10:bd:4d:55:99:25:56:03:ba:44:51:46:66:4c:49:
                    f9:92:54:76:56:f1:a4:22:8b:bb:c2:93:97:c4:1d:
                    21:ab:e8:30:cd:09:43:a1:5a:c2:db:99:20:4a:1c:
                    01:d9:6c:be:21:79:9d:8b:09:72:46:f7:18:3b:32:
                    f4:8a:0e:7c:5b:b2:75:82:73:d8:00:30:bc:1e:c9:
                    43:b4:ee:8a:b0:2d:be:72:7f:bb:6a:d9:6b:85:4f:
                    09:a1:d4:7a:bd:30:d2:02:2e:e7:7f:b2:f0:a8:2e:
                    d8:a3:9c:0d:41:18:be:e5:ba:1b:7a:db:37:7b:3d:
                    83:20:fe:38:16:f7:b3:70:3e:7b:77:55:e8:93:fc:
                    d4:24:05:a6:ce:ab:95:57:3e:85:1a:29:b3:60:38:
                    e9:2c:74:bc:41:18:6d:29:90:0d:86:23:54:7b:cf:
                    27:fe:a0:d9:d7:98:b7:89:99:84:b9:92:73:c2:07:
                    47:84:f0:e8:ab:9c:99:29:49:e5:74:f4:73:28:11:
                    63:58:da:e1:1b:17:4e:f4:3f:25:20:89:12:bf:d5:
                    34:10:c5:75:07:e5:2b:a8:11:ce:8d:00:bf:9e:f0:
                    fa:9a:82:64:f9:83:f9:2f:87:31:8f:0e:51:4a:c0:
                    34:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C5:3C:42:E6:4B:42:90:B1:05:F9:2E:F3:50:C5:B4:5C:A1:73:AC
            X509v3 Authority Key Identifier:
                keyid:EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:8b:2e:32:a4:ed:92:34:cb:d2:67:d4:56:40:f8:ad:f7:80:
         6a:03:05:90:30:ab:ce:1f:23:ec:aa:3e:d2:c5:f5:17:c4:ad:
         f3:af:13:ec:4c:df:56:b4:e2:34:2c:18:5f:db:90:a4:c7:6b:
         e8:87:8d:f9:cd:26:a1:70:2c:6c:94:4d:f4:06:28:ad:16:88:
         61:b7:48:02:eb:62:77:e1:1e:b4:13:7e:cc:94:8b:37:6f:1e:
         48:fb:bd:79:64:e7:6f:4b:8c:1a:0b:02:d8:8e:cb:e4:89:e3:
         09:7d:b5:1f:12:a4:f5:7f:92:fa:aa:01:8d:b1:00:5c:6f:3b:
         92:c4:0c:25:9b:ae:e1:fb:44:74:13:f4:a3:13:35:1e:4f:8c:
         35:a7:4d:aa:38:3b:41:31:51:91:fd:1e:e0:9d:83:2a:99:ec:
         4b:2e:41:17:3f:68:c9:f5:09:f5:39:77:9f:09:d5:a0:13:06:
         6b:ae:fe:72:98:21:94:0a:ec:76:4c:63:68:79:9a:fc:cc:f7:
         4c:89:f3:00:be:88:a3:a1:6c:1b:91:3c:15:cc:f5:24:57:c0:
         42:03:49:59:da:ac:a9:87:cd:25:5e:b4:d9:c1:56:41:31:c5:
         4f:03:71:1e:29:41:88:a3:02:b7:80:22:90:a8:87:3b:68:dd:
         59:3d:e7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:09:20 2026 by rpki-client