Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
File:                     7W2oLbx9figY-WaAtm787bEIeUc.mft (raw, json)
Hash identifier:          BSLAO5tpFSymMrtmYMn9yefWA3oRAzC8O0jdJRCrnhY=
Subject key identifier:   F0:08:53:2F:99:D7:C0:74:C1:97:03:BF:42:F9:80:BC:AA:64:D4:30
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Certificate issuer:       /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial:       019F14538F84BC11FCC363E4744FF93E4CE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
Manifest number:          199B
Signing time:             Mon 29 Jun 2026 17:00:48 +0000
Manifest this update:     Mon 29 Jun 2026 17:00:48 +0000
Manifest next update:     Tue 30 Jun 2026 17:00:48 +0000
Files and hashes:         1: 7W2oLbx9figY-WaAtm787bEIeUc.crl (hash: ALQP2WdMrYDwjtB5nWlFsFmR62zIYl0oJ0qPTy24h4I=)
                          2: JsIYFyLR74GQysEIqnGykpSJQUI.roa (hash: iaHnb3OAMXTWsBgbEKrwhuTvCOgUBCodv1kDk+4mavA=)
                          3: NKy6Tyf5RyRglBk0yV_ExDPmxuo.roa (hash: ebb1VqS7aGDzvUXqYNWhDAqOkeGUT55XR6ggJqYbSMU=)
                          4: OUVdt4o2LS_i-Gunl0nnzrdW_jI.roa (hash: LG7q3NWzE4G2vBN3PTFInwdMW/gtEeHrNbl3IVaBPnE=)
                          5: YH5NKMifzBmhf3nIG20jcgRcBU0.roa (hash: V5cTAFBzO7CMX8CCIxzqRfhGsna670gP9hgi/NVqRBc=)
                          6: mCt7UGq2s1qnA69MYZljhYxWiD4.roa (hash: qi5pYWU2cgvvhT1J3aGpMqhq1J2xvA8Deh0/Hh6j/Rg=)
                          7: sRMtAiiTomuNQjvyhVAd07KYQM0.roa (hash: 1ZDSFc07GgvbF2RmQMqVaUItzv9tv/zTWoNdPvDIoXs=)
                          8: sjgUHUj_TSMku2aB-f61amSIyCM.roa (hash: /+JjugGAK765zafXtIVOVPtipqmOZ3WaKKGK25tgoO4=)
                          9: zhcr9I3s3OVNgzaih7vQHJr6C0Y.roa (hash: nLQ289DooRLgqJOtJaVgt01KECd6y0NdXrqka7CO4Ko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 14:12:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:14:53:8f:84:bc:11:fc:c3:63:e4:74:4f:f9:3e:4c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
        Validity
            Not Before: Jun 29 17:00:48 2026 GMT
            Not After : Jun 30 17:00:48 2026 GMT
        Subject: CN=f008532f99d7c074c19703bf42f980bcaa64d430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c7:dc:f3:5d:f5:40:bb:a6:07:0e:bf:f9:ca:
                    c8:74:98:a1:23:45:98:00:ef:9e:a9:be:5f:47:25:
                    bc:fc:3e:9f:92:94:5c:8f:82:b7:39:b1:88:71:88:
                    d8:21:dd:55:84:26:88:a1:0a:c1:71:8f:5f:9e:e9:
                    36:e5:b8:5e:46:95:1e:96:e2:4c:fd:5a:c9:98:32:
                    b1:22:6a:10:11:fb:b2:fa:37:09:a6:c5:99:0b:76:
                    c5:6f:be:d1:bb:67:d6:9a:80:b4:de:1e:9e:59:64:
                    6f:ff:e2:1b:af:13:10:d6:6a:97:03:8e:86:54:95:
                    df:88:a8:e5:e7:39:d9:0a:da:3f:bb:db:fd:42:49:
                    0d:a5:bf:0f:90:30:26:59:41:bf:c4:b0:b9:f1:9c:
                    60:d3:1c:06:2c:6d:5d:38:1d:c1:57:b7:1b:48:19:
                    8a:bc:5c:74:34:d2:c1:1f:53:08:0c:84:1e:21:43:
                    d4:7a:d0:a5:83:ce:ad:c7:af:44:5f:b9:0c:c8:b0:
                    36:ff:3a:21:2b:84:10:0b:4e:dc:bf:e2:8a:d7:2b:
                    29:ee:54:09:59:1a:93:ad:98:a1:b5:66:cb:ec:5a:
                    80:c1:a2:7a:c6:30:bd:4c:44:d1:c7:be:42:84:9f:
                    a3:ee:8c:fa:69:92:50:55:37:2b:9e:aa:78:47:4a:
                    ce:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:08:53:2F:99:D7:C0:74:C1:97:03:BF:42:F9:80:BC:AA:64:D4:30
            X509v3 Authority Key Identifier:
                keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:5c:16:b4:20:cf:83:b6:ee:b3:35:58:b8:55:d7:47:e6:d3:
         c5:7f:6b:43:0e:ec:d5:ad:9a:6c:e8:e3:4b:f7:a7:e4:fb:03:
         0b:ef:d7:89:2f:44:93:fa:da:65:83:44:4e:e4:77:b1:03:bc:
         df:ef:e6:b1:eb:aa:7c:df:58:d7:9d:3c:15:fa:04:a7:ae:76:
         e6:af:66:87:43:0c:f4:bf:b3:c3:1e:1d:6c:25:83:87:25:dc:
         80:b4:34:d4:a4:ce:77:a7:90:8c:d5:a0:d0:5b:e5:23:2b:02:
         d8:f0:ae:d4:25:ba:62:5f:49:86:57:d0:d7:c9:ec:dd:72:fb:
         a4:13:88:87:20:83:94:fc:45:49:fc:05:42:fc:c7:41:36:fd:
         b1:2c:aa:f4:1d:d8:36:05:80:9d:08:70:3c:88:2b:f9:c7:5e:
         4e:79:9c:2c:ff:57:1e:98:af:36:ef:99:db:5b:48:a0:8c:de:
         45:f6:57:20:1b:72:79:39:45:ce:13:95:4e:e2:8e:aa:13:65:
         a8:08:d8:23:b3:8d:7f:f0:28:ab:46:2f:25:0a:40:3e:72:a0:
         2a:85:bc:3a:9e:e9:fd:59:1b:3f:44:f6:f4:9c:c7:fe:dc:1c:
         38:1a:83:14:bb:1b:87:32:5a:ce:71:fd:b4:2f:5b:83:39:2b:
         cb:ba:e6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 20:55:06 2026 by rpki-client