Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft
File:                     7gc50FKNy0_OV40R9-w0sON0Us8.mft (raw, json)
Hash identifier:          7LuIUsq3OTY1bRqV9PHHzb+WhSwfmIe5eNNx63u+WXs=
Subject key identifier:   BE:2F:9E:32:4B:46:11:08:98:5F:73:AA:51:FC:EA:D7:D5:ED:2C:DE
Authority key identifier: EE:07:39:D0:52:8D:CB:4F:CE:57:8D:11:F7:EC:34:B0:E3:74:52:CF
Certificate issuer:       /CN=ee0739d0528dcb4fce578d11f7ec34b0e37452cf
Certificate serial:       019F1867C5B01BA9AAEF06622228D4635480
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft
Manifest number:          15D6
Signing time:             Tue 30 Jun 2026 12:01:21 +0000
Manifest this update:     Tue 30 Jun 2026 12:01:21 +0000
Manifest next update:     Wed 01 Jul 2026 12:01:21 +0000
Files and hashes:         1: 2sKAiZ30G6oJLAKluK9x1BnfKC0.asa (hash: 6nrWkagWhoGD+Qfsj/tM3pqrkbyN5EDHkHagAl4HLIw=)
                          2: 7gc50FKNy0_OV40R9-w0sON0Us8.crl (hash: wjHXAaxVQOu0xZ9NUitJlVfoyPXT+4zFU16tdGB7IEc=)
                          3: JcR3YDi06JT6Wl_eQYsoL_-4XeY.roa (hash: jOukTvc7ghec56xAJX59+DDpg3Q2klioM1BU5lwJY5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 12:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:67:c5:b0:1b:a9:aa:ef:06:62:22:28:d4:63:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee0739d0528dcb4fce578d11f7ec34b0e37452cf
        Validity
            Not Before: Jun 30 12:01:21 2026 GMT
            Not After : Jul  1 12:01:21 2026 GMT
        Subject: CN=be2f9e324b461108985f73aa51fcead7d5ed2cde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:65:04:f4:98:d4:07:58:0f:ae:c0:3e:61:cc:
                    24:15:0c:0e:86:4e:61:fd:b0:1c:33:68:0d:55:91:
                    bb:89:d9:6f:8a:7e:b6:1f:bd:90:ec:23:69:63:ec:
                    90:59:10:84:c6:1c:d4:b8:57:f8:85:30:87:2c:ad:
                    f7:d1:f7:4a:10:a2:76:8f:a9:44:86:fa:dd:ca:ff:
                    20:b4:e2:1b:a8:3c:4f:ee:d9:cc:9f:49:65:35:40:
                    96:e8:3e:58:d1:2a:d3:dd:32:ae:f9:84:4c:a9:75:
                    67:46:aa:4c:51:e0:52:b4:f8:7a:15:e4:e3:2f:bb:
                    27:61:d6:4b:51:08:ae:f0:4b:2e:95:b9:c6:8b:61:
                    43:5e:35:ef:e2:ee:7b:ba:45:0e:a7:6c:e3:c3:7b:
                    c8:40:05:08:d4:2c:9f:0a:49:68:26:a6:38:92:cc:
                    fb:cb:ca:fe:92:35:03:8f:07:7a:69:3d:48:f3:d1:
                    57:d9:f9:f8:d6:38:3d:21:a5:22:6b:54:de:a7:d2:
                    94:8c:87:7e:e7:87:d1:5b:56:2a:00:e8:58:49:00:
                    7e:fa:d0:bd:a9:38:a8:1b:fc:7f:a6:c2:43:f7:26:
                    3b:a1:0d:fc:65:db:a2:cc:ad:5a:e3:1a:64:f4:1b:
                    40:cb:8f:6c:a9:94:2c:2b:cf:26:7a:f0:76:f9:86:
                    f3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:2F:9E:32:4B:46:11:08:98:5F:73:AA:51:FC:EA:D7:D5:ED:2C:DE
            X509v3 Authority Key Identifier:
                keyid:EE:07:39:D0:52:8D:CB:4F:CE:57:8D:11:F7:EC:34:B0:E3:74:52:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:ea:d6:b7:e7:c7:4f:93:a9:c5:17:d4:92:ad:a7:00:6b:bd:
         2a:fd:b6:9e:1c:b1:8b:64:25:c6:09:60:cb:cf:1e:2e:31:ca:
         3b:9b:93:66:5d:a7:a4:15:35:f4:0a:99:2b:1f:7c:bd:6a:27:
         8e:17:fe:ff:46:35:2a:00:dd:02:76:5c:d0:00:73:cc:4e:1e:
         38:7c:d1:1e:73:41:e5:4f:cf:d6:60:db:c9:25:76:27:53:4f:
         c6:9a:3d:8e:6c:51:86:3b:60:62:25:43:14:35:40:c2:87:d4:
         57:b5:3d:c7:0b:fb:bb:ea:ae:c8:b5:8d:57:f9:98:f9:17:22:
         62:44:2e:f4:a6:65:f0:18:b1:02:73:f7:e0:ae:8f:1c:5d:5e:
         99:4c:c2:1d:6f:de:5a:07:b0:c9:61:30:df:34:05:15:3b:3b:
         dc:06:76:ee:ae:5b:ac:22:f4:16:a0:2c:01:ce:a5:86:4a:2a:
         ad:c1:53:4b:50:50:ff:d2:e6:b6:da:58:db:53:f0:2d:65:1c:
         f1:21:5d:df:fc:ee:15:69:5e:e9:7a:24:93:98:d2:37:8a:b9:
         27:db:33:10:26:d3:e8:f6:9e:80:94:e7:f5:3e:60:71:c3:10:
         4c:a1:f3:14:a8:33:fe:c7:f0:35:0b:90:73:2a:39:e8:35:0b:
         ac:60:ad:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:59 2026 by rpki-client