Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c00d60-5db6-4737-aa7f-fb6f95de1ed0/1/7gyjMIvjRbOYjAWiFhsWU1hxgyk.mft
File:                     7gyjMIvjRbOYjAWiFhsWU1hxgyk.mft (raw, json)
Hash identifier:          bRuGEYUfRsXPPdeESoy1fkYnqqTnVZTvuq/0xMeCZ2M=
Subject key identifier:   56:28:87:19:1A:96:4E:3C:88:B6:E1:FA:17:3D:25:42:28:F9:A4:76
Authority key identifier: EE:0C:A3:30:8B:E3:45:B3:98:8C:05:A2:16:1B:16:53:58:71:83:29
Certificate issuer:       /CN=ee0ca3308be345b3988c05a2161b165358718329
Certificate serial:       019EB6211750D70E4C1C88286DD951F78F85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7gyjMIvjRbOYjAWiFhsWU1hxgyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/c00d60-5db6-4737-aa7f-fb6f95de1ed0/1/7gyjMIvjRbOYjAWiFhsWU1hxgyk.mft
Manifest number:          1A
Signing time:             Thu 11 Jun 2026 10:01:22 +0000
Manifest this update:     Thu 11 Jun 2026 10:01:22 +0000
Manifest next update:     Fri 12 Jun 2026 10:01:22 +0000
Files and hashes:         1: 27qwpEcmCN_n8WXHk92y3bElVec.roa (hash: AGxJBrf7HxUPwaiyEy6FYLKvwl8PQU6C90kD79ZmrRQ=)
                          2: 7gyjMIvjRbOYjAWiFhsWU1hxgyk.crl (hash: PA5p2yW5AU/qivqp6o/EAtvD08/a9mk9CIYFdTkyK4Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/c00d60-5db6-4737-aa7f-fb6f95de1ed0/1/7gyjMIvjRbOYjAWiFhsWU1hxgyk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/c00d60-5db6-4737-aa7f-fb6f95de1ed0/1/7gyjMIvjRbOYjAWiFhsWU1hxgyk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7gyjMIvjRbOYjAWiFhsWU1hxgyk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 10:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:21:17:50:d7:0e:4c:1c:88:28:6d:d9:51:f7:8f:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee0ca3308be345b3988c05a2161b165358718329
        Validity
            Not Before: Jun 11 10:01:22 2026 GMT
            Not After : Jun 12 10:01:22 2026 GMT
        Subject: CN=562887191a964e3c88b6e1fa173d254228f9a476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c6:0c:47:6e:b2:af:85:ac:34:ee:a0:dd:54:
                    71:6b:6d:57:b1:52:9c:1d:f5:04:48:65:5b:df:96:
                    6e:64:b6:68:17:dd:93:34:15:04:95:bc:fd:62:26:
                    3c:59:0d:4a:39:17:33:d2:08:8e:91:14:08:aa:ef:
                    42:13:59:b8:d4:3e:09:1b:da:59:d2:3f:2e:f3:da:
                    f2:56:6b:be:8b:04:78:f6:6a:fb:80:25:9b:90:7f:
                    eb:d5:8f:09:1c:7e:8d:46:10:61:dd:c9:b2:d8:e3:
                    bf:e8:2b:d3:b2:d2:d9:57:6d:3d:4c:1c:7d:e3:a8:
                    c2:c5:ad:a6:fe:dc:68:47:ca:1c:82:e3:da:7d:2e:
                    79:bb:f2:e9:69:1e:cc:21:a5:6e:a7:8c:5f:68:e1:
                    13:14:38:19:57:eb:40:7b:12:2b:09:86:e6:87:6f:
                    1d:8d:ff:de:55:42:c2:80:ff:9b:c0:94:94:2b:af:
                    b9:2e:38:1b:1b:0e:5b:3e:a1:f0:e3:76:c2:17:50:
                    54:c4:e0:bd:a5:7c:f3:19:e4:74:05:62:de:5e:4e:
                    36:77:ba:04:b5:7c:ae:63:45:89:fa:84:bc:b2:6b:
                    66:9f:6a:f0:15:b5:ef:6d:74:a5:c7:9e:37:43:79:
                    44:d6:bb:79:f2:a3:eb:58:f8:fa:49:d4:37:25:db:
                    57:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:28:87:19:1A:96:4E:3C:88:B6:E1:FA:17:3D:25:42:28:F9:A4:76
            X509v3 Authority Key Identifier:
                keyid:EE:0C:A3:30:8B:E3:45:B3:98:8C:05:A2:16:1B:16:53:58:71:83:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gyjMIvjRbOYjAWiFhsWU1hxgyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c00d60-5db6-4737-aa7f-fb6f95de1ed0/1/7gyjMIvjRbOYjAWiFhsWU1hxgyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c00d60-5db6-4737-aa7f-fb6f95de1ed0/1/7gyjMIvjRbOYjAWiFhsWU1hxgyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:52:32:a9:2c:0b:c8:8b:16:ee:cc:02:b7:4a:a7:9e:9e:5f:
         71:e4:40:4a:aa:e4:b5:13:0d:2f:2c:cc:5f:1e:15:12:f7:e5:
         d9:27:8e:ad:50:ae:63:82:66:08:47:e5:c1:00:ff:23:5c:73:
         d3:b8:df:cb:e3:eb:27:ca:b9:14:cf:c0:5a:b5:08:31:cf:8f:
         bd:c5:98:d3:8a:4e:fe:04:84:dc:cd:5f:29:bc:b9:86:cf:4e:
         77:66:7a:34:ad:6d:af:96:cf:ba:69:a7:5b:fd:c0:1f:75:a1:
         7c:c4:08:ba:a2:f2:eb:75:70:ef:52:51:5e:06:b8:db:5d:55:
         41:03:8e:1b:ad:c9:77:74:b7:9e:93:d9:7b:6d:b2:ac:32:50:
         6a:6b:fd:46:71:70:c9:3e:55:57:b7:85:d0:92:d6:da:e5:a4:
         a9:bc:13:0b:65:63:f3:a4:22:89:e7:39:11:bc:73:4d:de:ef:
         3f:c3:4b:6e:a0:18:8a:38:7d:66:f7:51:2f:97:93:d1:53:f7:
         66:6d:ca:f4:ce:72:c5:30:8d:2a:31:63:34:9a:6c:74:47:35:
         b3:8c:c6:e1:06:f5:31:69:40:11:c0:d3:1b:fa:06:2f:31:68:
         cc:9e:b5:b5:9b:e8:7b:2a:d8:0e:6f:49:0b:2d:9e:f3:b1:6d:
         a6:97:68:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:34:18 2026 by rpki-client