Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
File:                     a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft (raw, json)
Hash identifier:          6GMf0VowGuv1d04Ju/M0UuNIfoGqg158OdaNNIgKyrw=
Subject key identifier:   20:FD:91:99:1C:A2:10:CE:8F:AE:E4:5C:FB:74:65:DA:C7:44:31:BA
Authority key identifier: 6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
Certificate issuer:       /CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Certificate serial:       019F3785092E6B4FD323155103B11CF74D3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
Manifest number:          199B
Signing time:             Mon 06 Jul 2026 13:01:33 +0000
Manifest this update:     Mon 06 Jul 2026 13:01:33 +0000
Manifest next update:     Tue 07 Jul 2026 13:01:33 +0000
Files and hashes:         1: 0xwfSsFkb05U4ozVSEb8hCqR4ZM.roa (hash: wDnxCrMW737wBP0bFwNqAOo1oxv3iXJSRvzrJ/qp1Dc=)
                          2: a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl (hash: mhPo5E8j1dgG7nt8jrQhJ6Pw8bnjsXwKJlRSZCi9sLk=)
                          3: zq7GSsBTb4iCu4BsJeZ1X5mLg0g.roa (hash: wAonBOQHcI2HVnsLhr53pN++Gv5Cyj0r6V/3M0lZCdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 13:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:37:85:09:2e:6b:4f:d3:23:15:51:03:b1:1c:f7:4d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
        Validity
            Not Before: Jul  6 13:01:33 2026 GMT
            Not After : Jul  7 13:01:33 2026 GMT
        Subject: CN=20fd91991ca210ce8faee45cfb7465dac74431ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:79:41:a9:01:13:0d:50:a6:1b:3d:88:cf:4f:
                    d8:b1:43:82:1a:38:48:92:35:fb:18:65:16:63:ce:
                    08:bf:23:9f:29:a7:2d:8e:8a:d2:42:ef:74:34:6c:
                    a9:b4:80:20:51:78:e0:f1:00:0c:b4:2b:0a:83:fe:
                    b4:2f:a5:41:99:cb:46:4a:ef:48:f4:6d:28:e5:42:
                    97:49:d0:d9:d0:d7:d8:99:ef:83:2e:8f:41:97:a8:
                    e3:78:62:73:70:65:06:e0:77:28:dc:e7:79:4b:67:
                    a8:f6:5a:4d:a9:b7:89:75:8b:af:20:00:6c:aa:27:
                    70:8e:7e:01:2f:48:06:74:b3:4d:94:8c:aa:2e:fd:
                    88:99:9e:b6:6b:c5:8b:9e:9a:d9:2d:81:d4:da:77:
                    c9:ee:9d:70:d2:a0:19:83:a7:47:25:8f:52:00:3a:
                    27:90:e4:fe:a4:9d:ba:91:ef:60:93:8d:c4:17:9b:
                    ff:49:40:46:53:5e:fb:21:33:90:38:e8:9c:66:85:
                    cd:b6:f7:b5:28:a6:60:8a:83:ed:f1:54:d1:9b:2f:
                    44:39:09:b5:d2:81:ae:41:4f:a6:53:97:0e:11:e1:
                    b2:bf:84:fd:3b:52:e3:c2:20:9d:f2:65:a8:5e:89:
                    6f:cd:7d:54:ee:17:2f:4b:60:40:cf:0e:f2:f0:30:
                    1c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:FD:91:99:1C:A2:10:CE:8F:AE:E4:5C:FB:74:65:DA:C7:44:31:BA
            X509v3 Authority Key Identifier:
                keyid:6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:18:17:20:ce:d3:5b:83:e4:9b:95:d2:90:93:ab:ab:03:23:
         6e:8f:3b:ae:1e:d7:c9:8a:a9:4f:c6:09:ff:c8:cc:be:13:bf:
         dc:28:51:03:f7:fb:6d:1c:16:c1:85:d9:1f:3d:ab:a9:75:8b:
         98:55:22:87:aa:f1:5a:94:c9:cc:ef:c9:5e:8b:d4:85:98:0f:
         81:02:2e:47:b8:ed:13:ad:af:bd:db:59:9a:36:ba:cb:e4:69:
         ef:5f:a5:4c:75:1c:79:e2:b9:d6:31:8f:de:77:1c:e2:c9:c9:
         e7:4a:41:aa:4a:8b:18:24:6b:46:29:f3:15:8f:8c:56:db:d6:
         fe:c7:5f:69:d5:52:b7:fd:19:1d:c2:0a:71:a1:b4:b1:dd:64:
         f3:65:12:35:c4:2a:14:5b:a2:5d:83:96:9c:f9:a9:18:bc:e1:
         fc:0b:1f:b6:d4:35:2f:fd:2b:fb:69:e5:a1:e7:4a:25:65:b3:
         d2:08:52:d9:74:b7:11:24:7d:f0:79:d3:4f:2c:91:e8:d1:2f:
         bf:a6:a6:15:f3:af:bf:a5:63:93:d4:8b:b5:3d:b9:41:b6:6e:
         8f:e2:eb:2d:c3:02:51:0f:b8:aa:21:bd:de:98:3e:74:33:62:
         e5:d6:bd:9c:0e:29:55:7a:eb:17:96:21:ac:28:c9:4f:e3:90:
         db:83:f4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:23:33 2026 by rpki-client