Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft
File:                     x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft (raw, json)
Hash identifier:          HpzO3BK8iA+XYZCjV6+h0yCfMWh+rEuQ+SgBS2Zkh7k=
Subject key identifier:   AE:7E:7F:3D:50:7C:3A:4F:2A:8E:A4:6C:02:E2:1C:2D:24:23:94:98
Authority key identifier: C7:CB:A9:81:CE:58:A1:0E:DD:2C:99:80:1E:04:3A:D8:04:A8:5F:9A
Certificate issuer:       /CN=c7cba981ce58a10edd2c99801e043ad804a85f9a
Certificate serial:       019F1A8CE78A224BEC711C7BEB85ACE9C76A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x8upgc5YoQ7dLJmAHgQ62ASoX5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft
Manifest number:          0212
Signing time:             Tue 30 Jun 2026 22:01:09 +0000
Manifest this update:     Tue 30 Jun 2026 22:01:09 +0000
Manifest next update:     Wed 01 Jul 2026 22:01:09 +0000
Files and hashes:         1: w-oyu6Dt2pR1vO2yb74Z1MeDHhc.roa (hash: 3NZ9tfleTSDXUKf2CN0AIsezDYvSZLjibOtJobFnX+M=)
                          2: x8upgc5YoQ7dLJmAHgQ62ASoX5o.crl (hash: MzGC93vTCWRiFBa+vSRS5EzYFvMRSd5RvzcIx8JZHf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x8upgc5YoQ7dLJmAHgQ62ASoX5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 20:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1a:8c:e7:8a:22:4b:ec:71:1c:7b:eb:85:ac:e9:c7:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7cba981ce58a10edd2c99801e043ad804a85f9a
        Validity
            Not Before: Jun 30 22:01:09 2026 GMT
            Not After : Jul  1 22:01:09 2026 GMT
        Subject: CN=ae7e7f3d507c3a4f2a8ea46c02e21c2d24239498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:74:2c:36:31:f1:15:5e:35:ea:3b:af:ad:9c:
                    2d:57:8d:6e:97:18:23:fb:45:6a:72:56:af:56:a8:
                    fd:bf:aa:69:08:bb:1e:11:55:f5:a4:b5:23:5f:be:
                    6e:57:c3:fd:54:33:a9:4b:38:07:cd:32:29:0f:f8:
                    7e:79:11:cc:c8:87:3b:57:67:d8:5a:fd:13:e3:39:
                    10:7f:0f:43:bf:0d:26:a5:55:5e:19:ed:ea:c2:5f:
                    ff:a8:c7:39:a0:85:94:51:d0:a0:36:b4:be:73:d8:
                    c2:07:01:a8:88:63:f0:2a:ad:df:d8:c2:2f:38:4e:
                    42:ac:b4:9c:58:61:a4:9f:10:a4:63:9a:60:c9:37:
                    56:00:ae:32:ea:5d:a5:bf:05:48:4b:5f:82:9e:16:
                    50:93:1e:cc:b9:b1:3b:ef:2a:9c:3f:82:c5:33:76:
                    61:12:b9:e9:72:67:b4:21:fb:6e:28:63:fc:cf:10:
                    f1:e1:72:e6:ae:dc:33:4f:ac:ae:9a:54:0f:0b:e7:
                    d8:8f:a0:49:41:5e:7b:30:32:a8:d2:30:31:ef:22:
                    23:0d:30:7a:eb:95:67:5e:e4:92:6e:62:94:8a:0e:
                    03:71:b1:aa:87:33:f4:da:ee:de:54:61:62:45:0d:
                    20:3b:6a:df:01:89:1e:2a:ff:95:1f:43:b5:cd:67:
                    6d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:7E:7F:3D:50:7C:3A:4F:2A:8E:A4:6C:02:E2:1C:2D:24:23:94:98
            X509v3 Authority Key Identifier:
                keyid:C7:CB:A9:81:CE:58:A1:0E:DD:2C:99:80:1E:04:3A:D8:04:A8:5F:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8upgc5YoQ7dLJmAHgQ62ASoX5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:85:f8:66:d8:4a:88:91:07:f4:de:7b:23:da:e1:e2:17:33:
         fb:d5:c2:bf:98:d1:1d:01:c7:d3:2f:7d:1b:d4:48:6c:4f:63:
         5a:c9:ce:d3:7e:e7:37:b3:24:82:4a:fa:4c:30:a3:43:ce:9b:
         b1:20:e4:55:42:76:0b:1c:64:25:eb:dd:ac:40:9f:c6:1d:5f:
         79:d3:8b:90:08:79:9d:29:d0:e8:b8:1d:9e:91:55:d6:de:0f:
         1d:8d:f1:d8:33:f3:42:7a:44:be:78:32:14:db:c6:33:90:d7:
         87:49:45:2a:0d:08:1d:04:47:be:8c:01:40:0a:f7:ca:14:1a:
         4d:55:07:f6:6b:a0:3c:7c:10:93:a2:35:3d:41:2e:4c:e1:42:
         9c:16:02:e5:df:15:9f:61:bb:5b:d5:e2:74:da:19:5c:60:5f:
         81:74:19:29:2d:7b:45:9f:cc:88:3c:b9:f1:8a:92:5d:18:e6:
         59:7e:48:38:66:a6:05:ce:c5:22:30:d7:af:56:bb:39:8d:61:
         fc:27:db:bb:88:2f:7f:0c:ac:b9:4f:b2:f0:f6:de:7d:9a:5e:
         48:3d:3e:90:8d:8c:90:cd:c7:d1:9c:87:86:3d:0a:6e:46:10:
         bf:14:39:32:66:1b:22:b8:b2:46:b3:eb:a4:d7:e8:0c:63:a8:
         bf:26:ba:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 03:34:08 2026 by rpki-client