Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft
File:                     7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft (raw, json)
Hash identifier:          kZgu4S/7ABN2tkPFI4nn7Du3Elj0cBYSWP6o3MpzIEM=
Subject key identifier:   CE:0E:32:64:BC:EF:EE:59:6A:81:C8:04:59:23:F3:E2:AF:26:6D:63
Authority key identifier: ED:77:2C:2F:A2:3B:E6:FA:8E:28:AE:A4:A7:15:D5:AC:31:F0:CC:9F
Certificate issuer:       /CN=ed772c2fa23be6fa8e28aea4a715d5ac31f0cc9f
Certificate serial:       019F189DE370412CBE8F1A3EC1129B8E532E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XcsL6I75vqOKK6kpxXVrDHwzJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft
Manifest number:          07C1
Signing time:             Tue 30 Jun 2026 13:00:28 +0000
Manifest this update:     Tue 30 Jun 2026 13:00:28 +0000
Manifest next update:     Wed 01 Jul 2026 13:00:28 +0000
Files and hashes:         1: 7XcsL6I75vqOKK6kpxXVrDHwzJ8.crl (hash: 4bTLP4ogwoATW389OnnzHxOIle0/C9TOmT+xVvIBVAI=)
                          2: KKkdWKb8trEZFH4vckoUJV2EraM.roa (hash: Ag2mjewJcCUE9H557ALCBro2BDKEQqn+ZfAIETR7Z90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XcsL6I75vqOKK6kpxXVrDHwzJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9d:e3:70:41:2c:be:8f:1a:3e:c1:12:9b:8e:53:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed772c2fa23be6fa8e28aea4a715d5ac31f0cc9f
        Validity
            Not Before: Jun 30 13:00:28 2026 GMT
            Not After : Jul  1 13:00:28 2026 GMT
        Subject: CN=ce0e3264bcefee596a81c8045923f3e2af266d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d9:d1:fa:1b:1d:51:49:09:eb:94:99:24:25:
                    eb:69:d1:30:d3:fd:22:cc:2a:c9:31:c6:51:f7:a4:
                    1d:83:d5:8d:40:cc:4d:e9:17:01:3a:ef:ad:5d:a5:
                    2e:ca:2e:fa:f5:d4:1e:75:c2:b2:92:27:b3:54:50:
                    ea:64:ca:05:70:7f:8e:1b:2d:25:b6:56:80:b0:ca:
                    ea:19:b9:00:37:e6:6e:39:9c:83:b9:ef:d4:ee:d5:
                    25:6e:ca:09:d3:0d:51:3e:38:30:68:a5:f2:73:d9:
                    9b:ac:2c:ae:6e:bb:42:68:3e:c1:f3:bd:77:ea:e6:
                    3f:d9:90:8f:18:eb:f0:4e:4e:41:2f:f0:30:3f:9d:
                    4d:b2:c0:46:ee:9c:9c:dc:5a:9d:e0:f7:be:ed:33:
                    98:c4:aa:13:5b:6c:8e:68:95:54:00:71:fa:c3:cb:
                    ca:c7:84:4e:cf:60:db:f1:07:b8:55:94:37:4a:db:
                    1d:28:3a:5a:12:e8:66:79:a0:86:dc:a9:69:d6:da:
                    56:bb:ed:c8:de:fc:6a:7f:99:b8:68:3f:2f:a3:d3:
                    cf:e0:26:bc:7c:6a:63:f3:c2:e0:2c:a1:7d:80:99:
                    ab:24:7e:a3:cd:be:dd:b9:b3:61:83:91:9a:ef:0b:
                    cb:29:bd:df:2f:de:73:4c:97:5f:a6:f9:66:1d:92:
                    83:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0E:32:64:BC:EF:EE:59:6A:81:C8:04:59:23:F3:E2:AF:26:6D:63
            X509v3 Authority Key Identifier:
                keyid:ED:77:2C:2F:A2:3B:E6:FA:8E:28:AE:A4:A7:15:D5:AC:31:F0:CC:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XcsL6I75vqOKK6kpxXVrDHwzJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:d6:77:a3:f6:81:b1:a0:79:d0:38:b4:a4:21:98:cf:5b:e4:
         77:7b:7a:ae:2a:31:5c:6e:a5:4c:ab:2e:e0:6b:89:76:92:55:
         17:25:f9:ec:93:54:66:f8:13:8f:8b:26:ef:eb:96:1e:e0:41:
         22:e8:8a:30:a0:e8:f8:86:6f:a1:1b:2d:b5:09:67:0c:b0:da:
         a3:51:65:12:b8:0a:74:df:5b:fb:05:51:6b:3b:dd:f4:a4:8a:
         c4:f6:7d:34:ef:fa:1a:c4:be:22:f9:a1:32:34:d8:0e:d9:45:
         f4:47:85:4a:35:a7:f8:79:9c:22:58:fd:ae:aa:36:c1:09:41:
         80:a7:2a:b5:3d:b7:f5:70:63:5a:cc:3d:c1:60:41:13:8f:56:
         63:0a:72:be:63:ef:f4:9f:64:e2:e5:61:82:fc:2a:00:c9:5d:
         85:dc:fc:57:82:eb:42:11:be:7e:99:16:9b:33:a2:61:1c:92:
         06:be:57:b2:cf:16:74:24:ce:3c:51:62:b5:8b:a3:00:c9:68:
         24:8b:37:d7:34:4e:d3:4a:a2:90:86:35:ec:0c:3d:ea:fc:34:
         b7:f5:d1:0e:da:9a:e1:77:e1:a2:a7:41:71:21:06:96:39:4b:
         08:11:ac:4b:d7:f2:23:49:26:62:86:95:b1:31:2d:a7:3e:2f:
         ed:74:45:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:50 2026 by rpki-client