Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.mft
File:                     7jvnaNKGaPSQr7dOmu_kHgNJXXo.mft (raw, json)
Hash identifier:          QnLioMBY9FPejoN2LROyAnv1BUzAg6QgeNsu6awBk2M=
Subject key identifier:   92:4A:08:54:B1:E5:1D:37:E8:51:FE:85:13:90:01:45:09:9B:28:43
Authority key identifier: EE:3B:E7:68:D2:86:68:F4:90:AF:B7:4E:9A:EF:E4:1E:03:49:5D:7A
Certificate issuer:       /CN=ee3be768d28668f490afb74e9aefe41e03495d7a
Certificate serial:       019F148B078F61CE11AF5EEBFE2910F57143
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jvnaNKGaPSQr7dOmu_kHgNJXXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.mft
Manifest number:          1671
Signing time:             Mon 29 Jun 2026 18:01:23 +0000
Manifest this update:     Mon 29 Jun 2026 18:01:23 +0000
Manifest next update:     Tue 30 Jun 2026 18:01:23 +0000
Files and hashes:         1: 2YJ0g1qEU_pHKZDl_yaf7iLVS5E.roa (hash: 6jIG6VRmBlVTxXmXxydGYN78+qys/k2/llfjIriLpwM=)
                          2: 7jvnaNKGaPSQr7dOmu_kHgNJXXo.crl (hash: XLs0W7AbAcqsFEoRftt0DBglZtg5bjg9rKbVvzbItoM=)
                          3: 9z6A-dajZLpif84GcwpzthECc5k.roa (hash: D70BVtovUQQfizyYSJyIE+tYGxDo6t/H+F8aNws8I8o=)
                          4: UGG7nCe5Tg7AyoLNIcopGHO0Rk4.roa (hash: zdgHHW48oZ9vfOTrEj6QuMLBdMpir+2/kj2S654tj68=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jvnaNKGaPSQr7dOmu_kHgNJXXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 14:12:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:14:8b:07:8f:61:ce:11:af:5e:eb:fe:29:10:f5:71:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee3be768d28668f490afb74e9aefe41e03495d7a
        Validity
            Not Before: Jun 29 18:01:23 2026 GMT
            Not After : Jun 30 18:01:23 2026 GMT
        Subject: CN=924a0854b1e51d37e851fe8513900145099b2843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a9:cf:3e:5d:2a:d9:82:d8:79:bf:50:ec:d2:
                    c0:6b:15:5f:3a:18:ae:34:c1:60:09:95:fe:37:0b:
                    1a:06:31:30:7b:a3:40:8e:b1:59:b4:f3:59:7e:02:
                    f6:c9:31:80:b4:c0:7b:7e:cb:f3:70:da:8c:0a:40:
                    71:b3:6c:4c:6e:ca:4c:c9:3f:39:45:5c:9a:78:09:
                    25:f2:c9:6b:a6:5f:d2:54:7d:2e:7a:d3:85:ab:51:
                    13:21:37:e9:94:01:d3:6d:c2:33:c9:53:a2:6c:88:
                    ae:b7:69:07:ec:e4:7d:a8:64:94:83:93:e4:75:c0:
                    0a:df:b0:06:93:44:6a:44:f2:42:ed:ce:c4:c2:6c:
                    38:06:a2:ad:17:07:f6:1d:7e:80:0c:0a:b1:7b:7f:
                    ce:fc:39:70:eb:99:16:4d:4b:e0:74:b9:29:70:e7:
                    5c:16:b8:04:d1:bc:24:0d:8e:8f:8c:09:18:73:47:
                    8b:cd:3a:4a:fa:65:e8:ba:22:25:56:2f:4a:cb:91:
                    94:4b:92:a0:82:09:c6:b0:f3:8e:83:ac:54:24:bf:
                    02:94:c1:1f:0a:6e:61:cc:ec:a0:24:dd:e6:92:9b:
                    fd:64:27:b6:64:b0:51:da:1b:af:7a:d6:49:b3:0e:
                    9a:e7:58:22:2f:6b:15:5d:1f:95:c0:da:96:22:ae:
                    9d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:4A:08:54:B1:E5:1D:37:E8:51:FE:85:13:90:01:45:09:9B:28:43
            X509v3 Authority Key Identifier:
                keyid:EE:3B:E7:68:D2:86:68:F4:90:AF:B7:4E:9A:EF:E4:1E:03:49:5D:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jvnaNKGaPSQr7dOmu_kHgNJXXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:75:f5:2b:e3:9c:6a:53:8a:ef:7b:03:8d:35:cd:65:fc:58:
         00:35:32:dd:36:31:90:5f:f5:56:78:c4:bc:e0:ce:5c:4e:52:
         5f:d2:38:7e:95:b7:27:d5:11:9a:45:b0:fa:60:ff:a0:b3:51:
         95:47:16:6a:c9:13:00:32:73:1b:8a:fe:65:42:ce:fd:2f:84:
         1a:97:62:ff:ee:9b:cb:3c:61:28:b9:4e:1d:75:d4:af:2b:d3:
         59:23:63:2f:f2:f3:eb:ca:b4:95:f6:d9:8c:1e:1a:79:ab:69:
         7d:4b:f8:7c:e0:5e:58:fa:1a:f8:1f:28:83:3d:c3:d4:47:9a:
         86:54:6f:6b:9b:a9:05:e1:d6:6d:c1:03:66:f4:89:fe:95:83:
         da:58:3d:a2:c9:7d:9d:46:e7:17:c2:6d:5c:fa:d7:c4:d5:fa:
         a7:f0:4c:96:77:e8:48:9e:74:71:f1:ef:e4:3b:d8:98:90:d7:
         47:18:02:7c:34:ae:34:cf:76:12:4c:3d:3d:8a:d6:6f:89:35:
         35:89:58:72:9e:e6:56:16:bf:70:ea:34:d9:8d:42:c8:fb:69:
         9e:81:98:57:2d:03:3e:84:ad:65:14:38:c9:d1:81:21:2b:66:
         52:de:43:0e:45:d5:fb:37:e5:f4:b3:d7:b9:83:9f:d1:6c:db:
         b6:1f:dd:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 22:38:21 2026 by rpki-client