Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
File:                     m7S5jjWbTJLDEYP790kjjmtvCMI.mft (raw, json)
Hash identifier:          04vGfVt/o2bO1KKhZzLTe6K3v1mS3jPvvnItfv8CpZg=
Subject key identifier:   25:70:91:03:B5:67:1C:1F:7C:34:EE:A3:13:84:6D:43:A0:28:B1:B5
Authority key identifier: 9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
Certificate issuer:       /CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Certificate serial:       019F3E6356D1ED5B4589F924543E4406D47E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
Manifest number:          199A
Signing time:             Tue 07 Jul 2026 21:02:05 +0000
Manifest this update:     Tue 07 Jul 2026 21:02:05 +0000
Manifest next update:     Wed 08 Jul 2026 21:02:05 +0000
Files and hashes:         1: SKpYBqwn6udQHU20Uf2pG2NVjSc.roa (hash: 0Drji27vy2Cr4dvgFBfhAgVdOvdDdCwXZsDdSfaarcA=)
                          2: m7S5jjWbTJLDEYP790kjjmtvCMI.crl (hash: lLtqqAE9gDshCFX2jKn6BhaJfNuPPZBn6owzj5vU0yE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:3e:63:56:d1:ed:5b:45:89:f9:24:54:3e:44:06:d4:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
        Validity
            Not Before: Jul  7 21:02:05 2026 GMT
            Not After : Jul  8 21:02:05 2026 GMT
        Subject: CN=25709103b5671c1f7c34eea313846d43a028b1b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3d:e6:b9:80:bb:98:c2:ca:25:19:a0:81:7c:
                    f2:da:8e:11:b1:b3:a2:a0:03:a9:21:78:84:31:cb:
                    10:84:fb:57:2b:7b:b7:37:ea:e4:ed:18:6b:5c:59:
                    99:fb:3d:0d:59:08:6c:d6:80:7e:09:73:17:b8:8d:
                    3c:b2:e5:9c:d0:13:02:f7:83:cf:b6:bf:b8:b1:a2:
                    f1:55:60:c2:c5:3f:59:81:01:20:b4:be:96:1c:ea:
                    d8:02:bb:de:ed:db:8e:b8:11:6c:ad:58:57:0d:0b:
                    d3:61:5b:f8:88:da:2c:da:f5:de:47:18:5e:ac:f4:
                    bb:0c:a5:78:80:ba:4c:78:94:e3:04:c5:af:03:70:
                    cf:c5:47:5c:15:eb:ae:21:24:05:12:5b:f4:06:23:
                    89:a4:f4:b1:6f:51:94:69:71:21:35:10:ef:91:85:
                    0c:44:37:fe:b4:2a:00:d7:2c:4c:19:d1:35:1a:95:
                    cc:bb:17:08:ae:71:df:eb:e3:8c:f2:c9:80:36:44:
                    69:79:67:7f:98:51:e4:6f:95:93:da:49:60:35:bb:
                    78:a1:f8:54:08:98:05:fe:85:1e:85:7f:08:76:9c:
                    1e:ef:be:99:87:b3:b5:ea:15:ba:fb:d3:d1:81:3d:
                    76:da:e3:88:14:ba:94:2f:17:4e:d6:7c:f8:8e:ec:
                    f4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:70:91:03:B5:67:1C:1F:7C:34:EE:A3:13:84:6D:43:A0:28:B1:B5
            X509v3 Authority Key Identifier:
                keyid:9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:8c:3c:6a:59:06:f8:6e:c9:4d:64:94:c8:83:61:42:d6:2b:
         1d:fd:f8:3d:cc:ba:c4:e0:9e:d0:1f:7b:27:fd:13:e2:ba:ad:
         3b:3a:11:9b:9c:df:35:f5:77:7d:f6:96:6c:dd:2e:a4:99:b0:
         a0:ea:ec:2c:cc:62:15:a6:46:9a:5a:27:31:ce:8b:29:80:5f:
         0c:cb:90:d3:56:e7:c4:d8:0a:18:96:8b:2c:c6:3d:16:22:bd:
         cc:34:c1:44:2f:2c:ba:b0:26:8e:6a:11:3f:6d:39:61:ca:e6:
         1d:e2:43:fd:9a:aa:e3:7e:ed:21:38:73:4b:9a:d3:44:22:3e:
         1f:19:75:20:e0:19:23:8f:03:77:17:c8:39:a4:ae:7a:6d:9a:
         ed:e6:f2:f1:00:ac:a4:4a:23:db:54:f7:92:8e:90:9f:fb:09:
         a1:77:53:18:6c:6f:c2:db:0d:38:41:25:ff:4b:b4:d6:14:cc:
         aa:ab:e0:bd:02:83:8c:04:03:61:0d:44:17:e1:35:cc:af:09:
         cd:10:8c:d1:56:97:9e:53:f9:bc:d0:5b:bb:1c:a3:16:4a:08:
         09:99:23:32:dc:64:5b:26:a2:d1:51:0b:c4:06:05:53:64:90:
         dd:84:b9:3a:6f:6f:94:76:ae:87:6b:c4:89:f3:a2:e2:47:a4:
         82:f1:22:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 23:13:17 2026 by rpki-client