Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
File:                     7UzThqszeH_NQAJiK4OHZAb_8ZA.mft (raw, json)
Hash identifier:          Exs6gca2Nd6R6EJ9biZlRSwYrf2KusWDmpjPpgLZu48=
Subject key identifier:   AC:FB:F4:AB:BB:F9:3E:AE:4E:7C:F2:E9:65:E4:E3:CF:DE:5A:56:FC
Authority key identifier: ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
Certificate issuer:       /CN=ed4cd386ab33787fcd4002622b83876406fff190
Certificate serial:       019F190CFCEA11D61125AF73262E27A67766
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
Manifest number:          1986
Signing time:             Tue 30 Jun 2026 15:01:49 +0000
Manifest this update:     Tue 30 Jun 2026 15:01:49 +0000
Manifest next update:     Wed 01 Jul 2026 15:01:49 +0000
Files and hashes:         1: 7UzThqszeH_NQAJiK4OHZAb_8ZA.crl (hash: J2UD4CCu/OH3B/7ASLqjrtn0ikBVOpmJtcR1IqUtdHo=)
                          2: DLJ6Lc26hou-gghVAiRPeC5X_w0.roa (hash: 0ehkmbQVXLiYPEC/LI/+SW3yDQBg8UXsIn3OJpfQk0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0c:fc:ea:11:d6:11:25:af:73:26:2e:27:a6:77:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed4cd386ab33787fcd4002622b83876406fff190
        Validity
            Not Before: Jun 30 15:01:49 2026 GMT
            Not After : Jul  1 15:01:49 2026 GMT
        Subject: CN=acfbf4abbbf93eae4e7cf2e965e4e3cfde5a56fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b7:15:7f:9a:6b:95:50:44:a2:a9:b1:b8:8e:
                    09:4d:61:79:1a:12:61:b1:4a:2a:5a:d4:37:d9:4a:
                    da:eb:42:2e:2a:81:b2:eb:6b:48:a3:19:5d:99:6b:
                    05:3c:61:e1:47:06:a2:95:0b:58:1d:e2:97:8f:fa:
                    9a:3d:a8:a5:11:37:30:3e:cf:1c:b4:ad:bf:e5:89:
                    b0:d2:a2:15:91:6f:2b:e9:bd:9e:08:80:b8:0a:9f:
                    b5:c7:d5:8e:e8:79:6f:a4:11:3a:4d:b5:d7:08:63:
                    e8:35:3f:30:c6:a1:c3:81:72:59:80:8c:74:11:64:
                    6b:72:c6:a7:bc:6c:29:47:4f:f4:ce:db:fb:26:04:
                    bd:c3:62:b4:f1:22:9b:d6:2f:a2:56:74:a2:94:c1:
                    76:8a:5e:fd:0a:6a:b6:18:d4:39:cc:e2:d8:f4:8b:
                    a3:64:dc:cc:f8:6d:80:12:86:6f:6c:f0:3d:f3:3c:
                    ac:09:f2:e6:e9:ef:b3:b8:75:03:6e:44:9c:5b:7e:
                    41:35:b9:93:07:d8:cb:fb:92:a2:02:94:f6:c6:8e:
                    48:dd:4a:1a:9f:12:31:35:97:58:db:b4:6d:fa:3a:
                    8a:a7:11:a5:31:f2:d1:22:eb:51:f5:8f:0f:ee:ee:
                    70:e6:78:22:db:b4:77:07:e2:3d:9f:eb:cb:7a:95:
                    6f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:FB:F4:AB:BB:F9:3E:AE:4E:7C:F2:E9:65:E4:E3:CF:DE:5A:56:FC
            X509v3 Authority Key Identifier:
                keyid:ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:6c:a4:7e:4a:00:88:0e:fe:4c:f7:1a:43:14:e5:cc:36:04:
         4c:43:42:2a:81:6e:f8:d1:89:93:da:79:b7:bd:6d:07:99:92:
         79:aa:bb:fc:91:0a:f3:fb:21:4c:43:c4:b3:06:9e:83:ce:cf:
         6f:72:42:09:c2:aa:6e:f1:d6:71:34:ba:d1:4e:c6:9c:c0:81:
         74:63:d7:f9:e0:ee:30:ae:4d:b1:57:61:f2:46:aa:81:e4:22:
         70:1d:3a:49:44:c9:42:54:7e:3f:4c:34:ce:57:3d:89:6c:bf:
         86:49:49:58:1b:94:7b:16:63:0b:32:74:f7:e3:5b:dc:ba:b9:
         32:3e:bd:74:2c:f8:ff:dc:73:1a:20:7c:7b:fe:dc:79:78:28:
         15:46:d1:9e:93:01:82:2a:c0:5e:4f:cb:03:a3:0d:89:94:4e:
         92:c5:fb:09:96:9c:1d:a4:3b:f8:a5:f9:93:b8:c3:62:5b:3d:
         1a:6d:a0:27:69:64:1c:07:db:25:b9:6c:19:7e:f1:e8:03:66:
         1d:f8:59:26:e7:c3:77:71:77:4e:2f:5c:b7:71:61:8d:0d:cd:
         d5:de:6c:c7:04:6b:a4:2a:95:fd:24:d0:b9:44:18:14:38:06:
         af:6c:6f:4a:5a:81:fa:82:b3:5b:da:2c:82:e5:2c:bc:64:9e:
         6b:b2:bb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:14 2026 by rpki-client