Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
File:                     7tlXjkmCXELzwTG5TLD93lx5rXc.mft (raw, json)
Hash identifier:          Mm7UHCcHawJPGUWuheXA5XpYiNw+qkXKMIepvChDHq8=
Subject key identifier:   31:9C:05:5D:AA:07:58:F4:28:E9:5A:C3:19:26:43:55:3F:33:ED:DB
Authority key identifier: EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
Certificate issuer:       /CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Certificate serial:       019F18D6B4D20FCC58622D5F4B2D52DC775C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
Manifest number:          178F
Signing time:             Tue 30 Jun 2026 14:02:31 +0000
Manifest this update:     Tue 30 Jun 2026 14:02:31 +0000
Manifest next update:     Wed 01 Jul 2026 14:02:31 +0000
Files and hashes:         1: 7tlXjkmCXELzwTG5TLD93lx5rXc.crl (hash: 30EMwX+jqBNyIGMkoz3aWxw9OPaYGw7qc4iohheg8/g=)
                          2: CM5yTRt39UsRzQIWzuT7HO7bzSE.roa (hash: RH4eRmyLdVDmBQ+RCsFz+zVNIdYG+Aj2Xj1CkOhS/oI=)
                          3: LxSQP0g5iT2gsfHgEm-ts-WDJF8.roa (hash: bMz5HXK6775JKPVW+G1i9ymi7O9XK+msuKRHy3NE0Qk=)
                          4: psWOMQeMbdYZeEJwNKNEAJmZbBU.roa (hash: Kwf/BATNuOaMCMQQKCC+7fI7j3/5LLVOOW7HAw/+s1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:d6:b4:d2:0f:cc:58:62:2d:5f:4b:2d:52:dc:77:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
        Validity
            Not Before: Jun 30 14:02:31 2026 GMT
            Not After : Jul  1 14:02:31 2026 GMT
        Subject: CN=319c055daa0758f428e95ac3192643553f33eddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:28:c4:cb:7b:50:ac:68:dd:66:61:5c:47:bd:
                    92:c0:f1:31:46:b3:70:70:29:a1:41:b1:80:85:91:
                    26:c6:f7:cc:2e:a0:50:44:67:3c:89:5f:55:9d:0a:
                    f2:f1:00:24:52:bd:61:a2:1d:37:88:22:e1:ee:ab:
                    9d:82:25:44:b5:a7:63:c4:b0:04:e8:8e:c6:92:36:
                    f9:cd:d7:17:f8:7d:80:e0:e7:0d:81:80:a1:05:b1:
                    da:a1:4c:ec:e1:d7:f2:28:47:89:c7:6e:4f:1a:5f:
                    dc:c9:c7:8c:ed:8e:d4:93:33:0c:97:db:41:dc:ee:
                    a9:62:d8:b4:9a:fb:97:a1:65:6f:a4:31:8d:da:08:
                    a2:b1:45:c8:53:54:ab:a5:38:b9:fa:2a:fc:01:44:
                    6c:28:c9:ee:a6:6f:57:73:14:87:22:96:88:1f:6c:
                    a7:7c:87:f9:30:eb:06:1a:b4:9c:7d:20:69:df:b0:
                    0c:e8:be:5f:80:ab:16:ad:63:1c:46:f2:70:2b:3f:
                    b3:0a:2e:ea:2d:42:f2:ab:76:1b:70:bb:b8:e9:29:
                    15:c4:b4:55:c9:cd:16:2b:71:7e:e0:55:53:4b:8f:
                    fe:1f:ef:bf:a7:3e:c3:58:e5:25:26:38:64:cf:3b:
                    ed:5d:52:df:b5:da:63:88:c8:6c:c3:0d:63:cd:09:
                    65:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:9C:05:5D:AA:07:58:F4:28:E9:5A:C3:19:26:43:55:3F:33:ED:DB
            X509v3 Authority Key Identifier:
                keyid:EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:a6:6a:b8:70:2e:d1:64:4c:64:79:cf:dd:68:77:2e:e4:60:
         73:cf:26:fb:fe:7d:cf:2a:2b:9b:27:59:61:4c:d9:1b:c5:9e:
         04:ab:e1:5e:68:fd:8b:83:c8:56:ba:9b:01:0f:66:58:e0:c4:
         bd:d3:cc:19:79:ca:0b:6f:71:50:0d:28:a3:24:de:73:9f:1b:
         10:9d:de:64:fd:c7:a8:85:16:26:00:da:3d:5b:a2:d1:31:ba:
         33:9d:ec:a2:4e:73:b8:ec:1b:d9:18:90:7e:a3:32:97:a6:f7:
         2f:0a:65:54:6a:d2:50:4a:db:42:3b:82:98:68:9e:0c:72:5e:
         c9:45:c8:b8:7b:f0:42:32:71:48:c3:6e:10:68:41:5d:2e:b8:
         a6:cc:bf:1a:0f:1c:f9:15:b3:c9:83:be:93:90:4b:1f:50:3e:
         e4:2b:10:96:2c:c2:2f:41:81:ea:8f:55:f6:bd:9b:27:1b:98:
         15:c2:8e:d6:99:32:3b:cf:b0:a1:60:d7:09:0c:17:0b:a2:9f:
         95:cf:4c:c0:e5:2d:31:a6:c2:a6:78:9d:8b:e0:50:ad:2d:39:
         41:5e:5a:03:f8:6b:5d:7b:27:7c:d7:e0:a6:20:8a:6c:75:a7:
         6e:8d:59:56:05:af:33:32:b9:b8:86:08:c1:ad:df:bb:94:8c:
         96:8d:1c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:12 2026 by rpki-client