Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft
File:                     7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft (raw, json)
Hash identifier:          3d+KMX6OS8Nhv23WNj2WVgf9SDixulgHaNoZ7714O9k=
Subject key identifier:   C6:DD:4C:62:A5:7F:DD:A7:6C:61:8C:07:4D:18:D1:C3:A9:36:81:1D
Authority key identifier: EC:65:F2:46:BF:C1:EA:8F:C3:86:C8:6D:D4:9F:BA:A8:D8:8C:48:81
Certificate issuer:       /CN=ec65f246bfc1ea8fc386c86dd49fbaa8d88c4881
Certificate serial:       019D3865A8EB394BBA1A7C0560EDCF7ABEFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft
Manifest number:          078E
Signing time:             Sun 29 Mar 2026 07:01:19 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:19 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:19 +0000
Files and hashes:         1: 7GXyRr_B6o_Dhsht1J-6qNiMSIE.crl (hash: nv3ccPYA1+qdP+KJW8zddTCDldygdqhYpcDFWKm1uBE=)
                          2: QPj7fUSgBwDGuqI3uOke_219sUg.roa (hash: xwpTnDBnhQJQT2QP9/pCYeUK0xXfracIKnGvu54bOIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:a8:eb:39:4b:ba:1a:7c:05:60:ed:cf:7a:be:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec65f246bfc1ea8fc386c86dd49fbaa8d88c4881
        Validity
            Not Before: Mar 29 07:01:19 2026 GMT
            Not After : Mar 30 07:01:19 2026 GMT
        Subject: CN=c6dd4c62a57fdda76c618c074d18d1c3a936811d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c6:3c:94:01:33:01:04:c4:e0:21:49:be:81:
                    47:8f:03:e3:92:6a:32:bf:aa:be:4c:1a:f0:75:1c:
                    e7:81:13:e7:0c:86:3f:f8:1d:1c:eb:97:a5:2d:b0:
                    63:1b:ed:b7:82:55:58:6d:3f:8e:7b:6a:d5:cc:22:
                    6c:95:35:6b:44:00:32:29:9b:59:8a:9d:41:bb:c0:
                    e1:97:f8:fb:82:e3:e1:66:85:ba:13:9d:f5:18:cd:
                    a5:31:2a:d1:ca:1e:9a:b4:b9:dc:b0:ee:8d:3d:96:
                    57:7e:81:3f:d3:79:5e:49:45:19:69:9b:f0:39:94:
                    84:36:c6:cf:34:3c:25:f6:55:dc:61:b0:88:69:66:
                    c3:83:1b:96:48:51:cd:09:ff:14:a1:aa:c7:2f:d5:
                    f8:f7:ec:ea:8a:5d:a1:c9:51:4b:1e:fd:82:80:06:
                    80:42:92:83:2b:b7:e3:81:59:a0:53:33:49:eb:e2:
                    13:86:cc:6d:75:f1:f3:e9:d4:22:94:0c:f0:c2:35:
                    b8:e0:ba:ee:92:c7:9f:24:78:3f:9c:cb:f9:2e:52:
                    a0:bf:71:83:d7:0e:52:47:a5:48:88:89:ce:2e:3f:
                    f4:3d:59:e5:3d:ba:f5:d0:66:69:3b:c1:26:06:35:
                    94:51:a1:85:98:ea:f5:d7:2b:4e:f0:47:0c:3b:43:
                    60:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DD:4C:62:A5:7F:DD:A7:6C:61:8C:07:4D:18:D1:C3:A9:36:81:1D
            X509v3 Authority Key Identifier:
                keyid:EC:65:F2:46:BF:C1:EA:8F:C3:86:C8:6D:D4:9F:BA:A8:D8:8C:48:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:32:5a:c1:55:a4:d7:a4:c1:43:b0:3b:2f:77:b5:4c:79:08:
         40:51:0a:f6:d2:e6:75:da:84:ff:92:31:b9:2d:04:48:eb:84:
         a7:a1:5e:d7:c7:fc:23:9f:20:3f:d2:05:fe:25:c7:b0:f2:93:
         ba:d4:da:bb:df:7b:3f:52:63:99:62:42:57:19:c7:c8:99:19:
         42:ff:bc:1d:1b:21:4e:d5:bd:81:5b:f8:14:d3:19:88:9b:12:
         fd:c2:22:4e:3d:8f:96:f6:ce:d6:39:d6:e1:30:d9:04:2d:95:
         c2:e8:9c:92:b4:85:20:49:c4:25:21:4c:10:2a:ef:6f:29:07:
         2c:8d:43:a4:2a:03:56:a9:0a:f4:06:5a:1a:3c:8d:a1:1d:4d:
         c2:51:8a:17:c5:2b:33:ef:14:13:dc:3f:88:2f:80:6c:6d:f3:
         5c:aa:d5:c5:ae:f1:36:60:a0:8a:b3:cf:1e:0c:04:27:6e:7e:
         54:ae:3a:83:7e:6b:eb:a9:a4:8a:10:14:6b:d9:02:08:84:04:
         e8:40:0b:f5:48:f4:13:c2:b3:8e:ba:ac:4f:61:e4:25:2a:f0:
         6e:45:38:64:b7:30:6b:24:6e:d4:73:1b:b1:9f:1c:b8:4c:2f:
         dc:54:d4:e1:57:7f:0a:b7:2d:a1:20:c4:87:52:a6:be:36:d5:
         6a:c9:ee:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:37 2026 by rpki-client