Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
File:                     C7M4e-bSDUos4TzAkuh_d3uLmVY.mft (raw, json)
Hash identifier:          hXLzlLPf/TRlzID7CRTg3j5SAvFaoO+h+S+YdPSPYVM=
Subject key identifier:   C8:61:11:07:52:C1:77:9E:0E:85:5A:A1:53:E0:6B:9B:6B:FE:F4:3E
Authority key identifier: 0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56
Certificate issuer:       /CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956
Certificate serial:       019F189DDC9CDBB4C105C92DEF605C318F12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
Manifest number:          145C
Signing time:             Tue 30 Jun 2026 13:00:26 +0000
Manifest this update:     Tue 30 Jun 2026 13:00:26 +0000
Manifest next update:     Wed 01 Jul 2026 13:00:26 +0000
Files and hashes:         1: C7M4e-bSDUos4TzAkuh_d3uLmVY.crl (hash: WpO5IFxpAE2QCd7GcbnOQgSimDL+BJEa0L/f7jCMyI8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9d:dc:9c:db:b4:c1:05:c9:2d:ef:60:5c:31:8f:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956
        Validity
            Not Before: Jun 30 13:00:26 2026 GMT
            Not After : Jul  1 13:00:26 2026 GMT
        Subject: CN=c861110752c1779e0e855aa153e06b9b6bfef43e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:75:d2:cb:ce:1d:7e:f1:50:1d:78:de:a6:e2:
                    2a:72:f2:b5:2a:77:64:81:df:b9:c5:0b:f6:69:05:
                    37:f0:c1:ed:bd:18:43:5e:47:4d:91:ce:13:43:60:
                    3a:ac:08:bc:25:52:e0:64:a7:e9:c3:e8:22:49:fe:
                    43:a6:55:15:72:3e:78:9c:a9:e1:45:8a:c1:91:a4:
                    3a:3d:95:fa:8b:9e:e2:44:53:28:11:a3:42:dc:c5:
                    86:8d:43:9a:9f:8b:e5:94:34:23:b6:12:85:42:d5:
                    57:25:e0:85:4b:a5:59:4b:48:a8:57:ab:67:2d:78:
                    ae:ca:b3:8c:7a:2c:b5:2c:33:04:2b:83:3c:ed:e1:
                    44:0c:10:11:b3:5c:9e:fe:18:5e:76:58:f5:67:5b:
                    c2:b9:0a:af:dc:db:f4:c4:e3:9e:e0:c0:b2:04:8c:
                    e6:5f:bc:61:b5:b7:40:ea:38:64:76:ca:2b:2f:b2:
                    65:97:f9:54:9f:dc:c2:8c:55:05:99:7f:52:45:56:
                    ab:7e:8c:22:16:e0:88:17:09:be:b9:c8:96:41:e6:
                    93:31:1d:de:5e:b3:76:a1:a5:d1:b4:f5:16:7d:4a:
                    df:c3:ce:32:7c:b3:da:84:82:d9:e0:db:ac:7c:35:
                    87:d1:d5:bc:23:73:56:a0:c4:c1:d5:8a:41:9a:43:
                    29:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:61:11:07:52:C1:77:9E:0E:85:5A:A1:53:E0:6B:9B:6B:FE:F4:3E
            X509v3 Authority Key Identifier:
                keyid:0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:62:b6:d3:cd:ad:91:d9:c5:04:81:16:6a:81:04:37:74:89:
         6d:fd:fc:0f:c5:1b:fd:7b:b9:4a:c6:62:77:e8:ca:02:e1:89:
         d6:88:f6:06:21:35:73:7d:dc:54:02:19:62:96:c4:c5:85:a9:
         98:db:02:01:85:30:90:21:64:0c:7e:2b:0a:b6:36:6b:7e:d1:
         2a:6c:2a:50:12:61:eb:fb:37:94:75:51:38:ac:61:8e:63:dd:
         6f:54:81:cc:72:35:37:f1:95:12:0c:42:82:8b:4e:e1:d6:95:
         11:20:ac:c1:3c:f9:5e:ef:40:30:fb:7c:d7:19:e3:18:e6:6a:
         06:c1:58:e9:96:49:bf:62:9c:9a:c3:95:d7:af:18:fb:c8:bb:
         c8:fc:af:cd:b4:64:1f:e9:74:5c:91:dc:ef:9e:a7:ee:66:7a:
         9f:d9:8b:ad:ba:5f:11:ce:0e:16:d8:b0:53:8c:8f:61:c0:25:
         2c:56:9e:05:88:60:f8:26:fd:16:3b:67:47:96:83:09:85:36:
         8f:06:90:59:05:78:00:dd:85:b1:c2:f9:f7:aa:88:4a:dc:57:
         e5:05:93:d4:01:56:49:42:b2:b3:1a:20:92:68:11:cb:36:5b:
         8f:9e:05:c7:81:2d:f1:74:35:28:a4:af:9f:78:f8:e9:92:cd:
         f8:38:b3:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Yndyc27TBBckt72BcMY8SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYjMzODdiZTZkMjBkNGEyY2UxM2NjMDkyZTg3Zjc3N2I4
Yjk5NTYwHhcNMjYwNjMwMTMwMDI2WhcNMjYwNzAxMTMwMDI2WjAzMTEwLwYDVQQD
EyhjODYxMTEwNzUyYzE3NzllMGU4NTVhYTE1M2UwNmI5YjZiZmVmNDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXXSy84dfvFQHXjepuIqcvK1Kndk
gd+5xQv2aQU38MHtvRhDXkdNkc4TQ2A6rAi8JVLgZKfpw+giSf5DplUVcj54nKnh
RYrBkaQ6PZX6i57iRFMoEaNC3MWGjUOan4vllDQjthKFQtVXJeCFS6VZS0ioV6tn
LXiuyrOMeiy1LDMEK4M87eFEDBARs1ye/hhedlj1Z1vCuQqv3Nv0xOOe4MCyBIzm
X7xhtbdA6jhkdsorL7Jll/lUn9zCjFUFmX9SRVarfowiFuCIFwm+uciWQeaTMR3e
XrN2oaXRtPUWfUrfw84yfLPahILZ4NusfDWH0dW8I3NWoMTB1YpBmkMpzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhhEQdSwXeeDoVaoVPga5tr/vQ+MB8GA1UdIwQY
MBaAFAuzOHvm0g1KLOE8wJLof3d7i5lWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzdNNGUtYlNEVW9zNFR6QWt1aF9kM3VMbVZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lYzFlZjQtNjFmZS00MGI3LWEwMjgt
NDQwNGQ3ZWU3MTIyLzEvQzdNNGUtYlNEVW9zNFR6QWt1aF9kM3VMbVZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9lYzFlZjQtNjFmZS00MGI3LWEwMjgtNDQwNGQ3ZWU3MTIy
LzEvQzdNNGUtYlNEVW9zNFR6QWt1aF9kM3VMbVZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmmK2082t
kdnFBIEWaoEEN3SJbf38D8Ub/Xu5SsZid+jKAuGJ1oj2BiE1c33cVAIZYpbExYWp
mNsCAYUwkCFkDH4rCrY2a37RKmwqUBJh6/s3lHVROKxhjmPdb1SBzHI1N/GVEgxC
gotO4daVESCswTz5Xu9AMPt81xnjGOZqBsFY6ZZJv2KcmsOV168Y+8i7yPyvzbRk
H+l0XJHc756n7mZ6n9mLrbpfEc4OFtiwU4yPYcAlLFaeBYhg+Cb9FjtnR5aDCYU2
jwaQWQV4AN2FscL596qIStxX5QWT1AFWSUKysxogkmgRyzZbj54Fx4Et8XQ1KKSv
n3j46ZLN+DizGw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:17:14 2026 by rpki-client