Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
File:                     etB83meC_U_FaIV-hIRlW1AkhxA.mft (raw, json)
Hash identifier:          2Jzkt4uWBG9g5bZE39bJp8u31Ibzv6to6GAkiXwCTzE=
Subject key identifier:   32:9F:34:BB:B1:71:66:E2:AE:07:BE:62:BA:0D:86:58:C3:0D:C8:44
Authority key identifier: 7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10
Certificate issuer:       /CN=7ad07cde6782fd4fc568857e8484655b50248710
Certificate serial:       019F9F27DE2674FD306DB00253A913A53AA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
Manifest number:          07E2
Signing time:             Sun 26 Jul 2026 16:00:17 +0000
Manifest this update:     Sun 26 Jul 2026 16:00:17 +0000
Manifest next update:     Mon 27 Jul 2026 16:00:17 +0000
Files and hashes:         1: eCo9qXRcDZLgJlgoHLS9NExTbx4.roa (hash: BYg8Ba7NDfA7mgNndMx+S8c/mZhCBPail+1jI3QYxnk=)
                          2: etB83meC_U_FaIV-hIRlW1AkhxA.crl (hash: 54bU5xd5nxmM+8igy2mN8s0A2nKqM9Ybn4aMBVWzKL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:27:de:26:74:fd:30:6d:b0:02:53:a9:13:a5:3a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ad07cde6782fd4fc568857e8484655b50248710
        Validity
            Not Before: Jul 26 16:00:17 2026 GMT
            Not After : Jul 27 16:00:17 2026 GMT
        Subject: CN=329f34bbb17166e2ae07be62ba0d8658c30dc844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e0:99:e7:b7:8e:23:88:18:2e:a6:74:33:e1:
                    77:04:72:99:c9:b1:21:3f:d8:f4:98:a2:d1:39:a9:
                    8d:22:55:b0:e5:f3:9f:40:4e:00:e3:bf:ac:75:38:
                    30:20:be:37:aa:0e:35:40:e7:05:3c:61:68:c3:52:
                    da:a1:69:91:58:6c:46:be:35:0b:d4:45:fe:22:a1:
                    b3:ed:23:32:f8:c6:20:39:5f:26:00:64:fa:3d:f7:
                    2a:0a:29:95:ca:5d:b5:4b:5f:a6:8f:32:26:55:8a:
                    f3:a3:74:4e:60:d0:36:a7:33:bc:65:72:cb:f1:1d:
                    d7:d5:29:03:1b:43:b1:6e:10:93:b2:cf:10:fe:e7:
                    fb:ac:5b:a9:4d:f1:31:10:d2:3d:dc:96:2e:ce:1f:
                    30:8c:23:a1:66:3b:ca:27:72:65:f7:54:07:58:ca:
                    87:25:97:33:9c:16:2a:c8:74:68:a8:92:d1:b9:8d:
                    37:6b:5b:b8:2f:82:3d:28:e5:22:92:83:fa:39:2c:
                    bf:d0:ee:1a:19:ee:24:61:0d:85:cd:73:a7:fd:4e:
                    0b:6c:9b:c7:ed:17:0f:77:a6:fc:c3:2f:93:0a:b8:
                    3b:9b:30:70:74:a7:7a:45:10:60:1f:80:05:9d:05:
                    5b:93:71:7b:eb:43:df:a4:9a:38:59:e6:54:85:95:
                    ed:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:9F:34:BB:B1:71:66:E2:AE:07:BE:62:BA:0D:86:58:C3:0D:C8:44
            X509v3 Authority Key Identifier:
                keyid:7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:6e:40:cc:d0:6e:d4:41:38:83:48:0e:60:b6:42:4f:56:e7:
         1c:90:8f:92:e4:14:62:d6:93:27:3e:7a:de:40:d5:3b:08:91:
         47:62:f6:07:0a:eb:54:48:9d:fd:e0:06:56:92:99:16:76:b8:
         00:d3:76:f6:69:3f:bf:b6:02:b5:84:ef:c4:dc:0e:b0:03:52:
         ae:c9:cb:e4:86:14:e0:d3:5a:95:9e:17:ae:17:db:91:4e:4b:
         29:d7:36:98:25:6c:3f:b6:38:22:24:0b:f9:7c:a4:e5:75:77:
         db:a5:8e:39:7c:f5:3d:11:b9:7f:2d:21:3d:7a:78:27:d9:70:
         b8:fb:59:c8:1f:7c:9b:27:ee:10:16:fc:e9:9f:7c:3f:6e:54:
         ed:28:e6:c5:7a:98:74:06:25:1e:6e:4a:ce:0e:c3:92:b7:f8:
         17:9f:25:5d:33:fe:92:46:41:ff:ef:7b:25:b3:87:7e:83:5f:
         5f:4d:a6:4c:29:7d:88:4a:15:48:56:c3:76:b1:fe:91:33:ef:
         4f:0b:9f:ee:47:82:d0:b9:0d:43:65:4f:11:e1:a2:ce:e7:4d:
         54:be:7c:c8:a6:6e:f2:0f:c3:e1:03:e3:65:8b:8b:9e:61:4f:
         f1:3e:6f:70:89:4d:17:c2:f7:43:43:0e:b4:95:aa:ec:fc:b3:
         48:43:f9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 01:08:30 2026 by rpki-client