Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
File:                     7D09fly_GK9mt_W0peCsGezTmHY.mft (raw, json)
Hash identifier:          htJxRjzqjAjabCqXDZ/iGMUjoB0WST5yDMRSJjBBfBY=
Subject key identifier:   71:FE:47:73:C6:AD:DB:6B:03:AD:B7:A6:2A:AC:91:3C:AB:FF:D8:E8
Authority key identifier: EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76
Certificate issuer:       /CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
Certificate serial:       019F189E5B67C74E9EAFE4FB017F75063448
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
Manifest number:          1986
Signing time:             Tue 30 Jun 2026 13:00:58 +0000
Manifest this update:     Tue 30 Jun 2026 13:00:58 +0000
Manifest next update:     Wed 01 Jul 2026 13:00:58 +0000
Files and hashes:         1: 7D09fly_GK9mt_W0peCsGezTmHY.crl (hash: p59x42QBubMtcb61uR8SoBOEhe6GIWkt18m/0eGD0R0=)
                          2: nN1vJKXnh7cBHLy2sd7dD0QgOGI.roa (hash: 5guFUg6Oi5MmxQ+r87vyLbR34PherKnPHqG39PlmmF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:5b:67:c7:4e:9e:af:e4:fb:01:7f:75:06:34:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
        Validity
            Not Before: Jun 30 13:00:58 2026 GMT
            Not After : Jul  1 13:00:58 2026 GMT
        Subject: CN=71fe4773c6addb6b03adb7a62aac913cabffd8e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:67:00:ed:de:08:8d:4a:b0:01:90:e4:8d:a9:
                    28:6c:18:df:0c:12:74:11:1c:ea:83:1b:ac:b1:c2:
                    b8:a4:c2:2b:c7:5d:48:f5:5f:72:3b:2c:6c:fc:3d:
                    80:73:94:6c:6f:92:3b:60:8d:32:0a:b7:aa:3d:43:
                    07:9b:40:44:c3:7d:63:c1:76:af:8f:20:1a:35:de:
                    f6:b6:5d:27:75:33:a8:0d:99:33:36:d3:19:91:fd:
                    e6:7c:3c:c4:78:8b:55:c7:d4:17:92:f4:f5:cb:6e:
                    b3:bd:94:70:1a:fc:23:a1:a3:03:b2:72:e6:88:10:
                    28:5c:b5:cf:08:0c:43:3c:f5:9f:70:15:a7:c6:68:
                    7a:a8:5e:26:f1:3d:e1:1d:cb:1a:01:23:77:3d:eb:
                    55:58:ab:62:19:2c:cd:bf:1f:b9:cd:f4:8d:ad:57:
                    62:37:0e:e6:19:36:7b:cf:be:e8:57:d4:d5:ea:5b:
                    21:b6:92:3c:7f:2b:36:09:b6:fa:e0:4c:0c:5c:ee:
                    d7:d7:cb:1b:31:f8:12:7f:e0:75:d7:84:aa:8f:a1:
                    6c:b2:81:c3:58:61:91:05:e2:e1:7d:46:fb:fc:fe:
                    c1:37:dc:7c:62:24:38:0b:95:9f:12:b5:0c:76:b7:
                    84:32:25:bd:fc:a1:fb:65:eb:6d:98:57:e3:11:9f:
                    96:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:FE:47:73:C6:AD:DB:6B:03:AD:B7:A6:2A:AC:91:3C:AB:FF:D8:E8
            X509v3 Authority Key Identifier:
                keyid:EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:c4:41:f4:48:86:0b:db:95:81:08:0d:9b:85:9e:05:77:b8:
         86:ba:a5:6a:95:9e:dd:e6:bb:51:e9:70:a6:f6:f7:44:fc:d2:
         63:f5:f7:9b:a9:e0:df:80:53:9a:96:1f:2c:d4:e8:94:c0:07:
         f3:4e:73:f6:aa:97:9b:67:55:e5:6d:94:cc:a3:e3:03:f4:ed:
         19:22:a2:29:0a:be:85:2c:52:b7:1d:2d:83:63:1b:12:12:de:
         7b:a8:4f:01:f6:7b:cf:eb:d3:ba:6a:48:b7:28:e4:25:50:33:
         7a:f0:02:aa:0d:e7:69:7a:6b:ef:1c:1d:2a:7c:34:5f:2f:47:
         14:de:e4:15:df:7f:1e:87:8f:ec:b3:65:b2:5e:c8:7b:85:24:
         0e:52:3c:a6:45:6c:07:6b:d0:22:fe:50:f2:1b:11:06:7a:7a:
         34:ac:39:1d:ff:aa:ef:58:ac:7b:51:a2:4c:fc:b9:4c:6c:d6:
         ee:c1:81:69:ea:7c:6e:2e:38:90:87:af:41:97:e5:57:fb:83:
         22:77:e8:39:ba:ca:1f:15:2d:f7:80:16:75:4e:9e:bf:ff:70:
         a8:23:a3:8d:43:b7:f8:4f:6c:ee:1d:3a:be:73:95:e0:ad:ef:
         13:00:84:97:eb:f7:f5:8b:81:96:7c:39:5a:9c:8f:61:da:69:
         85:8e:db:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Ynltnx06er+T7AX91BjRIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjM2QzZDdlNWNiZjE4YWY2NmI3ZjViNGE1ZTBhYzE5ZWNk
Mzk4NzYwHhcNMjYwNjMwMTMwMDU4WhcNMjYwNzAxMTMwMDU4WjAzMTEwLwYDVQQD
Eyg3MWZlNDc3M2M2YWRkYjZiMDNhZGI3YTYyYWFjOTEzY2FiZmZkOGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7mcA7d4IjUqwAZDkjakobBjfDBJ0
ERzqgxusscK4pMIrx11I9V9yOyxs/D2Ac5Rsb5I7YI0yCreqPUMHm0BEw31jwXav
jyAaNd72tl0ndTOoDZkzNtMZkf3mfDzEeItVx9QXkvT1y26zvZRwGvwjoaMDsnLm
iBAoXLXPCAxDPPWfcBWnxmh6qF4m8T3hHcsaASN3PetVWKtiGSzNvx+5zfSNrVdi
Nw7mGTZ7z77oV9TV6lshtpI8fys2Cbb64EwMXO7X18sbMfgSf+B114Sqj6FssoHD
WGGRBeLhfUb7/P7BN9x8YiQ4C5WfErUMdreEMiW9/KH7ZettmFfjEZ+WXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHH+R3PGrdtrA623piqskTyr/9joMB8GA1UdIwQY
MBaAFOw9PX5cvxivZrf1tKXgrBns05h2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0QwOWZseV9HSzltdF9XMHBlQ3NHZXpUbUhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iNjU5ZmMtNmI5Yi00ODQ3LWI2YTMt
NDY2MGZhZDgzOTg1LzEvN0QwOWZseV9HSzltdF9XMHBlQ3NHZXpUbUhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9iNjU5ZmMtNmI5Yi00ODQ3LWI2YTMtNDY2MGZhZDgzOTg1
LzEvN0QwOWZseV9HSzltdF9XMHBlQ3NHZXpUbUhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMRB9EiG
C9uVgQgNm4WeBXe4hrqlapWe3ea7Uelwpvb3RPzSY/X3m6ng34BTmpYfLNTolMAH
805z9qqXm2dV5W2UzKPjA/TtGSKiKQq+hSxStx0tg2MbEhLee6hPAfZ7z+vTumpI
tyjkJVAzevACqg3naXpr7xwdKnw0Xy9HFN7kFd9/HoeP7LNlsl7Ie4UkDlI8pkVs
B2vQIv5Q8hsRBnp6NKw5Hf+q71ise1GiTPy5TGzW7sGBaep8bi44kIevQZflV/uD
InfoObrKHxUt94AWdU6ev/9wqCOjjUO3+E9s7h06vnOV4K3vEwCEl+v39YuBlnw5
WpyPYdpphY7bfQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:56 2026 by rpki-client