Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
File:                     7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft (raw, json)
Hash identifier:          +/xhVRscgnPZ7uCovJDgiyXhNJ2+Tp8HK1/CYuOyREU=
Subject key identifier:   DA:4B:53:1F:20:88:3D:A5:70:85:FD:B0:8B:D2:CB:A1:9F:0C:DA:E6
Authority key identifier: EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC
Certificate issuer:       /CN=ef2a98b221abe4dd95999eef292ff0bea41218ac
Certificate serial:       019FA03B256CBC6C9D3ACF44AD47956EE4D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
Manifest number:          1838
Signing time:             Sun 26 Jul 2026 21:00:58 +0000
Manifest this update:     Sun 26 Jul 2026 21:00:58 +0000
Manifest next update:     Mon 27 Jul 2026 21:00:58 +0000
Files and hashes:         1: 7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl (hash: uMToZBSne363StMWbcYw9FFMGMGtslZ90LGvGnCXoso=)
                          2: JKtuYAZj6V_iBv09WZvX1K5boYU.roa (hash: cKfPg8sNS79bgJa5PrvUDPTVTEFYtl+oJ3wNQ/Dq8wg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 21:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:3b:25:6c:bc:6c:9d:3a:cf:44:ad:47:95:6e:e4:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef2a98b221abe4dd95999eef292ff0bea41218ac
        Validity
            Not Before: Jul 26 21:00:58 2026 GMT
            Not After : Jul 27 21:00:58 2026 GMT
        Subject: CN=da4b531f20883da57085fdb08bd2cba19f0cdae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:36:c9:8e:77:46:cb:cf:0b:69:52:53:af:8a:
                    40:09:90:24:f5:b3:45:19:66:d1:36:ee:ab:d4:e7:
                    d8:05:57:73:fb:4c:48:48:ec:e1:a4:cb:36:61:20:
                    35:26:68:00:eb:b8:80:f2:0b:28:e6:93:24:c9:6a:
                    32:f2:15:9f:84:b9:7d:a2:9a:de:15:ec:38:b2:20:
                    45:fe:86:8d:e6:80:ff:75:d2:e7:45:01:00:44:af:
                    10:8f:12:4f:19:71:b2:d0:e9:0f:ab:d9:14:79:be:
                    9d:cc:dc:00:60:2c:9f:20:bc:f1:48:4e:00:85:e9:
                    90:91:9d:52:14:f8:34:f8:41:03:de:81:22:20:e6:
                    91:5e:3d:c6:da:11:e1:2e:45:5f:3b:19:57:3a:fb:
                    3d:31:b2:6c:19:2c:f7:88:97:c2:b9:f4:42:f6:d2:
                    ac:87:44:c9:63:39:da:30:44:92:67:87:2a:68:db:
                    d3:19:50:3b:50:83:f5:50:42:48:d9:53:78:39:3c:
                    5f:e2:4e:50:9c:0e:51:14:c3:a4:93:9a:2b:84:a2:
                    9d:24:a1:da:ea:97:ed:98:8d:0a:3a:97:f2:c7:c9:
                    6c:b3:f9:80:9d:93:22:06:9b:36:de:4c:d1:93:c7:
                    b6:c7:6f:e3:de:00:01:47:3f:45:78:6b:72:01:8c:
                    e0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4B:53:1F:20:88:3D:A5:70:85:FD:B0:8B:D2:CB:A1:9F:0C:DA:E6
            X509v3 Authority Key Identifier:
                keyid:EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:a0:43:d1:15:3c:6c:11:a0:ea:d6:c4:05:03:bb:c0:41:28:
         0b:de:65:de:8f:ea:a8:52:7b:b9:ed:16:7e:db:e4:b0:9f:34:
         76:56:2b:db:30:24:1b:d7:02:40:bc:59:d8:da:0d:dd:ea:e6:
         90:08:56:d0:11:9f:48:e2:e1:23:8a:4c:ea:ba:31:48:f3:9b:
         60:4d:9a:bf:64:2f:76:c9:50:a7:c2:b2:02:ea:ed:d5:53:53:
         be:31:99:dc:2b:12:c9:87:e4:1c:69:f1:9b:0f:cf:ff:38:fb:
         2b:05:92:54:cb:1e:9a:00:85:50:e3:8f:73:75:34:74:80:4c:
         68:91:a6:39:02:0a:34:04:27:f1:25:04:08:21:67:a1:00:6c:
         19:92:1e:91:d1:9f:0d:5c:5b:3f:dd:4f:17:a4:a7:d4:c8:7a:
         c8:b6:1a:e4:22:7b:e7:13:42:af:8e:d1:51:0f:9c:e6:c2:fa:
         1b:bc:e8:fe:7e:e9:de:3c:ee:7e:39:a8:38:0f:39:04:50:b9:
         3d:08:63:e8:77:d8:21:1b:87:1b:6b:0a:6a:94:c6:4d:9c:60:
         bd:a3:2c:3b:cf:e5:c4:dc:b5:8f:5b:cd:c9:e5:13:20:d3:4c:
         dd:fa:dc:0a:b0:3c:cf:86:2a:6f:a4:65:13:8f:f9:0d:da:f6:
         8b:f6:9c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:04:45 2026 by rpki-client