Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
File:                     7ixIe2tr3aIheQctkqjwHo5zZjQ.mft (raw, json)
Hash identifier:          l6pmOmjMId3L9k6Kb5NvSDcdJv3z1WbfeZABZ9RoH/M=
Subject key identifier:   1F:E4:1F:26:B1:48:CE:74:6A:D6:B8:B7:48:77:71:09:B5:72:A8:72
Authority key identifier: EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34
Certificate issuer:       /CN=ee2c487b6b6bdda22179072d92a8f01e8e736634
Certificate serial:       019F183030193924D286648F8C1F7B223B30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
Manifest number:          1987
Signing time:             Tue 30 Jun 2026 11:00:38 +0000
Manifest this update:     Tue 30 Jun 2026 11:00:38 +0000
Manifest next update:     Wed 01 Jul 2026 11:00:38 +0000
Files and hashes:         1: 7ixIe2tr3aIheQctkqjwHo5zZjQ.crl (hash: 4q1hY3ISZUIFfLaMC/rY3YKIdKqvxK8WWfvxuKssYZg=)
                          2: _osGDzZycVvwVO8jk7tST0-kMuc.roa (hash: V5At1uVjWkeBJy6WzVu631/zeJQGqErhpfeeQ5kY2uw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 11:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:30:30:19:39:24:d2:86:64:8f:8c:1f:7b:22:3b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee2c487b6b6bdda22179072d92a8f01e8e736634
        Validity
            Not Before: Jun 30 11:00:38 2026 GMT
            Not After : Jul  1 11:00:38 2026 GMT
        Subject: CN=1fe41f26b148ce746ad6b8b748777109b572a872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:db:0d:51:4e:90:7d:c6:ca:90:57:6e:ed:07:
                    52:4f:bb:16:9f:23:d0:20:33:6f:c1:c6:12:d1:a7:
                    48:98:68:88:60:32:2a:86:e4:98:80:d7:26:f9:8c:
                    b2:18:89:2f:8a:d2:5e:e5:35:7c:27:dc:b9:c6:c0:
                    67:01:b5:c4:63:d1:ec:49:3b:99:fd:21:82:a0:6d:
                    22:f7:93:37:96:db:4b:a0:34:03:a8:4f:ee:09:37:
                    da:75:4e:7a:26:b0:22:b1:8e:d4:f7:dd:3c:71:a0:
                    b1:1c:65:c6:0a:d9:bb:78:02:88:54:2e:8d:7d:62:
                    5e:ba:f5:f4:e7:a6:54:25:85:21:67:3d:1c:2f:5d:
                    ab:1c:ad:53:e1:7a:6d:e0:db:38:07:41:8c:f1:4e:
                    62:a7:6d:0d:a9:67:9c:22:7f:e4:e7:5b:4e:d8:e0:
                    e0:75:3b:f8:53:e8:94:94:25:c7:a3:f1:a5:85:4d:
                    52:39:7c:3c:b1:4d:91:ed:d5:7b:e4:ca:33:ea:95:
                    82:6a:f8:3e:c0:d8:81:01:79:b4:51:85:cb:ba:71:
                    a8:60:0b:f5:57:3b:21:52:f2:a6:5f:7a:24:c2:9a:
                    af:e6:a8:ce:3f:6a:52:07:bf:37:44:3a:1e:73:dd:
                    5e:67:e8:4c:43:f9:4c:f7:5b:b6:d8:24:51:3a:0d:
                    41:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E4:1F:26:B1:48:CE:74:6A:D6:B8:B7:48:77:71:09:B5:72:A8:72
            X509v3 Authority Key Identifier:
                keyid:EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:27:3a:98:21:96:be:33:13:b2:33:8f:ff:b1:0d:a6:03:76:
         86:5a:88:9c:eb:ee:d6:c5:88:d5:8b:da:0d:3b:08:24:0c:ca:
         3c:5f:29:7e:25:89:f1:64:96:70:84:03:45:86:bd:b7:da:b0:
         b3:7b:4d:c4:57:1c:08:ba:1e:94:f9:76:93:53:b1:94:f0:1b:
         60:e5:e5:c6:67:8e:ec:0d:ee:e1:f1:42:bf:e4:73:03:26:19:
         04:31:d9:6b:ae:84:53:e2:ca:ec:83:32:f9:5b:67:dd:2f:d2:
         5c:f9:07:2c:6a:88:99:1f:46:46:08:69:c5:04:e8:1f:f1:b0:
         9c:67:e4:fe:21:0d:0b:4f:a4:fa:28:71:bb:dc:d7:6a:72:8b:
         6b:60:c8:ba:8e:63:2d:67:4f:ce:6e:13:b2:9d:77:19:6e:43:
         ef:04:b5:ee:7f:32:52:f6:93:c5:43:ef:74:74:85:aa:6e:d0:
         ad:0b:a2:27:8a:9d:07:ff:d6:c8:b7:1a:39:ca:64:c8:9c:e0:
         a8:21:a0:fe:00:ee:e4:a2:66:ea:31:cc:d4:51:61:2b:dd:77:
         d8:9e:a9:0c:54:d2:68:47:13:98:aa:0b:b2:2b:26:61:34:2c:
         d1:b2:7f:5f:73:e8:4e:c9:63:b8:1f:db:f0:57:15:ba:eb:e8:
         e6:d7:68:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:36 2026 by rpki-client