Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
File:                     8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft (raw, json)
Hash identifier:          xWcIcMbUQoW628gQZqe0SwNyWWYlmjjZzuvV3dTgyR4=
Subject key identifier:   10:52:51:66:50:AB:D4:62:A1:71:C4:84:84:C3:AE:00:A9:DC:0C:28
Authority key identifier: F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74
Certificate issuer:       /CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174
Certificate serial:       019F19B179CB9508DB84C16648C3FC6A8D49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
Manifest number:          07E4
Signing time:             Tue 30 Jun 2026 18:01:29 +0000
Manifest this update:     Tue 30 Jun 2026 18:01:29 +0000
Manifest next update:     Wed 01 Jul 2026 18:01:29 +0000
Files and hashes:         1: 8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl (hash: aL/8xV2uYNXwVrusGiaBVhHCj/V9a7S6EIlZou8MWoQ=)
                          2: l17vdHF4x4HHoIdKAxBn3NY8F0c.roa (hash: RAFi309N00rxNtnf9we0njxeYbrg65eo2Zw5ZnR4sRY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:b1:79:cb:95:08:db:84:c1:66:48:c3:fc:6a:8d:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174
        Validity
            Not Before: Jun 30 18:01:29 2026 GMT
            Not After : Jul  1 18:01:29 2026 GMT
        Subject: CN=1052516650abd462a171c48484c3ae00a9dc0c28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:33:6e:f8:8f:ed:e5:11:b7:62:bc:54:30:a0:
                    06:60:54:49:d2:fa:e4:69:06:f6:c5:c8:c9:a7:67:
                    5b:a0:62:f6:92:bd:0d:61:ad:62:e6:51:0f:54:fd:
                    5c:4a:a6:5a:da:60:fb:b6:77:a4:8f:12:ef:55:6c:
                    cc:e4:f8:21:da:f5:2a:01:e4:c0:97:62:fc:f5:c6:
                    93:e1:34:e3:59:ed:ec:d9:b4:3c:ab:7d:d7:f1:18:
                    01:35:5f:ca:fa:34:05:83:9f:bd:71:e2:15:4d:ef:
                    ce:0c:7d:08:b4:60:7b:e7:08:eb:fa:c8:43:eb:3d:
                    04:cd:f7:24:4b:64:ad:29:67:23:bb:18:2d:f5:a0:
                    59:f2:fb:76:8a:5a:b5:f7:a1:94:e7:30:f1:5f:bb:
                    b0:04:d9:48:c6:21:6e:96:b1:54:92:db:e0:6f:e0:
                    ba:20:b9:ad:b2:48:74:fe:a1:0a:5c:a6:52:52:75:
                    a1:d4:89:d5:d0:22:81:0e:24:46:e6:e8:89:a5:fd:
                    39:6b:58:ed:4f:40:f2:97:ae:e8:94:70:90:44:3d:
                    19:41:bb:2c:bf:ac:28:e9:0f:57:7a:41:b0:f5:3b:
                    e6:c0:3f:da:b4:ee:77:54:f7:9b:d3:87:32:39:c6:
                    f9:5b:64:14:99:60:c5:ae:84:bd:ae:3a:01:08:63:
                    f7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:52:51:66:50:AB:D4:62:A1:71:C4:84:84:C3:AE:00:A9:DC:0C:28
            X509v3 Authority Key Identifier:
                keyid:F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:66:a2:61:2a:ae:a3:21:d2:8e:28:c0:a8:e4:5e:1c:ea:89:
         7b:de:71:40:c4:e3:89:06:89:cc:4b:0b:94:13:28:42:97:c4:
         33:69:0b:7e:17:01:05:c3:b7:7a:3f:43:50:a4:2b:d8:ae:ac:
         67:ca:f7:a5:d2:36:37:95:3c:64:e4:88:ac:34:85:33:79:98:
         e6:25:0a:9d:00:ec:87:c0:3d:b7:fd:f3:6b:75:7a:21:8e:03:
         24:6e:d2:a2:d7:b9:1f:ea:9e:00:f4:53:51:db:dd:d9:81:e5:
         a9:1e:85:fc:db:4e:0a:bf:45:6c:22:65:59:2c:47:ff:61:d8:
         08:57:1e:32:6d:b9:b2:38:91:2e:08:60:c6:68:c0:9a:fc:6f:
         ff:af:67:2a:ba:04:5c:9f:3f:f2:ac:e1:48:6e:e2:22:1a:1d:
         aa:e9:6a:c5:d5:2c:f6:4c:ae:87:71:36:c3:82:69:0a:6e:ed:
         8b:df:c7:88:0d:c8:80:ef:94:9b:90:d0:07:fc:e9:08:97:ef:
         c8:86:e6:1d:ea:ce:b5:f9:d3:22:8c:03:ad:78:f7:fc:95:75:
         4f:ba:b8:2e:da:6a:72:7e:3f:13:6c:6a:82:76:55:df:e7:d4:
         3e:fd:0a:81:e8:53:ca:2a:15:d6:7a:f1:e0:9a:d8:ce:24:a5:
         67:09:2f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:41:29 2026 by rpki-client