Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
File:                     7E0DlAhPfkBiYJco9NTVewZFWlY.mft (raw, json)
Hash identifier:          t4XWY6GMZVO8KS+nN1uYbbwWXfErk86SDYygKpvc5Q0=
Subject key identifier:   B0:55:77:52:92:C1:19:B2:A3:41:D2:A2:4C:CE:26:B1:E5:C9:7C:86
Authority key identifier: EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56
Certificate issuer:       /CN=ec4d0394084f7e4062609728f4d4d57b06455a56
Certificate serial:       019F17C31D116693820B89506CF71708D250
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
Manifest number:          1987
Signing time:             Tue 30 Jun 2026 09:01:30 +0000
Manifest this update:     Tue 30 Jun 2026 09:01:30 +0000
Manifest next update:     Wed 01 Jul 2026 09:01:30 +0000
Files and hashes:         1: 7E0DlAhPfkBiYJco9NTVewZFWlY.crl (hash: MBpSdptejGfxQv+3EVD1ATObC5AGlbLKwMmMJ8f8zAk=)
                          2: NE1cSr4PhSWQqxI3RwadUkiTzr4.roa (hash: gTOFfm6+4dqvFvqDPuHaiv7nUh/TeTbmvELpqBUfVtQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 09:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:c3:1d:11:66:93:82:0b:89:50:6c:f7:17:08:d2:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec4d0394084f7e4062609728f4d4d57b06455a56
        Validity
            Not Before: Jun 30 09:01:30 2026 GMT
            Not After : Jul  1 09:01:30 2026 GMT
        Subject: CN=b055775292c119b2a341d2a24cce26b1e5c97c86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cd:a1:14:e3:1e:c6:ee:06:34:cd:80:e3:f3:
                    2e:06:29:25:29:3c:51:99:ef:a5:7f:53:f6:7f:e6:
                    77:e2:aa:2f:59:66:46:4a:58:7c:73:62:19:d5:4c:
                    dd:70:18:f9:9d:c0:b6:d1:6e:1a:f8:fb:00:0e:d0:
                    b0:e1:e2:25:55:1b:cf:af:97:e6:eb:03:61:f2:6d:
                    39:10:32:15:6b:5b:aa:b5:95:05:b3:f1:08:8b:5a:
                    34:ae:1a:b3:f5:41:af:e4:9d:0e:7d:07:4e:02:fe:
                    63:56:45:c9:f5:22:d3:c5:32:ab:ba:db:79:37:da:
                    cd:8f:1c:b9:67:fb:23:1f:48:76:26:c6:d2:b3:03:
                    e0:5c:fc:7b:18:50:f3:48:8e:9e:2e:83:e2:30:a7:
                    08:06:1e:f3:99:07:be:1b:3d:dd:ab:81:e0:2b:b5:
                    a0:90:3a:60:ba:75:59:c8:93:22:61:d1:fd:71:ef:
                    95:f9:cc:99:d8:ca:86:31:3a:13:2c:e8:df:a5:92:
                    d5:0a:6b:d7:c7:f5:b5:1f:8e:ce:d8:68:32:d5:c7:
                    37:1f:ad:6b:46:a6:2e:cf:9e:db:c7:62:1a:1b:c6:
                    fd:ef:34:09:7f:34:16:d7:3a:c3:66:85:8c:87:31:
                    01:f2:ab:b1:46:7a:ea:2b:b3:e4:82:d9:bf:84:71:
                    7f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:55:77:52:92:C1:19:B2:A3:41:D2:A2:4C:CE:26:B1:E5:C9:7C:86
            X509v3 Authority Key Identifier:
                keyid:EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:a0:79:62:32:51:3d:84:c7:71:85:68:3a:25:7f:55:53:bd:
         33:94:34:f0:dc:5b:ce:04:39:f3:cf:dc:33:aa:bc:0f:63:3d:
         b2:fa:46:e1:2d:2c:96:5c:65:f3:82:12:f0:91:73:e3:43:91:
         40:87:a0:15:fe:87:2a:3c:b5:58:92:df:7e:8d:8b:33:62:54:
         32:6d:bb:49:0f:19:24:a0:a2:31:d3:f2:38:dc:a0:dd:9a:9d:
         b9:eb:64:c0:4b:6b:12:80:3c:5c:d8:d3:af:35:11:a6:fd:58:
         6e:73:eb:2a:18:76:9f:1e:8d:85:44:25:c1:b0:59:44:9f:df:
         0c:b6:34:63:37:b6:d8:78:1e:6c:1d:b3:0b:25:2f:92:85:ae:
         06:9d:60:05:d3:b0:8e:03:be:70:40:57:62:2a:55:6f:f4:0c:
         32:84:4b:46:1d:87:66:cf:68:68:20:26:47:09:37:d0:ee:c6:
         d7:8e:a8:18:53:97:3c:b9:1b:d5:04:48:cf:21:39:84:e9:c0:
         14:cf:60:0f:1e:25:77:1e:e8:81:6b:8f:56:e1:0f:19:fe:29:
         68:f2:83:24:e6:9b:5c:be:11:ee:9f:14:92:c3:3e:dd:53:90:
         28:30:f7:be:33:15:f6:a2:15:f7:2c:e8:b0:bc:00:27:47:6c:
         88:e3:ee:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:40 2026 by rpki-client