Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
File:                     7_ZbcAAg4w1z07HfeCceVD4wjzo.mft (raw, json)
Hash identifier:          LowG2Ig/zueHHQood/DknqPOJy815XOJUHXrgfzMZRw=
Subject key identifier:   B7:44:B7:16:F7:16:BE:B9:C4:3A:C0:B0:2D:5D:33:5B:53:BB:F8:62
Authority key identifier: EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A
Certificate issuer:       /CN=eff65b700020e30d73d3b1df78271e543e308f3a
Certificate serial:       019EC06E477C9F8D576F6723526EEA0DA1F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
Manifest number:          10C0
Signing time:             Sat 13 Jun 2026 10:01:52 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:52 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:52 +0000
Files and hashes:         1: 7_ZbcAAg4w1z07HfeCceVD4wjzo.crl (hash: qUzczXYD7M4U5d767la6MOi2CHPwa4e4kP0/SwebLNk=)
                          2: xWJAqfrPXr4KnkU7Qd4lSzlkp8o.roa (hash: ceeD+cwy4G4/W2RDlhQiQMMWpwCMIwxk/08X/W6eMjI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6e:47:7c:9f:8d:57:6f:67:23:52:6e:ea:0d:a1:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eff65b700020e30d73d3b1df78271e543e308f3a
        Validity
            Not Before: Jun 13 10:01:52 2026 GMT
            Not After : Jun 14 10:01:52 2026 GMT
        Subject: CN=b744b716f716beb9c43ac0b02d5d335b53bbf862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:12:08:62:3a:5f:02:cc:4c:d7:47:e5:fc:ff:
                    b3:2b:4c:71:32:fe:a3:97:15:74:4f:2b:bd:cf:0d:
                    c7:89:31:ae:16:0d:02:9e:be:fe:3f:02:cc:99:85:
                    3d:a8:aa:74:dd:72:62:36:87:31:7f:5d:28:6b:fe:
                    1c:fe:7f:8e:75:e9:2f:f8:7e:6c:2d:ec:30:37:07:
                    0a:18:b8:b4:ac:40:88:af:da:c0:60:35:4b:98:5f:
                    9d:bb:d8:d4:c7:b8:93:e4:8b:18:ae:2d:74:59:fe:
                    d7:68:ab:cc:83:de:43:d5:a4:db:01:77:3d:dd:24:
                    3b:93:32:e1:96:75:32:d4:b0:9a:dc:80:77:0d:26:
                    7c:22:fa:72:03:74:6f:bf:17:95:77:ed:22:b5:99:
                    6f:56:f2:5f:bd:cf:af:ff:87:66:cc:fc:85:ab:e0:
                    74:0e:14:ca:c7:fa:ec:ce:66:e8:4b:47:c0:1f:11:
                    02:82:31:7c:e0:22:19:b5:3a:c3:97:c8:d6:59:ff:
                    d8:ef:e7:5b:9d:d9:20:36:15:7c:58:5d:dd:63:3a:
                    66:07:83:2d:b7:cb:c7:67:9a:cd:9e:98:dd:84:c4:
                    cf:a8:97:22:3e:0b:89:9c:a4:e7:eb:aa:0b:d3:07:
                    c0:fe:0a:22:36:df:ed:54:77:bc:4f:72:ea:fc:01:
                    5d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:44:B7:16:F7:16:BE:B9:C4:3A:C0:B0:2D:5D:33:5B:53:BB:F8:62
            X509v3 Authority Key Identifier:
                keyid:EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:2b:37:a5:72:4b:93:71:23:e7:88:94:ad:c0:f1:f3:c4:88:
         1d:ae:b0:c5:64:b7:72:9d:33:b3:f5:8c:bb:20:a6:82:51:e5:
         74:e7:3e:e8:fb:70:20:e7:e0:90:e0:ad:85:02:37:f9:64:d7:
         90:3a:74:83:4d:12:14:1b:c9:31:03:c3:d5:76:c7:a5:e6:60:
         77:99:49:8b:22:b6:b4:bd:5a:1d:f8:9a:8a:72:7f:da:fb:55:
         7a:de:b4:22:e7:e6:cc:4d:79:43:7a:0b:78:ee:59:e5:db:16:
         73:99:da:be:f3:bd:65:77:24:70:69:87:52:2e:65:be:5a:cf:
         42:32:aa:ae:96:17:c2:e0:88:81:80:a2:76:5f:96:b2:df:b3:
         4d:42:6d:b1:be:f3:0d:ba:1c:10:f1:18:ec:a2:83:e1:92:63:
         6c:18:b3:1f:23:26:bc:54:7f:48:c0:6d:f8:e4:af:e9:ea:0e:
         8e:2f:25:db:9a:d4:3d:fb:28:97:7c:5f:19:98:64:6f:94:0b:
         3c:42:0c:d4:f7:e4:65:c9:a7:ab:8d:6f:d8:c0:ee:0b:cd:1b:
         75:26:d9:da:e8:3c:1f:77:2d:cc:56:da:3e:14:72:e8:82:87:
         64:61:e6:64:d1:9f:25:69:af:73:cf:1b:c4:89:fc:4c:46:a3:
         8a:57:47:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:12:58 2026 by rpki-client