Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
File:                     D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft (raw, json)
Hash identifier:          zjEhnTsPYGKqK049/DCsIfzsAk0CYsP3HQdNFznLuBI=
Subject key identifier:   07:96:30:E2:45:2D:ED:FB:01:06:43:6C:9B:16:47:6C:F4:12:52:BE
Authority key identifier: 0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4
Certificate issuer:       /CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
Certificate serial:       019FA82B80CE95048E89815591A09CFE268C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
Manifest number:          0945
Signing time:             Tue 28 Jul 2026 10:00:50 +0000
Manifest this update:     Tue 28 Jul 2026 10:00:50 +0000
Manifest next update:     Wed 29 Jul 2026 10:00:50 +0000
Files and hashes:         1: 9VeKZDE1iGHZNfZDG7yt114IeSs.roa (hash: osxP6EgjjjBz4lB4YyG0W3qp7xP9edg7UyqKvlF/CrE=)
                          2: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl (hash: +twwidfN7GWbj7/beof169l1NSek2bSvGeKEqQo2uO4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 10:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:2b:80:ce:95:04:8e:89:81:55:91:a0:9c:fe:26:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
        Validity
            Not Before: Jul 28 10:00:50 2026 GMT
            Not After : Jul 29 10:00:50 2026 GMT
        Subject: CN=079630e2452dedfb0106436c9b16476cf41252be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2f:fc:21:eb:99:bb:b5:32:ef:16:f8:ab:09:
                    9e:bd:83:c8:01:37:56:f3:b7:af:2b:33:1c:b8:3f:
                    67:11:b9:6c:3b:59:57:e5:92:f0:27:d9:83:70:37:
                    5e:ed:63:65:69:06:94:74:77:51:b0:63:37:c2:9b:
                    43:02:e3:6d:af:74:6d:af:4e:dd:64:d3:84:63:4a:
                    30:ca:d3:70:f0:66:c7:d5:88:d4:36:bc:e0:af:f6:
                    81:1e:66:b8:5b:1e:7a:88:c5:65:5e:e3:71:12:57:
                    09:3b:4f:e7:da:ff:bd:86:44:d0:bc:63:ec:9f:b4:
                    db:3b:a4:ca:a6:07:65:c9:79:e4:cd:a3:20:4c:8e:
                    fd:f3:5a:23:4c:00:80:fb:b3:a9:f9:30:18:f3:ff:
                    df:fc:4e:b4:65:cb:c8:3a:a2:22:52:3c:6b:df:3e:
                    5c:44:23:06:8f:ec:ef:9b:1f:8f:1a:f0:06:6a:10:
                    2d:bf:3d:3a:ec:a2:cc:98:93:66:21:e5:70:ef:76:
                    2c:19:5c:6e:7e:a5:31:0a:b0:79:a5:79:3d:e7:71:
                    19:0f:5a:2a:cd:95:cc:fa:f1:4b:bf:e9:34:8c:c3:
                    c8:e7:fe:49:7f:30:04:9c:21:68:f1:3e:81:51:62:
                    97:cc:3b:7f:56:b2:6f:0f:a5:9a:62:52:84:73:48:
                    7a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:96:30:E2:45:2D:ED:FB:01:06:43:6C:9B:16:47:6C:F4:12:52:BE
            X509v3 Authority Key Identifier:
                keyid:0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:c5:14:ab:6f:fe:9b:8e:95:73:41:5e:d7:e8:11:73:26:57:
         1c:3e:72:95:27:6a:ef:6b:7e:52:ce:20:d3:31:bc:93:07:11:
         a3:e6:bb:56:90:d7:82:df:4f:a7:28:a6:2d:ee:78:f9:bd:3d:
         77:ea:11:42:dd:71:13:ab:46:4e:49:e3:27:d2:be:a8:8e:e6:
         22:a2:2f:49:3a:9f:9e:4e:82:4b:ed:fe:80:8f:56:02:cb:32:
         a0:1c:e0:34:a7:28:00:ed:ab:40:94:e8:95:da:d1:30:e7:f4:
         9a:ac:90:da:88:c9:1e:3b:0f:8b:a5:5c:53:c6:20:d3:8e:c7:
         34:25:25:76:8d:fa:52:62:b6:06:51:32:7a:1c:8f:cc:d5:20:
         ce:b7:cc:99:99:f3:d5:81:5d:fb:68:d8:3f:6e:b6:c7:41:9b:
         f1:b2:52:60:43:4e:54:a6:d4:cc:0c:f5:d6:e4:b5:4d:de:0b:
         19:60:ab:a5:81:21:c6:5e:44:0b:7e:38:84:e5:7e:35:93:f2:
         c3:60:af:78:fb:b3:de:06:bd:2a:0e:4e:3b:c0:7e:96:2e:6a:
         a3:74:43:52:33:95:40:51:e9:6b:92:29:3b:7e:98:ef:3a:84:
         1f:22:78:d3:e1:2f:9b:a4:53:9f:07:ef:f0:ef:5a:c5:01:a2:
         83:6c:67:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:12:25 2026 by rpki-client