Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
File:                     7We7dYi4LXDYy3PU5FF39n7O8hM.mft (raw, json)
Hash identifier:          5Qkg0bt5R7zevYFQn9OFj2bEljqCiIYOx8UW+z8RP0A=
Subject key identifier:   1C:A5:68:ED:17:24:72:D0:02:15:08:A6:DC:C4:D5:26:FF:51:F3:F7
Authority key identifier: ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13
Certificate issuer:       /CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213
Certificate serial:       019EBE111CD8698C7DEB1AEF8638A35DE8B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
Manifest number:          069C
Signing time:             Fri 12 Jun 2026 23:00:52 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:52 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:52 +0000
Files and hashes:         1: 7We7dYi4LXDYy3PU5FF39n7O8hM.crl (hash: H5SpeWtFTTKmDoj550AjVja5u+4AFU4JELxWiGGm5NQ=)
                          2: s7LS5E2_BqhGC5kkRJyj8qADFIY.roa (hash: F29Cc0fGTR/n9/kt6ymI38j28/wC/Ug/3ed8suC1jpQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:11:1c:d8:69:8c:7d:eb:1a:ef:86:38:a3:5d:e8:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213
        Validity
            Not Before: Jun 12 23:00:52 2026 GMT
            Not After : Jun 13 23:00:52 2026 GMT
        Subject: CN=1ca568ed172472d0021508a6dcc4d526ff51f3f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0e:ec:68:06:d5:4e:38:02:0c:5a:5a:d1:40:
                    48:5e:19:b3:ce:ad:c5:5b:9c:e3:ba:ef:22:bb:5e:
                    52:da:37:47:aa:45:20:be:3f:0b:ef:c1:5c:00:09:
                    9b:01:64:43:67:ce:6f:f2:73:0a:40:aa:f1:a0:63:
                    3f:b0:4a:3f:d0:38:b7:45:49:bd:e7:1f:ea:a2:0d:
                    ec:2a:f8:0c:53:4c:af:51:d4:3d:3f:6b:fe:18:5d:
                    9a:9d:c1:33:03:a3:e7:0c:a9:c0:ec:2b:0a:e9:a2:
                    8a:53:d8:c5:a4:16:8b:bd:80:c6:7d:9f:7d:e7:0a:
                    8b:0a:45:01:d3:92:bf:60:c8:e8:b2:09:ba:13:d4:
                    c2:47:e5:92:fb:ad:bb:af:4c:59:4c:d7:1f:15:33:
                    dc:f4:7c:53:53:e2:2f:f6:27:67:fa:14:6e:a8:1c:
                    63:bc:37:d1:84:96:7e:f2:4f:26:cc:ac:f7:5d:bc:
                    4f:0f:eb:a6:77:68:80:3e:f0:8c:5c:82:66:b2:ea:
                    ff:c0:c8:ec:e5:75:37:e0:7f:eb:ea:6f:1c:3a:5e:
                    12:76:2f:a9:f5:35:49:73:60:26:4a:23:c1:cf:ac:
                    81:50:cc:bf:8c:1e:14:c4:0a:76:ab:2e:4d:98:f9:
                    30:94:74:16:74:d9:f0:e6:44:66:10:4a:ab:3b:49:
                    b3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A5:68:ED:17:24:72:D0:02:15:08:A6:DC:C4:D5:26:FF:51:F3:F7
            X509v3 Authority Key Identifier:
                keyid:ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:6b:6a:c2:63:56:14:48:39:06:0c:de:43:80:04:20:21:58:
         1d:20:d6:f1:b0:88:32:5d:7f:f2:a7:62:a9:96:a2:3b:a9:a6:
         4d:56:59:03:9d:75:bc:5f:70:d9:aa:65:59:64:66:4b:28:4d:
         3a:bd:bb:20:00:a2:b7:e8:93:43:75:9f:d7:20:52:fc:10:1f:
         2c:21:59:36:fa:5d:1a:d0:44:50:b5:7e:4e:9a:b9:26:26:11:
         72:df:64:78:d5:17:0e:01:1b:2b:69:95:83:62:07:19:90:ef:
         e1:96:d2:4c:77:a5:d1:c8:74:f7:68:a9:4c:e5:52:7c:7a:27:
         8a:66:fa:f6:11:79:f8:fb:b3:f3:0a:a1:8a:9f:2f:c6:ad:76:
         77:fa:b7:7a:f3:eb:33:e8:cf:29:1f:b2:8a:58:7e:16:54:bc:
         23:f3:6e:eb:a6:ad:09:d2:3f:b6:ba:38:66:a8:c9:bb:12:15:
         39:82:5c:ff:d1:95:c8:bb:d5:b5:27:81:08:b0:9e:22:45:16:
         42:2f:b3:f9:a3:b0:d6:f3:3e:1c:2b:c4:8b:e1:3d:9a:4f:4a:
         ad:d3:03:9d:54:49:9b:1f:33:ad:17:00:d0:13:81:8c:0e:45:
         d0:36:fb:82:97:9d:a8:9b:ff:9b:42:df:5c:d3:ea:e0:dd:22:
         d1:01:b7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:55:27 2026 by rpki-client