Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
File:                     7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft (raw, json)
Hash identifier:          naYyoutpdNnq1byIsF7fPl6EtXPD4uHQRmt6r6w8GP4=
Subject key identifier:   99:F5:1F:20:D8:20:25:60:3D:C9:8D:75:50:9A:F8:B0:0D:AE:E5:FE
Authority key identifier: EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7
Certificate issuer:       /CN=eceba2e659794b12215df1fa8abe3fcbd6686df7
Certificate serial:       019FA974F5E5AFDFA4DD0F1E29C0DAB8DECF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
Manifest number:          0E37
Signing time:             Tue 28 Jul 2026 16:00:42 +0000
Manifest this update:     Tue 28 Jul 2026 16:00:42 +0000
Manifest next update:     Wed 29 Jul 2026 16:00:42 +0000
Files and hashes:         1: 7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl (hash: /v1Lstt9ySWrEu5BQwN+Y92NyO7QcikTla7dLlnnCxg=)
                          2: HdaygFB4iSszAmMjo8uX2Se1nQA.roa (hash: UArj7jtroG3BsSDh4aM2iaAylpZS3vUew6s3b3GEueo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:74:f5:e5:af:df:a4:dd:0f:1e:29:c0:da:b8:de:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eceba2e659794b12215df1fa8abe3fcbd6686df7
        Validity
            Not Before: Jul 28 16:00:42 2026 GMT
            Not After : Jul 29 16:00:42 2026 GMT
        Subject: CN=99f51f20d82025603dc98d75509af8b00daee5fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fd:17:4e:f6:30:61:e6:68:7c:2e:ee:84:11:
                    a5:6e:f9:63:b6:8d:d8:ef:ef:b3:68:57:96:f6:b7:
                    08:4f:f2:8c:9d:a9:8f:0e:58:c4:56:dd:90:aa:a3:
                    11:8d:85:aa:bd:15:b2:4f:e0:28:ac:45:3e:f2:e5:
                    1f:6e:4c:40:a9:9d:b4:45:a8:c0:f4:fe:e0:12:bb:
                    df:f3:6a:7e:32:43:67:45:2a:78:cf:27:4b:61:c5:
                    cc:e0:64:52:0a:38:57:f8:a8:97:fd:02:c8:28:0b:
                    90:19:34:e4:df:00:84:01:7c:52:74:26:2c:6f:79:
                    72:83:cd:e9:a4:8d:b5:d0:ba:12:ba:49:3e:46:31:
                    d1:30:60:02:ea:fc:fa:41:85:aa:39:a9:6e:57:1c:
                    fc:e3:5a:ce:e1:bb:48:f1:3b:73:84:ad:e4:e4:0d:
                    6e:be:24:5a:6b:5f:7f:23:05:cd:6e:20:7f:26:03:
                    f1:5a:f2:03:72:d3:29:68:bc:58:0e:95:bb:98:5c:
                    c4:f5:6f:ae:4d:78:97:fb:6f:fc:36:f5:39:59:d6:
                    af:7d:5f:74:42:c9:ea:dc:95:fa:2a:22:ef:ea:a4:
                    89:4a:80:24:b8:74:3b:2b:ea:ee:30:48:4b:02:ef:
                    04:50:ef:e6:4b:9b:55:70:a6:16:24:5d:80:fd:28:
                    15:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F5:1F:20:D8:20:25:60:3D:C9:8D:75:50:9A:F8:B0:0D:AE:E5:FE
            X509v3 Authority Key Identifier:
                keyid:EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:d0:79:29:28:f2:a8:b1:8b:bc:9f:7b:0b:01:65:ac:01:4a:
         8f:3b:de:2a:13:cc:f8:2e:63:03:eb:66:d2:0e:98:8f:52:98:
         10:95:1b:1d:46:8b:02:ce:15:8a:16:28:4a:f2:27:1c:97:f7:
         b6:2c:67:f6:32:b5:74:06:67:ac:36:00:e2:55:7d:17:67:3e:
         dc:69:11:73:a6:9d:4d:b2:26:24:6a:d1:2a:02:6b:97:ec:f7:
         75:51:a1:e8:8e:a0:94:6a:f5:c9:4b:ca:c2:2d:8c:4b:e3:19:
         15:16:b9:a0:ff:30:45:6b:b5:e0:db:6d:6d:d9:2b:d5:1f:f0:
         63:d5:2d:e6:2b:bf:46:a6:66:db:a2:3c:97:3d:53:de:4c:fd:
         9a:9b:c6:fb:84:8f:d9:7b:59:fa:0d:46:f4:f9:8f:34:8a:20:
         9e:ca:16:c3:bd:dc:6a:66:a2:67:fa:54:2b:97:ce:f2:64:be:
         16:06:8f:03:18:71:70:3e:07:a4:d0:35:5a:1a:a9:1f:0a:e7:
         c1:72:e9:93:f0:fa:41:1e:5d:07:a2:54:e8:63:dc:5c:4b:2d:
         ac:4f:de:d0:51:19:a2:33:96:b7:80:3b:a4:cf:58:4f:cb:ed:
         b5:37:82:9a:76:94:d7:de:85:2d:6d:67:ea:87:2e:5d:b5:1f:
         bf:cc:7a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:31:51 2026 by rpki-client