Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft
File:                     Rg7_G6LS91kqRNITPSB7KT4kGsI.mft (raw, json)
Hash identifier:          o/EWqBljaK7GSfVM2m/7ynKJcPYlE4dEEjUfc+noKzE=
Subject key identifier:   E7:CE:72:98:DA:11:9C:27:69:C3:9E:29:D3:91:A7:60:C9:10:FB:B3
Authority key identifier: 46:0E:FF:1B:A2:D2:F7:59:2A:44:D2:13:3D:20:7B:29:3E:24:1A:C2
Certificate issuer:       /CN=460eff1ba2d2f7592a44d2133d207b293e241ac2
Certificate serial:       019FA93DCA1A1D53E8ADB4020C6EBE9F435B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft
Manifest number:          0EDA
Signing time:             Tue 28 Jul 2026 15:00:26 +0000
Manifest this update:     Tue 28 Jul 2026 15:00:26 +0000
Manifest next update:     Wed 29 Jul 2026 15:00:26 +0000
Files and hashes:         1: Rg7_G6LS91kqRNITPSB7KT4kGsI.crl (hash: +EQoR65avzamKHBcqFyxGoLpqO8R8asfRTZ+AoSdc+Q=)
                          2: h_utoHeOpQBYse4tQQn19NAtDIA.roa (hash: wzWnekCDPzeEk5ruT1AKm5uXIAtEuf8wPeRY0OMMD+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3d:ca:1a:1d:53:e8:ad:b4:02:0c:6e:be:9f:43:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460eff1ba2d2f7592a44d2133d207b293e241ac2
        Validity
            Not Before: Jul 28 15:00:26 2026 GMT
            Not After : Jul 29 15:00:26 2026 GMT
        Subject: CN=e7ce7298da119c2769c39e29d391a760c910fbb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0d:d5:89:20:2d:5c:90:9c:f0:84:7e:be:5d:
                    9f:eb:81:59:2d:d6:1f:7d:7a:d1:ea:9b:5b:77:de:
                    6e:6e:8c:d6:7d:cd:e2:35:0d:10:4a:63:26:14:f2:
                    d9:f2:97:fb:4e:bc:ed:c4:72:cc:2a:f5:ac:4d:0d:
                    22:62:f5:de:80:5d:5f:97:d2:4d:e3:90:3f:a3:ba:
                    3f:cb:10:f5:30:46:57:65:0a:73:f3:cd:d9:f4:56:
                    69:11:1d:f4:5e:a8:75:70:cb:fa:e5:e2:12:3a:97:
                    65:97:96:cb:06:03:2b:6f:b2:67:91:0b:93:4c:81:
                    5c:6c:84:f8:25:8d:25:bc:96:ae:69:1d:60:4b:86:
                    65:e5:78:b4:87:50:50:ad:a5:dc:08:b3:ed:87:83:
                    8d:a1:c2:ba:7d:28:cf:1c:cd:ca:94:88:90:f1:3e:
                    ef:f4:f7:39:65:3c:d1:fd:6a:64:70:d9:69:94:48:
                    ff:9e:ed:1f:47:dc:6f:1f:50:a0:97:6c:61:1e:8a:
                    ac:11:c5:e0:ab:8a:3e:8b:ba:07:f1:9d:db:c7:1b:
                    4a:b6:59:cf:3b:58:7c:bd:25:9e:ec:9a:f6:6b:76:
                    86:84:85:40:39:ec:68:4b:bd:4b:68:cd:7d:33:28:
                    bf:3c:24:dd:41:82:9b:2e:52:b5:e1:60:33:a6:ac:
                    85:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CE:72:98:DA:11:9C:27:69:C3:9E:29:D3:91:A7:60:C9:10:FB:B3
            X509v3 Authority Key Identifier:
                keyid:46:0E:FF:1B:A2:D2:F7:59:2A:44:D2:13:3D:20:7B:29:3E:24:1A:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:7a:56:37:fc:da:96:01:bd:99:12:a1:5c:ec:11:7d:5c:43:
         e9:e1:40:df:d7:d1:ad:7a:32:d8:31:e2:fc:99:47:bf:db:a8:
         17:c9:c1:ed:77:c2:38:b6:60:a7:e8:58:19:92:71:e1:58:26:
         c1:6b:da:94:53:53:0f:90:c3:46:b1:f1:d2:73:b2:4c:16:3a:
         fd:c0:e2:37:08:33:dd:60:a1:f2:04:62:ff:77:cb:64:dd:0c:
         98:ee:c1:2c:80:b2:0b:a2:49:8f:33:81:48:a2:a4:2a:01:5f:
         1c:43:95:7c:ec:d8:70:38:f0:52:59:09:28:3b:ba:9f:c6:11:
         ad:49:5e:9c:c5:2f:c6:28:c7:17:99:07:cf:54:70:8c:39:90:
         6a:c4:5a:00:98:b6:1c:2a:cf:e5:8e:9f:b1:52:6e:ef:44:11:
         5d:b5:c7:73:a6:af:00:8c:6f:72:6e:35:8c:6b:6b:8c:30:7d:
         f7:2b:4b:eb:81:e0:2d:69:f6:40:a1:86:c7:2e:1c:2d:29:d2:
         b0:2b:9f:07:ef:ca:2a:c4:bd:1b:e6:b5:8e:36:99:c7:86:fb:
         1d:37:4f:0a:0e:0d:41:b0:b2:d5:91:91:4f:ce:08:f8:d8:62:
         10:b5:85:24:a0:35:23:d8:82:3a:c7:ff:0c:00:ce:ae:a1:b7:
         0d:0e:e3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:33:38 2026 by rpki-client