Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
File:                     7X77CijxDLp1HJLMsL-_NXuaYl0.mft (raw, json)
Hash identifier:          Bf9dEDgfzAJrGfavzdU8hpsCzLcXGS0BIip3DPVrm90=
Subject key identifier:   BA:00:F6:3B:E9:98:77:B7:A0:48:CD:B6:69:6F:44:2C:CC:40:05:C3
Authority key identifier: ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
Certificate issuer:       /CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
Certificate serial:       019FA9AB96CED7E3FB70AC5A6560436F61F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
Manifest number:          1094
Signing time:             Tue 28 Jul 2026 17:00:22 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:22 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:22 +0000
Files and hashes:         1: 7X77CijxDLp1HJLMsL-_NXuaYl0.crl (hash: a3ybt/4VllbG22AABPCzIKiHWLvYfEDrUdbYFSFE26k=)
                          2: P24w_jLhUQYot-hYm7zVBeSYmLE.roa (hash: PHPMkNKEzzvlTlm3p3Tx5ImcestRuod2cI9K8iRdJC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:96:ce:d7:e3:fb:70:ac:5a:65:60:43:6f:61:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
        Validity
            Not Before: Jul 28 17:00:22 2026 GMT
            Not After : Jul 29 17:00:22 2026 GMT
        Subject: CN=ba00f63be99877b7a048cdb6696f442ccc4005c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f3:08:0c:08:16:4f:54:0f:ad:7e:26:b4:a2:
                    09:ba:d3:e2:3f:7a:ee:41:10:17:1d:0e:03:04:5d:
                    92:54:93:18:28:c3:d0:67:47:eb:01:6e:26:02:ed:
                    aa:57:8e:60:4f:b4:24:19:43:cb:e5:c8:ee:3a:fd:
                    34:19:ee:79:89:79:b8:3a:84:87:14:c5:1e:ee:33:
                    9e:20:e8:5d:48:d6:fa:3b:6b:3d:67:1d:65:c0:5e:
                    57:56:28:d8:86:ce:cb:62:c2:73:54:f5:8e:c1:b8:
                    79:f9:ed:c3:f9:2d:1b:db:2f:e1:8f:01:3a:1b:be:
                    d7:23:b4:77:c2:9a:6a:9c:df:df:86:ed:e9:77:60:
                    19:d3:de:7a:ee:42:d4:b8:c6:d0:eb:db:f0:90:d2:
                    83:1d:cb:5e:a3:29:28:f9:fd:60:80:a9:e0:db:af:
                    6b:2c:95:63:8d:d8:71:6a:1a:ae:f4:90:1f:70:d1:
                    23:bb:ff:d6:45:f9:1e:3e:c6:3a:88:c4:35:48:2d:
                    b8:87:27:a3:59:65:e3:6b:b8:b5:59:a7:48:e1:bb:
                    35:2e:12:2a:a1:dd:94:2d:e0:ed:36:e1:21:5c:f9:
                    39:4a:55:09:77:7f:3b:89:c8:90:f7:2e:2a:b4:b4:
                    36:a1:95:0c:56:07:92:6b:f8:a8:37:e9:24:d0:dd:
                    95:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:00:F6:3B:E9:98:77:B7:A0:48:CD:B6:69:6F:44:2C:CC:40:05:C3
            X509v3 Authority Key Identifier:
                keyid:ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:dc:38:4e:a5:ed:4a:ce:47:66:52:1e:30:c2:f6:8c:de:7e:
         3e:d0:c0:35:2d:58:30:75:f6:50:bb:f7:78:ed:f4:2d:60:d7:
         fb:6f:4d:52:70:bd:60:aa:c3:00:d8:3a:f2:4a:9a:d3:8c:67:
         52:86:0a:43:d7:f4:7a:71:9c:96:41:8c:40:0a:9a:6d:ca:39:
         07:3e:6b:00:37:51:1f:95:f1:ea:82:bf:b5:b9:cd:ca:55:cd:
         bd:ed:74:f0:03:c0:84:6d:99:6d:ef:86:f7:0d:80:38:17:2e:
         21:88:ff:7f:03:ad:46:b6:f5:f8:f5:7d:29:31:1b:80:28:ec:
         c3:31:28:c3:4c:90:25:cc:18:c4:f0:71:2d:d6:51:f5:2e:5f:
         48:90:4c:f0:5d:5a:38:68:d0:d7:e9:8f:5a:3d:fd:18:ec:c1:
         69:fb:60:27:b8:55:74:32:7e:0c:f9:b0:a5:1f:78:f6:d1:af:
         3a:ed:a7:13:63:e6:ae:f9:d8:13:52:d8:a8:52:37:c6:93:be:
         59:b6:73:42:b2:bb:aa:42:b2:72:7a:03:28:c1:2e:74:05:9c:
         96:72:2d:fd:5e:00:02:12:51:d4:92:ea:e0:4d:6d:59:54:8c:
         55:74:98:56:ad:be:91:0b:97:8f:49:e1:8b:34:68:1d:dd:c6:
         5a:92:b9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:15:54 2026 by rpki-client