Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
File:                     7b0PKQXgq8BkIDFlajpWnvc3tNA.mft (raw, json)
Hash identifier:          Zs4nBf0mRzF/qdz9qK8RjtEQII/MMpDn7Xv6a2Bh4g0=
Subject key identifier:   83:53:27:76:00:65:53:12:84:4B:1D:6E:7A:BC:89:B7:6B:63:F0:C1
Authority key identifier: ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
Certificate issuer:       /CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Certificate serial:       019EC0A431A803DC65ACD6A53DDB7C40CFEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
Manifest number:          13E6
Signing time:             Sat 13 Jun 2026 11:00:46 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:46 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:46 +0000
Files and hashes:         1: 7b0PKQXgq8BkIDFlajpWnvc3tNA.crl (hash: Rc1X4uSkPIFLzpfQvDUEv/KFNj2oh1Y9680hrp6pee4=)
                          2: _Uw3PwW3zuhX_9qdNVHM9xLSh_Y.roa (hash: pJtmufqjt3E+bTnB46Z/8QQdZ6WxLHIqysmmyqJfzzo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:31:a8:03:dc:65:ac:d6:a5:3d:db:7c:40:cf:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
        Validity
            Not Before: Jun 13 11:00:46 2026 GMT
            Not After : Jun 14 11:00:46 2026 GMT
        Subject: CN=8353277600655312844b1d6e7abc89b76b63f0c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:08:36:71:b4:5f:14:b9:30:54:a1:06:20:53:
                    11:eb:9d:64:f8:fd:b0:59:c1:fe:20:59:41:31:bf:
                    8c:b9:c3:fc:19:c0:b9:a7:60:90:1b:00:c4:67:e3:
                    92:97:1a:24:56:14:e5:81:a8:db:6f:bd:0b:18:ea:
                    6f:ef:18:6a:40:f2:a8:a0:0c:34:ba:30:14:83:51:
                    c6:df:b8:06:37:b5:c2:ce:b6:d0:a8:8c:81:1c:be:
                    1a:3b:48:d2:74:63:05:83:85:4b:29:d1:c4:bb:d4:
                    85:98:99:29:10:9c:11:1e:78:95:4b:2e:ac:31:93:
                    ef:a7:87:f3:a7:c3:28:5b:05:82:1b:f9:58:55:44:
                    9d:54:d5:9e:c9:3c:2a:6b:eb:a9:44:e4:c8:7c:25:
                    1c:00:33:74:e0:0c:e9:56:98:b4:2a:b7:be:5f:35:
                    d8:66:72:ec:3b:e1:f5:cf:62:e4:22:01:52:6e:7f:
                    dd:88:51:ed:25:49:25:84:79:57:65:bb:fa:1f:2e:
                    3c:73:11:1f:49:80:88:ab:e3:76:19:17:8b:c7:e1:
                    74:2a:20:14:40:44:40:4c:85:24:4e:48:2d:f0:a0:
                    b5:88:3f:9f:5f:14:c8:4b:d9:5a:82:0d:43:80:86:
                    af:26:41:e4:fc:71:4f:04:f6:fe:6c:6b:ef:22:56:
                    87:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:53:27:76:00:65:53:12:84:4B:1D:6E:7A:BC:89:B7:6B:63:F0:C1
            X509v3 Authority Key Identifier:
                keyid:ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:47:ff:4f:4a:44:9d:95:a6:74:4b:84:1b:c2:1d:60:66:17:
         70:47:06:46:a7:fd:a6:9a:ce:a4:00:6c:7a:3c:39:0a:e2:17:
         8b:87:14:d3:c7:ab:a3:bb:ba:95:75:63:7e:2d:db:5b:49:98:
         6d:5d:d9:1a:8e:62:d5:dc:22:7f:ae:3b:84:f5:89:3f:ee:ce:
         6c:3c:e7:72:04:c3:c1:16:1f:5b:b8:0b:2a:3d:5d:e6:9e:b2:
         c6:d2:f1:e6:45:e8:4a:4d:04:5b:8a:cc:37:5a:e9:02:f3:c9:
         17:a1:13:bb:89:e6:17:48:c2:aa:b7:81:48:76:95:67:68:bc:
         75:df:0f:bd:16:5b:78:ed:ff:81:b6:71:08:3b:78:1f:60:df:
         13:d5:52:35:95:15:f9:72:a4:e5:ca:05:e9:8c:de:f7:be:0e:
         f8:e4:4c:0d:13:c2:2a:de:ac:38:4f:ac:6c:bd:85:eb:ba:0b:
         aa:59:3e:e3:39:c9:09:e5:f3:0a:b2:2d:c3:91:43:12:f1:6d:
         c6:2a:dc:73:ba:95:57:d8:c2:0e:59:a5:47:6b:d6:4b:11:48:
         c4:1e:33:7d:b9:eb:66:26:61:b6:6d:ac:34:df:8f:77:ad:1a:
         5a:20:5c:26:ac:b8:f2:57:2a:81:2b:53:2b:a9:25:bd:89:5b:
         5f:e9:b5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:00:41 2026 by rpki-client