Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.mft
File:                     II3G2-Xnc9eq1wBdbP8m5HFDyng.mft (raw, json)
Hash identifier:          J31399TMigX6nI6qMww5FsF+MNQD+XFHX/MzAsrKgug=
Subject key identifier:   E7:A0:61:B0:4B:C6:71:90:24:AD:74:E6:71:11:02:52:BE:01:4C:CC
Authority key identifier: 20:8D:C6:DB:E5:E7:73:D7:AA:D7:00:5D:6C:FF:26:E4:71:43:CA:78
Certificate issuer:       /CN=208dc6dbe5e773d7aad7005d6cff26e47143ca78
Certificate serial:       019DA4F96F808CE1AA9156340AFB9BAE5A9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/II3G2-Xnc9eq1wBdbP8m5HFDyng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.mft
Manifest number:          A7
Signing time:             Sun 19 Apr 2026 09:01:43 +0000
Manifest this update:     Sun 19 Apr 2026 09:01:43 +0000
Manifest next update:     Mon 20 Apr 2026 09:01:43 +0000
Files and hashes:         1: II3G2-Xnc9eq1wBdbP8m5HFDyng.crl (hash: TABB5zOFubTFV9Vexq4fAoelm1B8LqQ+eXhK6dRLoL4=)
                          2: VD6M1TalIBGQDQhDlzk5W__Y3uc.asa (hash: jjpCurqNQ5oMU8caZ7eCROEYaNl81c0Drp5VvZH2RWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/II3G2-Xnc9eq1wBdbP8m5HFDyng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:f9:6f:80:8c:e1:aa:91:56:34:0a:fb:9b:ae:5a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208dc6dbe5e773d7aad7005d6cff26e47143ca78
        Validity
            Not Before: Apr 19 09:01:43 2026 GMT
            Not After : Apr 20 09:01:43 2026 GMT
        Subject: CN=e7a061b04bc6719024ad74e671110252be014ccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:64:2e:00:0e:ad:78:dd:4c:d5:18:59:d3:9d:
                    1d:2e:e9:81:f4:7c:af:6b:e0:56:06:02:ba:50:43:
                    f5:c7:a8:cd:e3:91:2b:65:2b:94:40:e8:f6:15:2e:
                    31:59:f8:3f:00:22:8a:28:f2:b4:12:67:f8:c9:39:
                    e3:4f:b7:18:0b:5f:ba:34:52:e9:23:a3:87:41:27:
                    b7:f4:06:e8:64:a8:74:77:0e:37:5c:06:d3:8c:b9:
                    00:38:c2:9b:fb:2c:7f:a1:53:be:72:e8:f3:f2:5c:
                    83:2d:35:74:03:2c:a4:0d:45:a9:35:86:43:52:f2:
                    6e:3b:24:8d:70:8f:b5:95:62:21:cf:96:66:02:ce:
                    4a:70:ac:de:0d:30:5c:ea:3c:e0:c1:04:0a:f4:b9:
                    55:6f:e8:32:c1:1e:02:17:3c:7f:cd:2e:2e:02:66:
                    88:f3:90:13:48:0f:bb:98:32:76:f4:f2:39:b8:f3:
                    e4:10:eb:03:80:2f:0e:1e:cf:b2:23:63:34:90:5f:
                    bc:ee:c1:ab:60:c8:74:04:5b:c8:89:67:65:c8:99:
                    23:db:a9:9b:f8:ad:fa:22:32:b1:fd:b6:4f:05:94:
                    d5:58:a8:44:41:63:b9:d8:47:6b:40:d4:35:94:cc:
                    9d:a2:d7:b6:66:82:de:3b:b9:80:d8:12:74:20:74:
                    b6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A0:61:B0:4B:C6:71:90:24:AD:74:E6:71:11:02:52:BE:01:4C:CC
            X509v3 Authority Key Identifier:
                keyid:20:8D:C6:DB:E5:E7:73:D7:AA:D7:00:5D:6C:FF:26:E4:71:43:CA:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3G2-Xnc9eq1wBdbP8m5HFDyng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:a5:4b:b2:0d:e3:98:54:a4:0f:e6:7e:28:9f:97:10:59:ff:
         11:1a:5d:66:7b:f2:3d:93:cb:16:68:5b:65:f0:80:97:94:d7:
         7f:77:f4:3f:11:28:8d:8f:5f:43:31:18:52:a6:91:60:b2:b9:
         05:6e:7a:4e:85:9f:a9:e5:e3:ec:9d:71:e1:fa:85:6a:9e:3f:
         e5:ca:2e:98:85:5f:2f:6b:ef:e3:33:21:49:b6:a3:56:57:08:
         6a:98:eb:b3:22:1a:56:48:01:16:38:43:4d:92:32:8a:2a:82:
         c2:c9:2e:7f:0f:2e:35:0d:b8:a5:38:68:42:4e:5f:78:43:6b:
         b1:c9:46:64:f6:83:c3:7d:33:9f:8d:98:13:77:11:08:36:d0:
         ea:97:ff:76:32:1e:a0:f3:03:64:c3:ab:41:87:1f:f1:d7:29:
         72:96:6b:51:8a:af:14:c0:1f:55:01:6a:8f:e4:52:8b:bf:e7:
         48:8a:0b:43:ab:4c:46:a4:20:9f:bf:d4:0c:bf:3f:82:9a:18:
         b2:ea:bb:26:64:2e:71:c4:44:77:26:9f:3d:0f:cf:a2:b7:13:
         79:ed:90:db:8a:41:eb:57:80:ac:40:2e:58:13:05:02:5e:90:
         2e:6b:c4:ba:a6:81:df:d6:e7:d7:ce:a8:65:dc:71:c8:9d:fe:
         ae:13:09:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:44:27 2026 by rpki-client