Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/0b1514-f4bd-456b-93a5-8c6a12a0f786/1/70z25cdLCj5rtoX6mtM8oOYPLDo.mft
File:                     70z25cdLCj5rtoX6mtM8oOYPLDo.mft (raw, json)
Hash identifier:          2Q2gDlFh1yvzB8Ii/1O8C4y9svBlvMUgSBrTobdxlT4=
Subject key identifier:   7B:DF:C9:9F:D5:E9:23:57:A1:7A:20:37:B2:9F:13:B6:1F:86:07:EA
Authority key identifier: EF:4C:F6:E5:C7:4B:0A:3E:6B:B6:85:FA:9A:D3:3C:A0:E6:0F:2C:3A
Certificate issuer:       /CN=ef4cf6e5c74b0a3e6bb685fa9ad33ca0e60f2c3a
Certificate serial:       019FA9E2B732D94D96AD995D0619E0B2D2CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/70z25cdLCj5rtoX6mtM8oOYPLDo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/0b1514-f4bd-456b-93a5-8c6a12a0f786/1/70z25cdLCj5rtoX6mtM8oOYPLDo.mft
Manifest number:          6D
Signing time:             Tue 28 Jul 2026 18:00:35 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:35 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:35 +0000
Files and hashes:         1: 70z25cdLCj5rtoX6mtM8oOYPLDo.crl (hash: gdhyuEdBF9s2bPy2LmeuWhqDgpPuM52nLnRLDpmF3mc=)
                          2: kb3m0Yfbi-ZgB-6hn18ll05A-X4.roa (hash: fodgj8GUyM4we+LaVMAoPNWS1kAAEkhv8qbasN62+Jg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/0b1514-f4bd-456b-93a5-8c6a12a0f786/1/70z25cdLCj5rtoX6mtM8oOYPLDo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/0b1514-f4bd-456b-93a5-8c6a12a0f786/1/70z25cdLCj5rtoX6mtM8oOYPLDo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/70z25cdLCj5rtoX6mtM8oOYPLDo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 18:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e2:b7:32:d9:4d:96:ad:99:5d:06:19:e0:b2:d2:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef4cf6e5c74b0a3e6bb685fa9ad33ca0e60f2c3a
        Validity
            Not Before: Jul 28 18:00:35 2026 GMT
            Not After : Jul 29 18:00:35 2026 GMT
        Subject: CN=7bdfc99fd5e92357a17a2037b29f13b61f8607ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:26:82:44:2f:26:84:6e:fe:e6:97:c9:b6:ac:
                    b3:a2:c6:1a:6b:50:98:7e:22:c4:7a:8b:73:a9:fd:
                    bc:76:60:3d:25:4c:f3:0e:0d:5d:74:73:cd:8a:5e:
                    d7:39:d6:2e:e6:8b:26:3f:7f:15:4c:7f:69:9e:0c:
                    1a:c0:da:e9:59:0e:0a:95:3a:b9:79:25:16:86:67:
                    76:bb:f3:87:91:91:16:77:ae:0a:0d:b0:29:17:84:
                    04:47:2d:b7:65:88:52:17:61:d9:a1:04:40:64:c8:
                    c2:8a:3b:0d:9d:5e:42:01:2c:6f:3b:38:c2:44:d2:
                    5e:a6:9b:08:ec:bd:41:26:0f:95:00:50:75:58:5c:
                    69:ea:88:11:99:31:c8:db:ba:c4:44:fa:cd:67:09:
                    71:96:8d:8e:60:14:a2:4d:f6:e1:0d:04:94:2c:17:
                    3b:b1:34:79:36:02:b9:41:c6:3d:79:c7:f7:47:94:
                    4d:98:4e:65:49:94:54:ce:b8:16:26:7d:d1:74:39:
                    18:c3:d3:d6:4a:77:e4:31:db:b7:72:3c:c3:11:a7:
                    ab:e6:d9:31:e9:c6:14:77:2e:97:4b:a1:f0:34:44:
                    10:32:4e:c2:ce:e7:b8:40:c7:9a:f0:fe:a3:37:a6:
                    2c:66:53:de:56:8c:c1:47:df:e7:16:aa:56:8c:67:
                    d3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DF:C9:9F:D5:E9:23:57:A1:7A:20:37:B2:9F:13:B6:1F:86:07:EA
            X509v3 Authority Key Identifier:
                keyid:EF:4C:F6:E5:C7:4B:0A:3E:6B:B6:85:FA:9A:D3:3C:A0:E6:0F:2C:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70z25cdLCj5rtoX6mtM8oOYPLDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0b1514-f4bd-456b-93a5-8c6a12a0f786/1/70z25cdLCj5rtoX6mtM8oOYPLDo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0b1514-f4bd-456b-93a5-8c6a12a0f786/1/70z25cdLCj5rtoX6mtM8oOYPLDo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:f8:1e:47:33:4c:75:63:1d:ac:b8:c1:60:76:e7:09:bb:61:
         e5:ff:64:7c:d1:ad:a8:8f:dc:3a:ac:dc:47:d2:db:e5:4d:b2:
         3c:22:a0:c7:24:4a:9d:7e:67:3f:51:be:07:48:a3:7b:97:c3:
         31:b3:07:06:76:e1:ae:d9:14:c3:38:da:9e:27:66:6e:68:2a:
         ed:d3:7a:b9:a2:44:50:a4:b0:b1:fd:5a:e5:91:af:63:53:50:
         3f:14:7b:f4:85:2d:6d:78:87:3d:76:9f:a4:30:a5:e5:14:e8:
         8b:19:45:de:1c:f4:24:0e:42:cd:8c:94:d0:2a:e9:a6:f9:f0:
         da:a5:8f:74:0e:7d:20:69:56:e6:d1:a4:2b:a2:e4:d1:fd:7f:
         a9:a2:0e:2e:a9:09:c8:e2:3a:d3:1e:6a:11:75:19:e0:50:64:
         e8:e8:78:fe:1f:db:c2:fb:a4:c6:97:0b:93:80:48:56:61:c8:
         0e:d0:45:1b:12:56:96:54:c5:29:fc:ce:3b:a7:65:75:e5:be:
         c0:d1:48:9c:5a:66:4f:3d:7e:22:b3:81:1d:bd:40:32:9b:d0:
         7d:95:98:71:b3:67:82:34:d7:5e:c3:88:0d:87:42:57:a2:c7:
         7e:26:a6:fb:3b:9a:94:52:e7:e1:c3:54:ba:b2:d6:e7:af:69:
         6f:e4:1d:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4rcy2U2WrZldBhngstLNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNGNmNmU1Yzc0YjBhM2U2YmI2ODVmYTlhZDMzY2EwZTYw
ZjJjM2EwHhcNMjYwNzI4MTgwMDM1WhcNMjYwNzI5MTgwMDM1WjAzMTEwLwYDVQQD
Eyg3YmRmYzk5ZmQ1ZTkyMzU3YTE3YTIwMzdiMjlmMTNiNjFmODYwN2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyaCRC8mhG7+5pfJtqyzosYaa1CY
fiLEeotzqf28dmA9JUzzDg1ddHPNil7XOdYu5osmP38VTH9pngwawNrpWQ4KlTq5
eSUWhmd2u/OHkZEWd64KDbApF4QERy23ZYhSF2HZoQRAZMjCijsNnV5CASxvOzjC
RNJeppsI7L1BJg+VAFB1WFxp6ogRmTHI27rERPrNZwlxlo2OYBSiTfbhDQSULBc7
sTR5NgK5QcY9ecf3R5RNmE5lSZRUzrgWJn3RdDkYw9PWSnfkMdu3cjzDEaer5tkx
6cYUdy6XS6HwNEQQMk7Czue4QMea8P6jN6YsZlPeVozBR9/nFqpWjGfTSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvfyZ/V6SNXoXogN7KfE7YfhgfqMB8GA1UdIwQY
MBaAFO9M9uXHSwo+a7aF+prTPKDmDyw6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzB6MjVjZExDajVydG9YNm10TThvT1lQTERvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8wYjE1MTQtZjRiZC00NTZiLTkzYTUt
OGM2YTEyYTBmNzg2LzEvNzB6MjVjZExDajVydG9YNm10TThvT1lQTERvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8wYjE1MTQtZjRiZC00NTZiLTkzYTUtOGM2YTEyYTBmNzg2
LzEvNzB6MjVjZExDajVydG9YNm10TThvT1lQTERvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANfgeRzNM
dWMdrLjBYHbnCbth5f9kfNGtqI/cOqzcR9Lb5U2yPCKgxyRKnX5nP1G+B0ije5fD
MbMHBnbhrtkUwzjanidmbmgq7dN6uaJEUKSwsf1a5ZGvY1NQPxR79IUtbXiHPXaf
pDCl5RToixlF3hz0JA5CzYyU0Crppvnw2qWPdA59IGlW5tGkK6Lk0f1/qaIOLqkJ
yOI60x5qEXUZ4FBk6Oh4/h/bwvukxpcLk4BIVmHIDtBFGxJWllTFKfzOO6dldeW+
wNFInFpmTz1+IrOBHb1AMpvQfZWYcbNngjTXXsOIDYdCV6LHfiam+zualFLn4cNU
urLW569pb+QdPA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:48:58 2026 by rpki-client