Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
File:                     7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft (raw, json)
Hash identifier:          YPZl7VBmiMMBvmHrMqRBmyu5OnTe3M6jANQSTXPiirM=
Subject key identifier:   73:E3:E0:FB:BF:6A:FF:D8:C4:2D:9D:43:9F:90:2F:94:B4:AE:6D:04
Authority key identifier: ED:32:EF:0C:AF:0A:05:75:29:FB:92:8F:76:96:2A:74:25:39:0D:BA
Certificate issuer:       /CN=ed32ef0caf0a057529fb928f76962a7425390dba
Certificate serial:       019EC14877F8B2CB0D7CAF9ED527782A02D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
Manifest number:          0410
Signing time:             Sat 13 Jun 2026 14:00:12 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:12 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:12 +0000
Files and hashes:         1: 4ck5stj-Nruh5mOMgR2qNBplGK4.roa (hash: pnWvPZcJH3rubSBQDARfPzyblV+Aac+zG4Cuud9DAE8=)
                          2: 7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl (hash: a2vMZEsA+D7enyvwGp2u78oxO4nZlRrQqbP0SQ2ayi4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:77:f8:b2:cb:0d:7c:af:9e:d5:27:78:2a:02:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed32ef0caf0a057529fb928f76962a7425390dba
        Validity
            Not Before: Jun 13 14:00:12 2026 GMT
            Not After : Jun 14 14:00:12 2026 GMT
        Subject: CN=73e3e0fbbf6affd8c42d9d439f902f94b4ae6d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:39:18:f3:24:78:f1:16:d6:21:13:67:6a:23:
                    43:4a:15:51:ae:43:f0:c7:31:ae:f7:90:0d:d9:a4:
                    08:b1:c6:56:44:4b:34:b6:d0:a7:f1:ca:45:73:9c:
                    26:c7:33:36:49:40:a7:54:bf:54:45:12:6d:7d:b5:
                    2c:53:77:a6:b7:a5:99:d1:a7:0c:e5:a1:34:ac:56:
                    f6:6a:40:f4:a5:fc:70:c6:16:6b:2e:1c:e4:1c:fe:
                    cb:56:c7:64:2b:5c:48:cd:63:b7:fb:9d:c3:9e:96:
                    91:d3:7d:91:e8:a8:4a:93:ff:15:55:92:53:6d:43:
                    95:01:98:e2:43:f0:08:aa:98:c3:89:34:e4:76:35:
                    b3:2c:de:88:76:d8:a9:8c:c3:1a:df:b3:7d:33:80:
                    9a:65:39:4c:91:a8:fd:8f:32:11:df:48:96:4b:83:
                    fe:0a:69:69:19:8a:37:92:0d:d3:45:61:a3:05:30:
                    13:14:60:9f:01:89:fa:4f:4f:79:76:90:54:c7:99:
                    c4:22:91:74:1a:21:59:67:58:b6:30:bd:dd:22:cf:
                    12:ad:bb:11:fa:73:7a:af:5b:10:49:f4:3e:e5:1c:
                    ff:72:19:e9:7e:d1:14:9f:1d:04:50:17:ce:84:8a:
                    79:c6:80:e1:02:32:dc:58:23:1b:50:b5:de:22:be:
                    96:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E3:E0:FB:BF:6A:FF:D8:C4:2D:9D:43:9F:90:2F:94:B4:AE:6D:04
            X509v3 Authority Key Identifier:
                keyid:ED:32:EF:0C:AF:0A:05:75:29:FB:92:8F:76:96:2A:74:25:39:0D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:e8:f6:89:e2:96:53:25:4b:53:b0:e3:9f:06:95:6f:d0:47:
         52:3f:e5:04:62:e1:74:1e:da:0a:f7:22:f6:b8:86:ea:87:6f:
         90:41:1e:45:16:35:75:9d:7f:2c:f8:65:3b:1d:c1:30:b9:bf:
         3f:93:6a:18:d8:b3:22:a6:70:ef:25:10:8f:82:cc:2f:60:b6:
         53:0f:11:f8:4d:18:39:df:40:04:23:bd:9c:11:f9:11:67:b6:
         a4:4e:19:07:9e:08:a3:82:19:fd:93:42:cf:b7:54:8c:bf:ab:
         59:fb:9d:e6:99:9a:f5:d9:21:a4:9c:5c:6e:88:09:34:d7:5d:
         7e:fc:5e:35:7d:28:07:93:06:09:b0:cf:8a:31:31:93:05:32:
         b7:4b:e2:84:6d:4b:51:3e:22:f6:a3:bc:69:10:9e:89:2b:3f:
         e7:d4:7c:c7:72:51:4e:e5:f1:5c:55:15:7b:4e:94:8c:83:e9:
         b8:ee:b8:b2:aa:d5:e0:eb:27:e0:e8:1f:6a:91:71:75:af:aa:
         be:ac:09:05:58:0b:36:03:5a:04:c5:8a:24:1f:87:f6:a3:76:
         9a:bc:74:80:f8:de:7a:04:c8:a1:b4:fa:39:73:e9:c2:69:a4:
         88:fc:5e:d8:93:2d:eb:c5:65:5c:9f:b5:84:a3:86:a3:83:86:
         ae:d1:23:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:43:47 2026 by rpki-client