Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
File:                     cnFQa_q5Ese4FxuWuFoJmxQObNg.mft (raw, json)
Hash identifier:          MEGKXbHtoVBipruhv9UrpUXMZ99m1Lk295aOmgVpw3M=
Subject key identifier:   D7:A6:CB:3E:1F:15:CB:A6:E8:64:0B:D7:E0:2F:F6:19:DC:85:8E:97
Authority key identifier: 72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8
Certificate issuer:       /CN=7271506bfab912c7b8171b96b85a099b140e6cd8
Certificate serial:       019FAA1A87BE687F0FB2B2C03A902E2EB562
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
Manifest number:          07F7
Signing time:             Tue 28 Jul 2026 19:01:33 +0000
Manifest this update:     Tue 28 Jul 2026 19:01:33 +0000
Manifest next update:     Wed 29 Jul 2026 19:01:33 +0000
Files and hashes:         1: cnFQa_q5Ese4FxuWuFoJmxQObNg.crl (hash: upFN9aZ0vhwP+o9blYNqQthWeoKssprRk5ggUxSpDyk=)
                          2: fXgOCRgOegnV1PEEj7p5LXQbx44.roa (hash: HzRwFTg0Qc4HS5vLz9pBbUoRgZKToj/APhUhfPnSo54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:1a:87:be:68:7f:0f:b2:b2:c0:3a:90:2e:2e:b5:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7271506bfab912c7b8171b96b85a099b140e6cd8
        Validity
            Not Before: Jul 28 19:01:33 2026 GMT
            Not After : Jul 29 19:01:33 2026 GMT
        Subject: CN=d7a6cb3e1f15cba6e8640bd7e02ff619dc858e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:06:5b:cc:2f:82:4e:d2:78:71:e2:7f:58:57:
                    71:b8:df:b4:f0:f4:dd:8d:31:93:c4:a6:1b:e5:18:
                    b3:7f:f3:78:ad:97:8f:f5:97:82:8f:f7:8c:88:30:
                    3e:58:d8:b6:cf:4f:5b:4d:6b:b5:87:11:67:51:88:
                    42:8a:35:55:42:96:4c:74:db:c7:7d:a3:22:2c:f6:
                    63:a4:e5:48:9a:eb:06:d7:b4:b1:10:8b:db:da:f0:
                    25:1f:7f:03:1e:bd:6f:fa:07:f9:76:6c:a1:cc:a0:
                    ee:04:ee:bf:35:eb:49:2a:6e:d2:e3:f5:61:ac:ac:
                    30:a6:d8:eb:8a:5c:bb:92:d1:68:0b:b6:03:da:ad:
                    28:bf:63:08:e2:78:48:6b:93:e6:76:7b:4e:06:3a:
                    16:b8:04:68:6c:43:e1:c2:21:c6:66:c1:cb:22:ec:
                    58:66:03:22:70:c1:84:2b:99:e0:46:72:f6:2f:37:
                    41:ac:f9:dd:a5:5c:e7:44:36:a7:72:4d:18:10:55:
                    48:93:58:d6:19:47:72:83:99:39:9d:c0:75:4e:d3:
                    84:a8:e5:0c:e5:9c:bd:8a:e2:63:1a:ef:a0:d5:ba:
                    d3:d9:06:ef:07:af:c1:0d:9d:17:c0:29:ea:3a:77:
                    04:03:3f:e6:f0:8c:c4:78:b2:ac:5c:35:43:a4:c5:
                    a5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A6:CB:3E:1F:15:CB:A6:E8:64:0B:D7:E0:2F:F6:19:DC:85:8E:97
            X509v3 Authority Key Identifier:
                keyid:72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:fb:b8:54:71:4c:4e:be:89:97:59:67:61:a9:a2:1d:b3:a8:
         59:da:5a:b6:81:cc:35:5c:fe:21:24:f4:68:14:f8:98:af:03:
         10:6d:e9:f7:6d:b3:c9:88:94:d2:83:b2:34:16:14:74:63:41:
         54:e3:18:17:2b:c4:67:55:d1:8f:96:fb:21:c9:28:5f:e2:1f:
         d5:20:3f:41:94:99:f7:67:4d:d4:8e:f9:c6:37:39:67:b1:ec:
         81:3f:7d:44:70:53:44:a1:23:76:94:1c:04:dd:22:ff:c5:be:
         1b:ac:ab:2a:81:36:a2:7b:71:62:5a:89:3b:15:a1:ca:dd:f9:
         87:bf:7d:62:cc:22:d9:45:2e:6c:4f:a1:86:bd:27:c6:bf:48:
         12:a7:d6:96:17:1b:00:f9:73:1b:b7:9c:01:06:1d:8e:35:09:
         0f:1c:90:10:bc:19:a7:9a:46:4c:e1:c3:84:de:3a:b5:87:1f:
         08:95:5f:e1:ac:a9:48:ae:dc:e9:56:f1:ab:fc:cd:96:a4:7d:
         7a:ee:82:85:96:e4:7f:b5:0f:d0:f7:51:9f:3c:c5:4a:ed:b4:
         3b:b1:d1:bf:0d:34:c6:4a:34:7d:3a:50:bf:6a:76:1e:35:54:
         dd:fd:fa:30:42:b8:de:12:95:2d:df:c7:79:37:ee:52:e9:65:
         5a:bf:78:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:25:41 2026 by rpki-client