Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
File:                     7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft (raw, json)
Hash identifier:          snqSPbVnlgrTzIOPlR9N1Sbz61aIpKlAqs6QQcaxqsQ=
Subject key identifier:   71:77:BC:4D:AC:73:0F:A9:5B:A9:13:59:85:77:AF:C4:79:35:A5:AE
Authority key identifier: EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
Certificate issuer:       /CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Certificate serial:       019EBEECA6CCBCCAC165CD7DC32C1E1F752A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
Manifest number:          1957
Signing time:             Sat 13 Jun 2026 03:00:40 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:40 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:40 +0000
Files and hashes:         1: 16IES9haatKMkP-HejVSazJdMkY.roa (hash: mQPtnV+K2FeabOm74g9Ubv3nHZo4wLPT4wK0cMDSkes=)
                          2: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl (hash: psebpsbzTWEK9rLODeHSiMOxNFxx/UNuOW67nm9n75U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:a6:cc:bc:ca:c1:65:cd:7d:c3:2c:1e:1f:75:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
        Validity
            Not Before: Jun 13 03:00:40 2026 GMT
            Not After : Jun 14 03:00:40 2026 GMT
        Subject: CN=7177bc4dac730fa95ba913598577afc47935a5ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:87:27:93:0e:1f:b5:e5:4a:da:38:ba:57:f0:
                    94:13:85:53:4e:c7:6a:d6:5e:e8:ed:21:8c:ef:49:
                    38:44:5e:76:59:45:e2:0b:4d:b4:76:86:41:07:d9:
                    22:7c:50:52:94:70:68:bb:19:25:9b:76:e4:28:b8:
                    ba:03:4c:27:9f:cd:88:19:8b:20:c8:52:ba:7c:9d:
                    e4:b8:ac:32:44:2c:56:64:a8:45:cf:44:5f:d0:e1:
                    2b:b9:ff:1e:45:d5:2f:9c:62:3f:66:89:54:0a:52:
                    38:e9:7d:55:6b:c3:56:80:0e:2c:51:ce:3c:ab:bc:
                    2e:d5:10:6c:73:27:09:ca:b2:79:31:50:08:2d:da:
                    d1:ee:61:f7:a8:5a:a0:3f:3d:d2:5d:d2:72:68:56:
                    96:63:16:50:1d:6c:43:d4:4a:4d:75:86:f3:bb:89:
                    54:cf:2c:6a:10:50:40:a5:65:d9:1f:6a:c3:b7:65:
                    75:29:6a:f3:c3:c7:3a:ea:ef:fc:9d:9a:f7:fc:50:
                    ca:77:f1:fa:36:d2:33:2b:9e:79:61:13:d6:8b:81:
                    70:44:7a:d5:2c:bd:ca:e1:7c:1c:26:c1:3d:c1:28:
                    92:44:28:06:a8:db:ca:f4:14:8b:c4:b2:b2:c5:54:
                    26:e1:d4:61:01:8f:be:61:2e:61:e0:0c:42:a1:59:
                    1f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:77:BC:4D:AC:73:0F:A9:5B:A9:13:59:85:77:AF:C4:79:35:A5:AE
            X509v3 Authority Key Identifier:
                keyid:EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:00:93:6d:59:8f:7f:01:c7:f0:85:6d:21:69:da:1d:2a:23:
         d4:a8:8a:29:2d:60:05:4d:74:2d:13:cd:de:d7:17:0f:11:49:
         64:5c:27:0e:9b:d7:c6:16:50:ff:09:d1:69:c2:63:60:f0:15:
         31:00:84:5b:0a:35:49:e7:64:d1:1b:70:74:fd:fa:de:24:78:
         2b:63:11:37:a4:e7:bc:c3:88:4e:c4:34:2c:1f:f6:3f:b6:5e:
         9e:c5:f6:62:b0:c4:ec:15:13:ff:e1:de:7b:ce:05:82:0b:55:
         05:a2:a1:c0:7b:54:36:3c:be:2b:c0:e9:a2:c7:dc:71:04:a3:
         58:28:96:18:1a:8a:62:ff:df:2f:f4:e0:c9:43:e3:87:38:c6:
         a8:9b:81:56:59:0a:1b:18:37:66:f0:37:3a:f6:56:f5:d3:a6:
         33:73:52:35:b6:fc:4a:1e:a9:e7:4a:cd:c1:3d:96:b3:38:50:
         13:95:1c:00:0f:2f:d3:d5:2a:51:dc:cd:f8:b4:bc:03:10:f9:
         73:af:c3:4a:ae:3e:e4:2e:58:8b:7c:ac:10:84:9d:9f:27:e4:
         77:39:da:11:40:66:60:74:bb:dd:aa:a0:78:fe:46:c8:8a:f3:
         8d:e4:0b:27:8b:ea:5f:be:de:d0:9b:bc:98:a7:8f:98:3b:d6:
         b2:e3:16:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:31:52 2026 by rpki-client