Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.mft
File:                     qFERp16dOcxDDqhbjSkgYNnop8I.mft (raw, json)
Hash identifier:          vOc0WcggZhNfGmzLLty8+NkQ44Vgnhxd/o6Xd7C/iKQ=
Subject key identifier:   53:21:07:56:AB:10:7C:90:C1:FD:94:F9:06:1C:6D:AA:DB:74:04:8E
Authority key identifier: A8:51:11:A7:5E:9D:39:CC:43:0E:A8:5B:8D:29:20:60:D9:E8:A7:C2
Certificate issuer:       /CN=a85111a75e9d39cc430ea85b8d292060d9e8a7c2
Certificate serial:       019FA862314C4B26038321CDE84384253D02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qFERp16dOcxDDqhbjSkgYNnop8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.mft
Manifest number:          7C
Signing time:             Tue 28 Jul 2026 11:00:35 +0000
Manifest this update:     Tue 28 Jul 2026 11:00:35 +0000
Manifest next update:     Wed 29 Jul 2026 11:00:35 +0000
Files and hashes:         1: h6c3rKlsCh2Ta6ieH4wNZunbZ_c.asa (hash: wHSgIizYN0GV/TTAR4CRTTTf21VDW35ePjsqiIQojnU=)
                          2: qFERp16dOcxDDqhbjSkgYNnop8I.crl (hash: ijv+6MTldEbQnhry6n1Rcr9nIpbeZ3z5pGJMQV6bTwM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qFERp16dOcxDDqhbjSkgYNnop8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:62:31:4c:4b:26:03:83:21:cd:e8:43:84:25:3d:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a85111a75e9d39cc430ea85b8d292060d9e8a7c2
        Validity
            Not Before: Jul 28 11:00:35 2026 GMT
            Not After : Jul 29 11:00:35 2026 GMT
        Subject: CN=53210756ab107c90c1fd94f9061c6daadb74048e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:27:3e:89:1e:46:17:59:e0:48:c1:99:48:57:
                    b5:8f:8b:41:18:f3:0d:10:63:55:88:24:0c:bf:df:
                    4b:c8:29:cb:f2:8e:02:05:24:03:a6:7d:50:f5:68:
                    63:bc:09:76:53:73:ba:ed:dd:48:c3:ab:0a:4b:7a:
                    b0:69:97:84:23:fd:ed:19:0c:d9:f5:7b:30:82:d2:
                    5d:73:9e:a7:1c:7d:11:e8:c8:8a:0d:a8:76:7c:f6:
                    9f:9f:eb:e1:49:a5:a1:93:17:dd:87:7a:e2:fc:09:
                    06:c5:06:1e:9b:46:85:f7:e5:b1:7c:bb:f5:f0:a7:
                    2f:54:2d:dc:bd:47:82:03:db:5b:43:8a:71:6a:de:
                    c9:72:9e:f2:7c:fb:3f:69:a4:61:c9:fe:bb:86:58:
                    02:c5:62:61:b5:48:13:6a:f6:c4:b1:4d:c9:2a:23:
                    7f:67:40:e6:9a:43:64:56:75:93:60:39:fa:76:31:
                    28:09:1f:9c:a1:ee:1b:32:a4:08:e7:04:77:06:be:
                    32:9e:db:9f:e1:3e:7c:ba:be:fe:0a:bf:07:05:9b:
                    1a:a7:db:56:b3:40:f6:42:b6:90:21:b3:d0:95:b9:
                    ee:a6:94:2e:5f:cd:ce:0f:c9:0a:59:22:f2:2b:8b:
                    6d:cc:06:3c:0b:62:f1:23:b4:a7:73:7c:bb:96:94:
                    fc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:21:07:56:AB:10:7C:90:C1:FD:94:F9:06:1C:6D:AA:DB:74:04:8E
            X509v3 Authority Key Identifier:
                keyid:A8:51:11:A7:5E:9D:39:CC:43:0E:A8:5B:8D:29:20:60:D9:E8:A7:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFERp16dOcxDDqhbjSkgYNnop8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:0c:52:3f:66:60:c9:82:66:82:b3:4a:6a:1d:2f:e0:e2:a0:
         4c:64:97:cf:8e:d1:ba:4c:dc:ca:17:00:b1:3b:9a:99:77:76:
         2b:c1:f5:38:60:48:23:4f:d8:e4:45:0b:a9:88:ba:82:f9:d0:
         a9:dd:c8:19:44:db:b6:00:53:49:95:c6:9e:e3:80:01:31:2f:
         11:f6:b1:d1:42:cc:90:1a:4e:1d:6f:df:0d:a1:70:dc:34:26:
         9f:21:1f:a5:2d:00:d4:86:93:8e:30:0a:5a:a4:6e:78:a9:08:
         3a:6a:7c:39:c0:43:8d:ca:3f:dc:6b:37:72:a5:b3:d0:85:18:
         f7:0d:9b:2f:ee:17:70:e5:cc:10:ca:d1:b3:6e:a0:72:7a:89:
         8d:c9:eb:be:96:1e:86:cc:64:a1:b3:13:25:72:5b:23:52:3e:
         61:d3:f3:a5:fe:96:40:b5:29:e0:bd:dd:48:61:94:1c:e0:38:
         72:b4:dc:fa:dd:07:c2:6c:04:0d:a9:09:60:07:c6:bb:38:3d:
         49:52:6a:c5:3c:1d:8d:ab:45:22:2a:0f:d9:3a:02:29:bb:e5:
         12:ab:d2:9c:7e:fe:fd:22:46:4b:06:4b:61:24:80:ad:31:3b:
         7b:f6:7a:eb:21:f5:6b:15:33:e4:00:ae:7e:ec:99:fb:03:4a:
         85:d2:6a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:56:52 2026 by rpki-client