Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
File:                     c7vCE8b5C9jwBxOerm_gyvpDXs4.mft (raw, json)
Hash identifier:          /QgAB1ZK9kSuDh+K30BM1+5Yne6b40BjYGUjPKJARFY=
Subject key identifier:   96:3F:54:8D:BD:2D:BF:3D:4A:95:88:D2:40:17:C2:EE:C4:FF:8D:11
Authority key identifier: 73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE
Certificate issuer:       /CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece
Certificate serial:       019FABD179116307B65F4B64A1837FE380AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
Manifest number:          0E87
Signing time:             Wed 29 Jul 2026 03:00:59 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:59 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:59 +0000
Files and hashes:         1: c7vCE8b5C9jwBxOerm_gyvpDXs4.crl (hash: x9Ky7PgiPFFhKHzChLMZF3NKqP2N0qfxD05Dz2ge1rk=)
                          2: s7ALXCsQ6iydnmcMndLJwyBEVrA.roa (hash: 2KKTFrZRTTsfpxmpCTn5aGO1P1QcLn41Vrt2Tl7hzrU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d1:79:11:63:07:b6:5f:4b:64:a1:83:7f:e3:80:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece
        Validity
            Not Before: Jul 29 03:00:59 2026 GMT
            Not After : Jul 30 03:00:59 2026 GMT
        Subject: CN=963f548dbd2dbf3d4a9588d24017c2eec4ff8d11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e9:9b:e7:51:7e:54:c8:a6:da:dc:82:5b:da:
                    eb:9b:fd:54:22:25:20:62:29:c8:89:70:e7:2e:ab:
                    7e:f1:68:41:2c:b1:a6:4b:9e:96:7d:55:b7:ac:2f:
                    7b:49:be:ca:66:f2:d0:79:c2:83:a6:60:0c:72:59:
                    b4:d8:b2:6f:8f:82:51:31:ee:1a:4f:cb:37:ab:02:
                    74:86:34:cb:34:c2:c5:9e:3f:0d:56:aa:d3:99:ef:
                    a7:b7:67:8c:b3:1d:2e:6b:da:d5:a4:f5:8d:e7:81:
                    4e:4f:6a:cd:f7:6f:eb:d7:eb:92:f6:19:70:59:28:
                    ee:88:f3:98:25:c7:c6:fe:a3:d0:71:2f:a8:36:8b:
                    51:70:fc:77:e7:e7:ec:fa:64:d3:88:2a:b6:f0:bb:
                    e4:7d:db:49:13:98:2d:98:dd:da:51:d4:70:dc:e4:
                    97:a1:de:63:31:8a:94:09:49:e5:5b:f9:71:48:e5:
                    67:a4:6f:bb:a2:04:ae:95:dc:42:8b:b4:87:20:f1:
                    19:ce:74:e4:78:47:47:1b:a7:98:98:b1:20:f7:1b:
                    51:ac:69:cf:8e:cc:fc:03:b6:8b:8f:6d:a7:24:63:
                    53:a6:ee:25:48:49:84:cd:49:c6:49:6b:31:b2:db:
                    73:9a:92:16:29:66:36:30:6c:ba:33:c0:b6:a7:c5:
                    69:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:3F:54:8D:BD:2D:BF:3D:4A:95:88:D2:40:17:C2:EE:C4:FF:8D:11
            X509v3 Authority Key Identifier:
                keyid:73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:1d:7f:84:d9:34:4a:75:a9:34:3d:22:18:bb:d0:eb:d3:ec:
         21:02:5c:ca:02:f0:b8:8d:20:f5:43:68:75:fd:cb:20:b4:a0:
         62:56:0d:7a:42:1e:b5:14:d6:db:40:bf:9d:28:01:93:b4:5b:
         68:85:d1:df:15:2b:52:f7:62:31:fd:62:f6:bc:7f:ad:bf:c0:
         51:bc:31:09:1a:8a:df:f0:f8:ac:ba:89:0b:e9:7d:5a:73:ec:
         42:13:39:ad:c5:de:ef:4d:66:61:f7:22:a4:c5:ce:e4:29:01:
         98:f9:f7:41:47:2d:f8:d7:0b:bb:77:e2:f5:ad:01:fe:df:8a:
         bc:af:15:ef:b5:4b:b5:64:ac:22:04:7d:c8:29:e0:ab:18:0f:
         00:1e:a7:64:c3:3d:4f:80:8e:38:74:67:ab:c1:e8:23:0f:60:
         0e:81:38:61:8a:74:2e:3b:dc:b8:83:69:8f:48:85:3a:a9:dd:
         8b:8a:60:b3:97:a3:48:69:a2:b3:4d:56:4e:0f:81:90:8d:b2:
         fc:f6:db:c4:7d:a1:87:1e:c4:fa:90:56:47:a3:b1:a7:44:c5:
         82:5d:c4:49:78:ba:71:c4:c6:7c:a8:e3:82:83:54:b8:07:dc:
         77:9b:84:d3:ab:df:70:1f:d3:b4:fc:99:cd:58:c3:a9:b5:10:
         f0:2f:f1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:49:40 2026 by rpki-client