Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
File:                     7MihqtAgWUOkVyOJu3QzThyihIU.mft (raw, json)
Hash identifier:          IbKl+xfMPros3iw4MmhxBejQwqj30nyz28QK3tzO0SU=
Subject key identifier:   4A:83:CE:2B:B9:58:60:88:8B:81:9E:19:BD:F4:C5:31:C7:CA:86:72
Authority key identifier: EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85
Certificate issuer:       /CN=ecc8a1aad0205943a4572389bb74334e1ca28485
Certificate serial:       019EC1B76F29BEA4C48DDB0A54952A1B05FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
Manifest number:          195D
Signing time:             Sat 13 Jun 2026 16:01:24 +0000
Manifest this update:     Sat 13 Jun 2026 16:01:24 +0000
Manifest next update:     Sun 14 Jun 2026 16:01:24 +0000
Files and hashes:         1: 7MihqtAgWUOkVyOJu3QzThyihIU.crl (hash: rW7hDliEGbDOvqWSa/r9pAWOeJ6VNKulVmgNHenCiU0=)
                          2: TPFA9ANmjeizoRraD4Ig8TEK1SU.roa (hash: kT6UPV2xN7mmP7EqC+AR1+y3Fgn76QDWPblq40BQx1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b7:6f:29:be:a4:c4:8d:db:0a:54:95:2a:1b:05:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecc8a1aad0205943a4572389bb74334e1ca28485
        Validity
            Not Before: Jun 13 16:01:24 2026 GMT
            Not After : Jun 14 16:01:24 2026 GMT
        Subject: CN=4a83ce2bb95860888b819e19bdf4c531c7ca8672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6c:03:22:c3:5f:bb:2d:01:ed:1f:86:5f:2e:
                    4a:4e:62:79:04:60:17:a9:ee:ed:05:df:9a:a1:89:
                    96:36:3b:03:48:fa:4f:c6:ae:12:d4:25:7b:74:3c:
                    c7:88:c1:44:73:eb:6c:35:a3:87:a6:71:8c:9b:e6:
                    2d:45:15:97:ca:fd:6b:1c:35:f0:89:b1:99:ee:cd:
                    32:26:ec:93:14:e5:28:b9:33:44:26:87:bc:db:e2:
                    5f:2c:fe:8b:95:cd:9f:cb:14:f1:53:55:ad:69:54:
                    73:b0:a4:52:af:3b:e0:46:95:11:7a:cf:60:34:e2:
                    1f:c7:ec:ff:dc:0c:e3:3d:75:d3:c6:29:94:33:63:
                    dd:70:57:88:fc:ad:18:03:da:fb:fe:1d:93:19:ed:
                    5c:4a:06:ce:89:50:18:60:fd:5e:cb:6d:8c:47:09:
                    c7:0f:8b:54:13:54:4b:82:0d:04:75:7e:3a:db:87:
                    1b:d6:b9:b2:18:e9:89:f7:2d:fd:f5:83:3c:a1:7f:
                    17:c8:c8:2d:93:55:9a:77:0c:23:bb:22:ba:d5:85:
                    50:52:2b:09:5f:1e:92:9e:bc:4a:1a:a5:b3:89:49:
                    d4:69:32:6d:54:94:00:3d:9e:7d:f2:34:b4:5d:7f:
                    ea:83:a3:4c:59:61:15:cf:67:dc:bb:14:10:36:41:
                    6e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:83:CE:2B:B9:58:60:88:8B:81:9E:19:BD:F4:C5:31:C7:CA:86:72
            X509v3 Authority Key Identifier:
                keyid:EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:65:09:3a:6a:2a:bf:a1:cd:85:a0:87:6e:1a:45:d1:44:84:
         21:87:a3:04:90:21:10:17:21:d7:8e:c6:7a:40:66:9d:e5:20:
         e6:8f:68:d8:81:94:dd:c1:2f:0b:5a:21:34:66:81:0b:66:5c:
         0c:18:81:21:37:aa:53:a1:c4:31:94:ba:f2:b8:1f:3a:ad:dd:
         e8:93:2b:2a:aa:7e:03:a2:2f:c9:f5:3a:84:25:4e:65:3e:51:
         1e:14:fb:eb:34:ab:d0:d2:a2:5d:03:4b:f6:fb:75:cc:b0:29:
         e0:60:ab:10:ca:0e:4e:c7:2d:24:87:f1:33:00:f2:31:4e:43:
         22:b2:06:38:2a:4f:3e:db:e0:0f:88:7f:61:54:32:ef:3d:e5:
         4a:3a:3d:f2:ea:98:4e:7d:83:6a:b7:a8:de:e0:29:6e:ff:a5:
         2a:94:19:95:25:70:01:6b:f0:90:a0:45:20:cf:2f:76:b7:8a:
         23:cf:96:45:d0:bf:92:43:f8:2c:a1:06:69:84:b9:c1:67:4c:
         de:fc:f2:55:a3:12:b0:0d:66:54:60:1f:ae:47:00:96:02:1a:
         3e:33:d3:e9:48:5f:08:d4:63:cf:9c:4e:fc:57:2b:34:9c:62:
         85:2a:22:4f:76:ec:d4:25:05:56:62:a9:1f:b1:32:7a:5f:d3:
         cb:f8:e7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:07:38 2026 by rpki-client