Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
File:                     7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft (raw, json)
Hash identifier:          tRlRvxBWGEf6A6/G1vYklwqlyCatB7Qsox1fOSNZYas=
Subject key identifier:   76:1D:94:C7:16:9D:2C:75:20:32:88:9D:5C:1A:C5:FE:99:D5:BF:1C
Authority key identifier: EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2
Certificate issuer:       /CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
Certificate serial:       019FAAF5716AAF372B74621CC4F4945333F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
Manifest number:          13FB
Signing time:             Tue 28 Jul 2026 23:00:39 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:39 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:39 +0000
Files and hashes:         1: 7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl (hash: R9Mcp7M8qki7oTdEgPJtUsqnxlPVwTjmzoxfIWEiyuY=)
                          2: Z-Nhf0GUm-eK6gBfuWRH4mBMDa8.roa (hash: j8yQFLI888ZXRlZcfp3XqLieyu9/rqxMNp1WWGddyFc=)
                          3: zQxCSJAybTKhMbu9tj9geo08EHM.roa (hash: vRuFfeMEunDY9UG2VQ5bdPd5mpRSySgDc592VktLEXg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:71:6a:af:37:2b:74:62:1c:c4:f4:94:53:33:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
        Validity
            Not Before: Jul 28 23:00:39 2026 GMT
            Not After : Jul 29 23:00:39 2026 GMT
        Subject: CN=761d94c7169d2c752032889d5c1ac5fe99d5bf1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c1:9b:67:45:ef:dd:0c:fb:d1:f6:99:35:21:
                    bb:36:3c:4e:f8:e5:4d:66:c1:e4:85:89:57:8b:dc:
                    b2:c5:d3:1c:57:d5:10:66:34:3a:9a:a6:84:92:44:
                    ef:fe:6e:53:93:16:6b:c3:e1:a7:12:d4:25:ed:19:
                    c1:32:6e:cb:f0:67:94:8e:3b:c7:cb:d3:62:c8:a4:
                    f7:8d:22:f2:c7:44:51:7e:22:fa:1d:0f:5b:cf:75:
                    d1:5b:47:4b:4f:ba:04:da:46:4f:69:fe:0c:26:87:
                    6b:0d:16:29:d0:d5:98:cb:cf:4c:c8:66:2f:bc:51:
                    87:8a:bf:a2:84:43:ad:b8:0f:8b:55:b7:2c:32:f0:
                    fe:cb:bd:3b:61:7b:85:89:e7:cd:6d:b8:1a:6a:d4:
                    b1:61:15:d0:8f:03:1c:01:b9:59:83:bd:54:0f:6c:
                    4a:b9:5c:d7:30:8f:f6:d3:80:e6:25:46:5f:ec:44:
                    bf:83:98:28:b5:ce:35:8d:51:19:3b:b5:e7:58:7e:
                    fe:b2:d4:ec:a6:be:23:42:fc:ef:97:16:88:e4:e5:
                    aa:d5:94:c2:45:20:de:fc:98:91:6f:c0:af:3f:f0:
                    d3:69:be:d6:0c:fb:a4:68:d7:84:07:3a:56:4d:0f:
                    53:6e:70:12:2c:5e:92:54:ae:de:93:31:a6:4a:09:
                    60:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1D:94:C7:16:9D:2C:75:20:32:88:9D:5C:1A:C5:FE:99:D5:BF:1C
            X509v3 Authority Key Identifier:
                keyid:EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:8a:dd:1f:53:59:db:0e:04:07:e0:60:bb:c5:62:53:ad:23:
         15:db:6b:28:ee:05:cd:96:c6:5a:cd:a1:41:c0:53:ff:4a:2d:
         cd:f4:fd:7b:37:f3:45:83:97:74:a3:13:cf:02:d2:d6:7d:0b:
         02:38:cb:02:22:49:81:e3:e3:23:c1:a1:e5:b2:12:dd:95:3f:
         d4:8b:d2:04:9f:9f:55:a4:5e:b9:70:5f:93:11:02:50:bc:bb:
         45:ab:6e:42:d7:24:e5:96:9a:9a:c9:7c:84:15:c2:c2:21:6b:
         32:a8:1a:b9:81:94:85:45:79:92:a3:4d:e5:4b:36:01:ae:54:
         d3:96:3d:c2:83:f8:43:e5:07:c5:36:08:82:6d:8d:2e:58:15:
         cf:56:9e:8d:8c:fc:fd:e6:2b:03:b9:2d:23:a4:e8:9d:56:fd:
         b5:49:26:31:3e:91:52:81:9e:ce:14:12:1c:58:48:3d:b2:53:
         cc:0c:ca:94:c3:86:93:61:05:8c:97:00:df:02:7a:9b:33:2d:
         81:4f:8a:25:17:82:b5:f6:24:1a:3a:12:37:fa:ff:61:64:cd:
         e2:0a:b7:4a:35:e1:62:3b:a6:8b:b2:59:a0:a1:9e:07:98:a1:
         9d:86:08:81:f8:4c:94:46:79:72:83:df:b1:e9:d2:03:57:ce:
         18:cb:b9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:46:38 2026 by rpki-client