Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft
File:                     63yFxELMq3Xizm3inbX9APMmdJ0.mft (raw, json)
Hash identifier:          IvU+J8rkTFB68qX5+ng0OCxG0QhAx+PBLibv+0FGVxk=
Subject key identifier:   29:37:13:1D:74:46:36:A2:7E:08:89:BD:EA:20:99:5A:0E:0A:15:8B
Authority key identifier: EB:7C:85:C4:42:CC:AB:75:E2:CE:6D:E2:9D:B5:FD:00:F3:26:74:9D
Certificate issuer:       /CN=eb7c85c442ccab75e2ce6de29db5fd00f326749d
Certificate serial:       019FA9ABFF04D3DEE05E723853AB754853EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft
Manifest number:          14DB
Signing time:             Tue 28 Jul 2026 17:00:48 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:48 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:48 +0000
Files and hashes:         1: 63yFxELMq3Xizm3inbX9APMmdJ0.crl (hash: ZP7OvyDaVbVEx6D8ihmd0jyxVjhf8Oiq46/5SUvpK7M=)
                          2: vUFwfEY11W7JpynTF9BbfUWs9-w.roa (hash: eu7mWQahLyPxvPg5BFYa4l+E4W1NHB0xDJbdLJnBmrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:ff:04:d3:de:e0:5e:72:38:53:ab:75:48:53:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7c85c442ccab75e2ce6de29db5fd00f326749d
        Validity
            Not Before: Jul 28 17:00:48 2026 GMT
            Not After : Jul 29 17:00:48 2026 GMT
        Subject: CN=2937131d744636a27e0889bdea20995a0e0a158b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6f:3b:7c:bb:a6:6c:95:7c:a5:66:1a:b4:bb:
                    1e:49:0a:03:7e:04:f3:7d:1a:14:b0:51:70:57:3b:
                    46:ff:b4:fa:aa:dd:35:ab:7d:18:ab:b7:9c:f4:f5:
                    b8:9c:66:ca:3a:ac:64:0e:47:43:b4:86:bf:aa:91:
                    b3:96:8d:b4:b0:1d:1a:20:dc:06:c6:cb:82:66:01:
                    3a:a2:a6:a6:31:64:1f:4c:2a:83:48:b3:23:48:30:
                    c1:1f:67:b9:7d:56:a7:b9:db:7b:8f:ec:5b:ab:fb:
                    51:fc:d5:1f:e1:0b:eb:6c:d3:13:38:69:3f:d8:1a:
                    a3:f7:9a:a8:00:f0:db:0d:4d:7c:ad:e9:84:e5:d2:
                    f3:de:9d:94:3b:88:81:7e:14:30:5b:f2:a1:5d:f9:
                    1c:73:d0:11:51:17:0f:bd:bf:e9:fa:36:0f:e0:70:
                    19:7c:41:5d:e0:a8:8c:f7:f2:34:fd:e3:e4:66:44:
                    5c:0b:c1:e9:05:43:73:38:21:98:83:f1:b9:2c:ab:
                    37:3c:40:82:b2:cd:bc:54:f3:23:c7:0f:93:94:d9:
                    04:e0:88:2c:74:af:c0:1c:b0:8f:80:93:e8:e1:63:
                    22:e3:e8:a2:df:5c:0b:7a:db:a4:66:8a:80:9c:a3:
                    4e:da:ba:a3:df:21:d7:f0:53:58:03:be:e0:89:c7:
                    71:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:37:13:1D:74:46:36:A2:7E:08:89:BD:EA:20:99:5A:0E:0A:15:8B
            X509v3 Authority Key Identifier:
                keyid:EB:7C:85:C4:42:CC:AB:75:E2:CE:6D:E2:9D:B5:FD:00:F3:26:74:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:bb:ce:c7:4e:a6:e4:3f:55:8c:c9:33:cf:cd:ba:19:a7:a1:
         4a:90:34:59:5f:e6:71:92:ef:50:ae:4c:43:0c:05:0d:09:e8:
         92:c2:d1:01:9a:5b:d4:30:71:21:b0:1d:0b:ef:9d:88:01:8d:
         09:29:11:cd:74:4e:86:ee:db:52:95:21:30:49:0a:63:77:58:
         2c:2e:5b:42:b5:cc:e0:04:ca:06:fc:0e:c7:3f:4d:03:97:d8:
         61:a7:ef:da:d3:6b:0f:a7:3f:bc:8b:7f:75:e0:93:6e:b5:45:
         2f:ed:e4:05:22:ba:d5:2d:c1:d8:d5:4d:ec:fa:c4:33:00:3d:
         99:c0:a3:ad:c8:8e:b4:1b:49:dc:81:3d:3c:9e:f8:aa:07:70:
         71:75:14:46:12:84:65:07:bd:2c:19:c2:1e:75:ea:df:42:be:
         4a:fb:be:05:75:88:35:59:27:4c:f8:0a:85:57:c5:15:ae:cf:
         f1:f6:96:2c:1e:59:db:d4:87:ae:05:c5:23:a3:32:23:d2:86:
         2d:66:4d:b6:3e:42:c9:de:72:8f:ba:8e:9a:75:a2:13:ef:e7:
         dd:93:1e:5b:80:ad:ea:ec:f8:f7:20:5b:77:5a:00:15:c0:97:
         08:44:dc:ca:8a:8a:50:55:3b:5f:9b:74:45:d2:c7:05:db:58:
         5a:71:b0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:12:47 2026 by rpki-client