Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
File:                     7sMTGXauon0XHGwmepjT84KmGio.mft (raw, json)
Hash identifier:          f9caFTfhnwELqn8KMAsv0XLlZBUx/ucY4qTBgtPGERw=
Subject key identifier:   27:F8:25:A2:8C:A5:A8:70:5A:9D:6E:05:CB:10:1B:B6:FF:53:6F:42
Authority key identifier: EE:C3:13:19:76:AE:A2:7D:17:1C:6C:26:7A:98:D3:F3:82:A6:1A:2A
Certificate issuer:       /CN=eec3131976aea27d171c6c267a98d3f382a61a2a
Certificate serial:       019EBDD9E1FE5F74C3EF53E0D007CE41568E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
Manifest number:          1350
Signing time:             Fri 12 Jun 2026 22:00:33 +0000
Manifest this update:     Fri 12 Jun 2026 22:00:33 +0000
Manifest next update:     Sat 13 Jun 2026 22:00:33 +0000
Files and hashes:         1: 7sMTGXauon0XHGwmepjT84KmGio.crl (hash: L9LbS/quMazbuBFmq0szTvYhkbJ0OnlXkU8TpEIWhuA=)
                          2: L_bdGxJHykWkh6lnI23znPb9ZRc.roa (hash: ZEX+GgljqjjHrDsG1Iee4BuX7n/kzIjwqN8LRfjYRoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:d9:e1:fe:5f:74:c3:ef:53:e0:d0:07:ce:41:56:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eec3131976aea27d171c6c267a98d3f382a61a2a
        Validity
            Not Before: Jun 12 22:00:33 2026 GMT
            Not After : Jun 13 22:00:33 2026 GMT
        Subject: CN=27f825a28ca5a8705a9d6e05cb101bb6ff536f42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:55:6c:68:22:14:8c:d3:a2:b5:06:69:68:9d:
                    64:0f:32:00:b8:2d:25:7e:bf:7d:bf:20:87:e9:bd:
                    a0:e7:78:26:76:89:f9:2b:15:5f:43:4e:d5:15:9a:
                    1c:c4:b9:83:34:58:5c:fe:b7:50:6b:53:fc:aa:f9:
                    46:69:81:e6:ff:a9:b9:07:d4:d4:d8:b6:87:2c:1c:
                    ca:26:3d:20:03:e0:4b:36:aa:4f:f6:72:c5:4c:f7:
                    89:8e:09:0f:d5:1e:8d:67:20:fb:a8:2d:16:ed:7a:
                    ea:17:50:c4:64:90:4d:d4:8d:69:c1:64:eb:17:20:
                    e7:d4:ea:eb:cc:73:d1:ce:07:4c:75:f0:bf:78:c6:
                    d2:af:24:7f:80:8f:25:c0:6c:e4:d7:1b:e0:d4:e7:
                    ae:90:c7:f5:d5:4b:d2:75:4a:a4:fd:ac:5f:ec:dc:
                    f6:42:cc:76:d4:6a:dd:59:c0:da:63:62:00:90:a4:
                    60:13:35:cf:96:48:34:90:65:61:9d:44:f0:e8:0e:
                    18:ae:09:c9:6f:23:d2:bd:0a:f3:15:1b:0a:25:c2:
                    a3:b0:2d:49:99:a5:3d:ea:80:59:e7:49:a2:5b:96:
                    ac:98:19:6c:72:dc:a6:af:15:41:53:15:d0:40:ab:
                    d1:3e:37:81:8c:da:6e:89:50:0f:33:30:ce:65:6d:
                    49:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F8:25:A2:8C:A5:A8:70:5A:9D:6E:05:CB:10:1B:B6:FF:53:6F:42
            X509v3 Authority Key Identifier:
                keyid:EE:C3:13:19:76:AE:A2:7D:17:1C:6C:26:7A:98:D3:F3:82:A6:1A:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:94:8d:43:db:a8:b5:b5:1a:2a:b9:c6:0b:2d:a8:28:28:01:
         24:e9:99:a8:be:6b:41:69:da:9d:84:5f:cd:d0:c6:a4:e6:18:
         ca:a1:f5:17:41:d4:1e:85:c4:cc:55:7a:2b:20:4e:77:6b:fe:
         c3:4e:76:00:c0:fc:57:f4:8d:89:74:62:12:c1:41:7b:a8:82:
         35:23:f0:3a:b8:81:9e:bb:06:0a:a9:69:31:a0:87:ce:c6:59:
         58:a2:9c:6d:95:37:93:68:41:93:d7:cc:02:33:9e:30:aa:ac:
         f8:82:f6:c5:fa:d9:b3:75:91:74:90:7a:79:cf:15:7f:4d:96:
         34:a4:81:86:f1:f5:93:44:5c:7f:a8:7b:9c:24:6c:18:f9:35:
         ae:7b:04:ea:1d:ab:43:9c:de:81:c2:97:52:ee:77:70:8a:b9:
         4c:f8:fb:21:3f:27:03:d1:3e:a5:67:f4:b3:0a:d1:fc:0d:34:
         7d:e6:55:d2:00:f8:25:9f:a2:ae:1f:17:76:4b:93:f5:59:d7:
         07:60:14:73:96:e5:43:36:5b:c5:7b:5b:ab:96:c1:bb:53:24:
         f7:42:50:3d:34:61:f4:c3:2b:0d:33:d6:8c:c4:26:b3:2c:8e:
         7a:7f:51:b2:c4:ba:0c:df:12:91:c5:36:69:bf:57:2e:65:60:
         85:32:71:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:19:01 2026 by rpki-client