Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.mft
File:                     7p_-U-YuKeqlvWqoF4mNPDj4_KQ.mft (raw, json)
Hash identifier:          zfLEIm3o131y/S0t0JFz0aut3VAwFDPHdaLSczeAHJU=
Subject key identifier:   CF:EC:84:79:98:44:08:C7:D5:98:D7:D0:09:D9:C1:AA:1C:A4:F9:A4
Authority key identifier: EE:9F:FE:53:E6:2E:29:EA:A5:BD:6A:A8:17:89:8D:3C:38:F8:FC:A4
Certificate issuer:       /CN=ee9ffe53e62e29eaa5bd6aa817898d3c38f8fca4
Certificate serial:       019FA8990283561767B94091C442289DE9B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.mft
Manifest number:          4C
Signing time:             Tue 28 Jul 2026 12:00:27 +0000
Manifest this update:     Tue 28 Jul 2026 12:00:27 +0000
Manifest next update:     Wed 29 Jul 2026 12:00:27 +0000
Files and hashes:         1: 7p_-U-YuKeqlvWqoF4mNPDj4_KQ.crl (hash: Q34qZy+rcM4SV9kPKRbC9HrRRRNtSxaTIaff4EnzmaQ=)
                          2: HknPQh-0Yk6yaxmwcZa5py8_zl0.roa (hash: wuIV5US3SZC05FFGszlUmrIVNWyDFMwcOW0Vs4e0MUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:02:83:56:17:67:b9:40:91:c4:42:28:9d:e9:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee9ffe53e62e29eaa5bd6aa817898d3c38f8fca4
        Validity
            Not Before: Jul 28 12:00:27 2026 GMT
            Not After : Jul 29 12:00:27 2026 GMT
        Subject: CN=cfec8479984408c7d598d7d009d9c1aa1ca4f9a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e8:20:9b:67:c9:ef:30:c8:53:f1:96:3b:59:
                    3f:78:eb:44:d8:71:7f:12:f3:d8:ad:34:b0:34:3f:
                    d1:04:01:f6:80:35:98:e0:69:db:d2:80:01:0f:87:
                    9b:a1:c9:4d:fb:75:3f:23:23:69:dc:2e:71:79:6d:
                    56:da:fe:92:f2:b3:94:da:73:44:c3:a1:48:e2:37:
                    34:6e:87:66:80:6c:6c:1a:32:93:4b:aa:ba:a3:3d:
                    bc:d9:c2:bd:a3:f4:b2:31:00:69:2e:29:d6:cf:88:
                    72:7d:7b:cb:06:2d:08:6a:a0:d3:e3:4f:03:c3:8f:
                    c5:d6:cf:42:db:81:44:e3:4d:8d:97:f2:22:a9:cb:
                    32:dc:77:54:24:07:dd:7b:ce:20:3c:da:44:b5:0a:
                    87:0b:75:ed:46:c9:47:3e:3d:47:9d:b0:d9:41:29:
                    95:d5:bb:86:00:6b:b7:c6:44:ee:e9:ef:1e:80:66:
                    99:b5:68:97:54:c7:47:2d:f4:6b:96:20:ce:52:95:
                    e1:05:31:81:7b:c8:22:11:db:12:38:c3:9e:26:7a:
                    20:9d:4f:f4:33:4a:f8:d8:22:a9:6d:f9:af:40:13:
                    df:b1:34:29:31:2d:d9:19:40:af:5f:e7:6f:e1:6f:
                    b2:95:41:b9:1f:d3:9c:26:a3:4a:87:eb:2a:5d:f1:
                    fe:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:EC:84:79:98:44:08:C7:D5:98:D7:D0:09:D9:C1:AA:1C:A4:F9:A4
            X509v3 Authority Key Identifier:
                keyid:EE:9F:FE:53:E6:2E:29:EA:A5:BD:6A:A8:17:89:8D:3C:38:F8:FC:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:6e:e5:e9:6d:cd:7d:4f:0a:52:8f:21:d7:1c:87:58:fe:7f:
         6f:75:7d:66:64:32:0d:51:2b:4f:2b:15:af:c2:5c:68:b3:49:
         0a:5e:c8:47:db:13:1c:a1:5c:3a:d4:a1:36:a3:58:6c:92:ac:
         a5:e9:04:6a:22:17:b2:a6:06:3c:77:ba:e7:29:b0:b5:ec:81:
         72:63:aa:d3:88:59:1d:54:11:fd:ea:87:1a:5d:94:d9:33:a4:
         3c:93:f1:55:bc:1d:6e:30:a2:c2:01:49:86:0f:70:9d:e5:da:
         38:e3:5b:1e:82:92:ba:0c:f6:99:69:52:5f:27:2b:6d:eb:af:
         2b:44:12:42:30:4b:23:da:83:67:92:b7:32:9b:c1:d3:36:d8:
         3a:04:cb:d4:dc:a6:77:18:0f:3d:b4:f2:1f:03:8d:92:b9:25:
         e8:1c:e1:60:9a:16:28:b8:68:f3:06:48:66:59:56:b0:31:dc:
         4c:9a:f7:96:b8:d9:4c:be:ab:cd:b9:28:94:4c:62:4f:f8:79:
         a2:81:83:32:2c:50:04:0c:fd:17:32:a7:2f:4c:2a:09:c3:c4:
         45:25:f9:9a:6e:13:74:bc:36:79:0a:22:2d:06:09:c8:fc:ff:
         f3:2e:eb:e3:35:8d:f8:15:76:96:a0:f7:9e:17:b0:cf:bf:7b:
         25:fa:9f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:44:56 2026 by rpki-client