Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft
File:                     7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft (raw, json)
Hash identifier:          A4Cu+aAm16RBBysh4ryYr8t7ZflTQnhP0jrQn+BVoJ0=
Subject key identifier:   4A:54:F4:8C:EF:17:38:1D:C3:18:F9:B1:62:BC:69:C6:BA:03:50:AD
Authority key identifier: EE:BE:79:D1:47:88:24:22:EC:27:54:17:DF:D2:AF:FA:93:A0:27:57
Certificate issuer:       /CN=eebe79d147882422ec275417dfd2affa93a02757
Certificate serial:       019FABD12249D2AFBFC9C05A0F0F808F0756
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft
Manifest number:          09F1
Signing time:             Wed 29 Jul 2026 03:00:37 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:37 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:37 +0000
Files and hashes:         1: 7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl (hash: FD13ydTDlZ9o1Cx3ZYD93f6ThAqMid8oAfBC02cZaCI=)
                          2: QSFo4SzW5Mxl0PfFRdNnIL_TgtQ.roa (hash: ihRbYBAqH4CF7W2NY5WPRwb0ldsVjq6C79woYjxyC0Q=)
                          3: Qhj-dAw4UmH14cGcWPixT30vFoE.roa (hash: JjCn/CEVqHRrx5g3GCN0ImneG9z/AYQZMRc57RLWwA8=)
                          4: UfUKm5VRI_4IDkO1oFXvYLTnZWQ.roa (hash: FWPMWaa8EhT3K9Uzqt/ZpfSh1CKxfYK1Ozqf41dv8H8=)
                          5: Up3P0BLXnOn0NJzNO22oJuB2P-0.roa (hash: WAsExi4a515grUSlWqpJ211VY3MEpndWg6Zn1Kyg9+8=)
                          6: eDlvHgRtKsU4i-jNtF947Zs0OH8.roa (hash: O24cI9pKOeR6BhzhlKYvgEN2vTJ+LKMhalZO6Gb3Tb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d1:22:49:d2:af:bf:c9:c0:5a:0f:0f:80:8f:07:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebe79d147882422ec275417dfd2affa93a02757
        Validity
            Not Before: Jul 29 03:00:37 2026 GMT
            Not After : Jul 30 03:00:37 2026 GMT
        Subject: CN=4a54f48cef17381dc318f9b162bc69c6ba0350ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b0:a2:f3:64:33:51:eb:cf:0a:ec:ce:55:47:
                    cd:01:71:db:ae:db:93:be:df:e7:a9:8b:74:90:4b:
                    04:1b:03:dd:90:f8:8c:27:36:33:c0:6f:63:3a:29:
                    fa:99:5d:05:5d:d3:19:09:3c:a2:5b:8f:37:6c:bc:
                    a5:6e:be:a1:68:9a:6d:65:65:72:bf:ec:8e:01:a0:
                    46:71:23:17:9c:af:79:1a:35:dd:59:9f:67:35:70:
                    6d:48:97:e0:2d:8b:ce:97:59:ff:82:c9:55:2d:fd:
                    c2:37:a3:34:8f:42:ee:e9:ec:39:0a:28:c0:2f:6a:
                    50:7f:15:ba:39:0f:c0:cd:c2:a5:1a:59:79:6b:21:
                    0e:44:9d:6d:ed:e1:f0:5c:d5:5a:36:1d:ce:07:fa:
                    bc:eb:ab:b3:06:f8:1a:ff:2c:ba:9b:6e:60:2a:8e:
                    1e:8c:d1:45:65:c4:68:92:3a:fa:23:da:70:83:98:
                    48:4c:ea:ec:8d:04:91:33:60:bf:09:4e:9a:d0:3b:
                    3a:80:0f:52:20:91:ff:f1:0a:ad:98:48:d1:4c:8e:
                    da:0c:0c:2e:97:39:98:b3:47:9d:a1:0e:8f:bc:83:
                    95:8a:fa:91:87:64:72:8b:30:e7:1d:28:4d:f8:2c:
                    7f:fc:62:e8:fb:cb:50:1e:c6:73:90:d7:06:91:73:
                    a5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:54:F4:8C:EF:17:38:1D:C3:18:F9:B1:62:BC:69:C6:BA:03:50:AD
            X509v3 Authority Key Identifier:
                keyid:EE:BE:79:D1:47:88:24:22:EC:27:54:17:DF:D2:AF:FA:93:A0:27:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:20:a3:42:99:62:8a:28:40:d1:81:31:38:91:b0:cb:dc:c2:
         ff:bb:c1:01:4e:f8:ec:97:aa:99:22:b6:d4:ff:a4:21:ed:e3:
         68:e4:0c:d4:7f:51:48:6d:a2:b8:78:87:d5:40:e9:24:0f:1e:
         20:3e:39:55:25:41:46:61:52:cd:05:56:bd:3a:98:3e:67:66:
         7c:66:57:37:fe:89:25:23:65:fd:10:ca:b0:18:1d:c8:00:79:
         a9:eb:fc:6b:05:47:f0:e5:1d:7f:d8:6c:19:f7:5f:ea:47:6e:
         86:77:08:cb:1d:c7:a5:07:91:5d:e7:31:b9:14:51:76:b6:3d:
         a8:e0:9d:0f:6c:a6:87:04:1c:35:f5:00:01:e8:4f:74:91:a0:
         1c:e2:c7:ff:3c:68:d8:6d:78:b6:d1:52:c1:19:61:05:ca:77:
         1d:c7:12:c3:d8:07:74:ba:b9:8d:9f:1f:e9:cb:e1:eb:6f:97:
         53:d4:33:4e:e6:56:3a:40:eb:f2:d9:d5:37:2c:c9:ce:8f:b6:
         70:cb:62:e1:70:76:8d:3b:39:02:3b:28:ee:86:ee:7f:25:ef:
         5a:a2:9a:95:9e:6b:ab:3b:6d:ba:e1:7d:80:a4:da:6e:05:23:
         50:2c:f3:cc:c2:c4:01:1d:f8:63:6a:f5:e9:eb:20:af:39:1a:
         7a:46:b2:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+r0SJJ0q+/ycBaDw+AjwdWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmU3OWQxNDc4ODI0MjJlYzI3NTQxN2RmZDJhZmZhOTNh
MDI3NTcwHhcNMjYwNzI5MDMwMDM3WhcNMjYwNzMwMDMwMDM3WjAzMTEwLwYDVQQD
Eyg0YTU0ZjQ4Y2VmMTczODFkYzMxOGY5YjE2MmJjNjljNmJhMDM1MGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47Ci82QzUevPCuzOVUfNAXHbrtuT
vt/nqYt0kEsEGwPdkPiMJzYzwG9jOin6mV0FXdMZCTyiW483bLylbr6haJptZWVy
v+yOAaBGcSMXnK95GjXdWZ9nNXBtSJfgLYvOl1n/gslVLf3CN6M0j0Lu6ew5CijA
L2pQfxW6OQ/AzcKlGll5ayEORJ1t7eHwXNVaNh3OB/q866uzBvga/yy6m25gKo4e
jNFFZcRokjr6I9pwg5hITOrsjQSRM2C/CU6a0Ds6gA9SIJH/8QqtmEjRTI7aDAwu
lzmYs0edoQ6PvIOVivqRh2RyizDnHShN+Cx//GLo+8tQHsZzkNcGkXOlLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpU9IzvFzgdwxj5sWK8aca6A1CtMB8GA1UdIwQY
MBaAFO6+edFHiCQi7CdUF9/Sr/qToCdXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3I1NTBVZUlKQ0xzSjFRWDM5S3YtcE9nSjFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9jNDRiN2YtNWJjZC00ZWU3LTg3MTIt
Mzg4MjNjMTQ0OWFmLzEvN3I1NTBVZUlKQ0xzSjFRWDM5S3YtcE9nSjFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9jNDRiN2YtNWJjZC00ZWU3LTg3MTItMzg4MjNjMTQ0OWFm
LzEvN3I1NTBVZUlKQ0xzSjFRWDM5S3YtcE9nSjFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANiCjQpli
iihA0YExOJGwy9zC/7vBAU747JeqmSK21P+kIe3jaOQM1H9RSG2iuHiH1UDpJA8e
ID45VSVBRmFSzQVWvTqYPmdmfGZXN/6JJSNl/RDKsBgdyAB5qev8awVH8OUdf9hs
Gfdf6kduhncIyx3HpQeRXecxuRRRdrY9qOCdD2ymhwQcNfUAAehPdJGgHOLH/zxo
2G14ttFSwRlhBcp3HccSw9gHdLq5jZ8f6cvh62+XU9QzTuZWOkDr8tnVNyzJzo+2
cMti4XB2jTs5Ajso7obufyXvWqKalZ5rqzttuuF9gKTabgUjUCzzzMLEAR34Y2r1
6esgrzkaekayNg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:28:53 2026 by rpki-client