Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft
File:                     7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft (raw, json)
Hash identifier:          A4z8+PqDus6v5Uvj3fxg/SkwL5wA2Mg+mD7P9Ct/5W4=
Subject key identifier:   DC:79:00:EE:4E:90:BF:7F:31:7E:FF:D0:AE:DA:B3:C4:8A:57:52:49
Authority key identifier: ED:82:F3:23:35:93:82:D8:01:ED:0B:93:EC:1B:FA:03:0D:E6:36:22
Certificate issuer:       /CN=ed82f323359382d801ed0b93ec1bfa030de63622
Certificate serial:       019FA9AC3132D6BCA83871866E42B33B4A0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft
Manifest number:          0256
Signing time:             Tue 28 Jul 2026 17:01:01 +0000
Manifest this update:     Tue 28 Jul 2026 17:01:01 +0000
Manifest next update:     Wed 29 Jul 2026 17:01:01 +0000
Files and hashes:         1: 7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.crl (hash: 8emGplQWtiTplvg89K1MOkiUQoAIcIsi9rc9F+qzyb0=)
                          2: HQhGJmI4T_DZ_xQg_JWTx_ZEOwY.asa (hash: 81awX6nGzaP5BhwCqw9DUWQmt4pEmO2yQ7dMfVdLs10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ac:31:32:d6:bc:a8:38:71:86:6e:42:b3:3b:4a:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed82f323359382d801ed0b93ec1bfa030de63622
        Validity
            Not Before: Jul 28 17:01:01 2026 GMT
            Not After : Jul 29 17:01:01 2026 GMT
        Subject: CN=dc7900ee4e90bf7f317effd0aedab3c48a575249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:cd:aa:e5:87:7e:fe:3d:36:37:15:be:94:57:
                    6a:5b:d9:df:8f:df:16:61:a7:bd:e3:5e:f5:e7:08:
                    6a:1e:62:96:cc:28:d2:fa:9b:6b:78:18:0b:49:25:
                    38:f9:2f:78:7a:32:ac:ce:3f:f0:62:c6:37:92:4f:
                    90:f7:56:de:e7:a0:d2:9d:75:27:ee:60:6a:2f:21:
                    0b:db:f1:30:83:4a:51:cf:ae:ce:6b:5f:04:09:85:
                    07:d1:55:33:31:0c:94:1c:a4:16:f1:90:37:a2:3d:
                    ac:28:2d:06:84:88:6c:c8:62:e9:d1:11:e4:02:b0:
                    f1:5e:49:72:8c:02:53:0c:1b:70:24:b8:09:ff:21:
                    57:ca:3a:b0:50:e0:24:be:fa:55:fa:f8:7b:af:0c:
                    a3:8e:e7:b3:03:3d:4c:03:33:26:eb:9f:b5:3e:7a:
                    36:66:f8:08:e9:d3:3c:54:ad:cd:c0:c2:b8:92:34:
                    80:64:d4:54:16:36:ce:6c:ac:43:a8:ac:a2:22:0e:
                    4a:b3:c6:0a:d3:54:a9:94:27:0d:2d:5a:ed:f6:4a:
                    b3:42:4f:2b:41:1d:91:9a:be:50:46:92:ba:fd:ca:
                    cc:4e:cd:46:be:c4:a7:bd:68:e6:3a:50:41:e1:01:
                    8d:8e:3b:0a:d8:cb:70:f4:84:59:5d:e6:05:78:3e:
                    bc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:79:00:EE:4E:90:BF:7F:31:7E:FF:D0:AE:DA:B3:C4:8A:57:52:49
            X509v3 Authority Key Identifier:
                keyid:ED:82:F3:23:35:93:82:D8:01:ED:0B:93:EC:1B:FA:03:0D:E6:36:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:b8:7a:98:20:8a:dc:ac:f3:9f:ca:58:7e:76:90:a3:cf:90:
         3e:6b:0e:d1:65:5a:6a:d0:27:da:bf:85:d3:4f:29:f6:3d:92:
         36:f4:42:7e:08:cd:ee:ad:75:73:62:83:24:39:fc:cf:b2:c6:
         3c:41:af:59:e3:11:80:9a:40:6c:17:cf:f3:9f:38:9e:b5:84:
         cb:da:2e:09:65:c8:26:5f:0f:43:e0:c5:63:90:fb:d7:41:10:
         27:4e:99:3a:21:da:b4:24:18:4a:f9:ee:96:ec:3b:b7:34:27:
         df:92:fb:d3:80:79:37:44:c1:b9:81:fa:6d:8b:17:33:48:a3:
         b4:9f:b8:bc:a7:f5:91:79:f5:fa:96:36:17:9f:f2:14:4f:5e:
         aa:b3:7a:49:e4:3d:70:00:76:5f:45:0d:fa:c3:27:a4:3e:f0:
         fc:34:c3:bb:a6:1e:d2:4f:ab:42:60:fc:ee:95:d6:33:76:b0:
         49:5b:ac:1f:38:78:1e:b8:21:9b:38:b3:78:e6:24:80:fa:27:
         96:6b:0a:d9:c3:67:c6:be:55:06:1b:cb:5a:71:a2:2f:ba:f2:
         08:00:4b:42:5c:ef:a4:9c:90:e6:bb:b4:e8:fb:bb:03:72:dc:
         5a:0f:1b:1d:ab:ba:e7:b9:b3:93:6f:c7:73:dd:88:52:4c:18:
         9f:81:ac:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:26:29 2026 by rpki-client