Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft
File:                     7WUYxCbPxAgvuS7HQNfDx4glVjs.mft (raw, json)
Hash identifier:          Bzox820N99QS5LzeA1IpDXpURtiAelEa01o3lelyeXw=
Subject key identifier:   B9:9A:56:E4:06:71:D9:F2:6E:69:20:70:A5:DC:27:A5:E3:BB:F9:61
Authority key identifier: ED:65:18:C4:26:CF:C4:08:2F:B9:2E:C7:40:D7:C3:C7:88:25:56:3B
Certificate issuer:       /CN=ed6518c426cfc4082fb92ec740d7c3c78825563b
Certificate serial:       019EC0A47B2D1BFE62C946FE2F0B4BB14409
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7WUYxCbPxAgvuS7HQNfDx4glVjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft
Manifest number:          0DAE
Signing time:             Sat 13 Jun 2026 11:01:05 +0000
Manifest this update:     Sat 13 Jun 2026 11:01:05 +0000
Manifest next update:     Sun 14 Jun 2026 11:01:05 +0000
Files and hashes:         1: 7WUYxCbPxAgvuS7HQNfDx4glVjs.crl (hash: ERjlsqCXBWzYDLo928KOD0g7g6O3imQrIQjaHQLQirw=)
                          2: Q9-NRTuMMnqARHq49_Cuxnzrpl4.roa (hash: NRZTfCUYWGj35ekHkCYEsq0YVn/edvt5CYrvQlwekLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7WUYxCbPxAgvuS7HQNfDx4glVjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:7b:2d:1b:fe:62:c9:46:fe:2f:0b:4b:b1:44:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6518c426cfc4082fb92ec740d7c3c78825563b
        Validity
            Not Before: Jun 13 11:01:05 2026 GMT
            Not After : Jun 14 11:01:05 2026 GMT
        Subject: CN=b99a56e40671d9f26e692070a5dc27a5e3bbf961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:62:a5:94:28:e9:85:c2:da:a2:45:2e:1b:b0:
                    c6:74:86:69:55:aa:95:00:49:eb:ed:c5:2c:98:86:
                    c1:6d:94:0a:0a:f2:b5:bd:9d:9d:04:0e:9b:83:e8:
                    5d:16:6e:37:44:4a:57:ab:47:26:46:e2:ad:65:73:
                    11:d5:97:a2:31:c3:31:0c:77:44:b5:e2:db:3b:1b:
                    26:5c:ea:27:a7:b4:c7:29:74:b5:2e:a7:19:b0:15:
                    ac:07:d7:f6:c0:66:70:15:30:07:ae:bb:48:b7:67:
                    df:8e:47:8b:45:6c:9b:93:91:64:ea:25:2e:38:bd:
                    6b:55:b9:a4:35:44:4d:42:32:0d:e7:be:4f:70:bd:
                    66:dc:02:96:3d:17:f9:ba:c2:35:31:5e:e1:98:f4:
                    bf:83:a5:89:24:87:fa:01:b2:1d:75:f4:9f:9f:b2:
                    41:d7:3d:ac:86:9e:93:f3:2d:6d:81:d7:49:a0:f7:
                    33:96:eb:78:da:70:82:e0:6c:94:d3:7e:28:fb:a0:
                    52:05:b1:32:3d:96:56:6c:6b:6a:53:88:2f:ac:5a:
                    85:ec:a8:30:69:5b:88:18:0b:41:8b:59:83:fa:b6:
                    d5:e0:a3:e4:ef:69:2b:9d:90:ad:9e:01:55:81:e9:
                    8e:8c:5e:21:84:72:c2:66:56:ed:b5:13:f1:9e:1c:
                    53:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9A:56:E4:06:71:D9:F2:6E:69:20:70:A5:DC:27:A5:E3:BB:F9:61
            X509v3 Authority Key Identifier:
                keyid:ED:65:18:C4:26:CF:C4:08:2F:B9:2E:C7:40:D7:C3:C7:88:25:56:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WUYxCbPxAgvuS7HQNfDx4glVjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:d8:4c:26:4c:07:04:45:6d:a6:2e:5e:8b:34:bd:71:0a:ea:
         86:14:05:15:dc:ca:e2:c6:a0:6f:d7:01:a7:c3:ae:b0:3f:8a:
         73:91:17:88:2f:ae:62:80:84:3a:1c:85:d4:66:52:89:f7:fd:
         88:9c:53:b1:73:e9:7a:58:3a:84:53:df:be:98:bb:1a:72:50:
         96:ad:23:63:fb:a6:14:bb:06:b3:a0:76:62:cc:43:97:4f:e1:
         1e:2d:38:2a:8f:e4:dd:c6:1c:25:ad:fa:bf:2c:ec:0c:16:b0:
         08:a6:62:16:a8:7a:4c:5f:1a:37:42:75:54:98:58:31:ca:dd:
         84:58:11:1a:91:ae:26:9d:59:9b:73:0a:19:ec:47:f9:d5:b2:
         c0:0d:cf:dc:b2:d9:ff:a3:b0:67:e3:9c:a8:d3:f7:e2:d1:fd:
         a1:9c:d6:3d:46:00:74:85:79:7a:16:90:fb:e6:a2:73:4f:a8:
         c9:84:7d:8e:bc:b8:30:d3:5e:a5:8a:76:ec:61:ff:17:3f:ee:
         ea:fb:4d:c7:ab:f9:86:c1:80:65:f9:93:e9:4f:46:8c:16:58:
         2f:c9:24:ef:1a:15:bb:00:01:5f:5e:9b:44:b8:ec:e3:0c:73:
         9c:b3:74:60:e2:20:6e:f8:65:5f:0e:20:28:49:05:52:a0:92:
         2d:e9:9e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:18:42 2026 by rpki-client