Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
File:                     7E0DlAhPfkBiYJco9NTVewZFWlY.mft (raw, json)
Hash identifier:          TzoSRurYuxIK4nUrg+JaAkf/WNoWXjTuz/kEAoMMVs8=
Subject key identifier:   25:9F:F1:AE:82:0A:3B:E9:D9:3C:4E:BB:81:AB:2A:7F:5A:83:1C:D4
Authority key identifier: EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56
Certificate issuer:       /CN=ec4d0394084f7e4062609728f4d4d57b06455a56
Certificate serial:       019EC0DAAB896087E7AA134AB167A9EC7416
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 12:00:16 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:16 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:16 +0000
Files and hashes:         1: 7E0DlAhPfkBiYJco9NTVewZFWlY.crl (hash: oOIwVsKZT3zm3Dl6x1q1VXKEQVslHImTuDRP9urDBTY=)
                          2: NE1cSr4PhSWQqxI3RwadUkiTzr4.roa (hash: gTOFfm6+4dqvFvqDPuHaiv7nUh/TeTbmvELpqBUfVtQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:da:ab:89:60:87:e7:aa:13:4a:b1:67:a9:ec:74:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec4d0394084f7e4062609728f4d4d57b06455a56
        Validity
            Not Before: Jun 13 12:00:16 2026 GMT
            Not After : Jun 14 12:00:16 2026 GMT
        Subject: CN=259ff1ae820a3be9d93c4ebb81ab2a7f5a831cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b0:7c:fc:2f:93:2b:dc:39:8c:b2:5d:13:8d:
                    32:f6:15:b8:7f:42:fc:50:9e:3e:ab:4c:82:1a:df:
                    12:fa:cb:66:90:ee:89:b3:a0:e4:5a:b8:11:d9:fa:
                    3d:95:b9:93:88:b9:68:6d:ba:b3:e3:00:85:98:72:
                    98:29:28:8d:3b:33:7c:8f:93:8f:5b:48:39:c5:f6:
                    d4:02:c3:ea:ad:cc:ec:25:6d:87:fb:4b:e9:53:53:
                    06:53:4b:49:1f:6a:c5:bf:83:2b:7b:b8:1e:99:ce:
                    ef:0d:cf:7a:72:fe:bd:8b:9d:40:55:e3:70:af:b4:
                    24:df:2c:cc:6c:de:52:a6:6b:35:9c:1f:75:a1:c9:
                    51:3e:1f:a4:4f:63:17:e4:02:0a:75:95:91:27:d2:
                    85:68:bf:52:fa:20:9b:37:51:91:86:67:f0:f5:d9:
                    9b:c5:5a:dd:73:c1:3b:22:f2:57:a6:6f:e8:1e:07:
                    fd:d2:fd:33:60:d9:65:cb:dc:2e:50:7b:97:37:d2:
                    90:3f:9e:77:46:d4:68:c9:b3:91:41:eb:8f:64:98:
                    58:ad:e5:96:3a:8f:59:40:63:b7:ac:db:4d:39:78:
                    7b:d0:90:c5:a9:b3:6c:5d:37:50:3d:1d:31:c0:8a:
                    21:84:8d:d5:aa:3b:23:ea:50:8c:cb:31:75:08:da:
                    e1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9F:F1:AE:82:0A:3B:E9:D9:3C:4E:BB:81:AB:2A:7F:5A:83:1C:D4
            X509v3 Authority Key Identifier:
                keyid:EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:79:b2:6c:70:1f:22:2d:d6:76:06:c4:f7:96:b9:0c:2e:99:
         ad:f6:9c:27:ca:9c:5f:1f:f1:a9:17:84:6d:92:ea:af:32:bf:
         07:ed:a8:8e:7e:75:2a:e1:f1:33:44:56:db:38:05:cd:b7:bf:
         98:f1:2e:90:ab:0d:c4:bc:b7:49:cd:31:c3:70:cf:12:ff:59:
         7b:b8:ce:ff:41:31:da:a6:0e:87:bf:c9:14:5d:2c:1b:05:77:
         99:c1:18:80:ab:6b:ff:43:1f:ed:4f:53:d2:9f:3a:3b:7f:34:
         6c:f2:04:cc:a1:fa:ac:0b:aa:ab:8f:1f:29:d6:6a:63:b3:de:
         ff:89:b7:48:cb:52:67:eb:8e:a4:8f:75:b4:47:30:00:50:10:
         61:97:8d:9d:70:bf:ae:af:7c:70:70:47:0a:13:3d:42:8f:12:
         52:a2:7d:f3:08:a9:2e:4c:40:9b:66:b3:f7:b9:a4:6f:58:c2:
         ac:98:07:e8:19:8e:e3:31:57:3d:5c:75:55:32:2e:ad:1b:1f:
         76:ce:cd:2d:dd:1b:14:8b:2b:14:cc:a0:cc:8a:a6:6d:3c:77:
         33:6d:d3:83:2d:35:d3:97:42:a6:69:78:fd:b4:cb:6e:f5:8b:
         d1:6c:21:91:42:f0:b8:4b:cf:78:94:ee:5a:ec:89:1c:32:69:
         50:22:3c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:44:31 2026 by rpki-client