Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/7B-pzoPKFB0pqr7sAMX598upk8Y.mft
File:                     7B-pzoPKFB0pqr7sAMX598upk8Y.mft (raw, json)
Hash identifier:          sTXIwzkv0Oyp0/r1zc4HAF68lV0py9ndqSczS2aHmDs=
Subject key identifier:   6C:28:1A:45:F5:E7:42:5B:12:28:27:8E:01:6C:5E:A1:27:5D:8A:5E
Authority key identifier: EC:1F:A9:CE:83:CA:14:1D:29:AA:BE:EC:00:C5:F9:F7:CB:A9:93:C6
Certificate issuer:       /CN=ec1fa9ce83ca141d29aabeec00c5f9f7cba993c6
Certificate serial:       019F91DA44EF8BE9803B1ED3B87A14F53287
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7B-pzoPKFB0pqr7sAMX598upk8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/7B-pzoPKFB0pqr7sAMX598upk8Y.mft
Manifest number:          C9
Signing time:             Fri 24 Jul 2026 02:00:28 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:28 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:28 +0000
Files and hashes:         1: 7B-pzoPKFB0pqr7sAMX598upk8Y.crl (hash: cAATNSx2816yMKuGjQvNxJbF/OPDrF4yncSPCArKjEk=)
                          2: lty9FU9-lvCivlXe3WOpvJPkZAU.roa (hash: w7emHClyLxjQcPa4VKPJS2kQf8ZhF6GvGuiuy4vd4PI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/7B-pzoPKFB0pqr7sAMX598upk8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/7B-pzoPKFB0pqr7sAMX598upk8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7B-pzoPKFB0pqr7sAMX598upk8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:44:ef:8b:e9:80:3b:1e:d3:b8:7a:14:f5:32:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec1fa9ce83ca141d29aabeec00c5f9f7cba993c6
        Validity
            Not Before: Jul 24 02:00:28 2026 GMT
            Not After : Jul 25 02:00:28 2026 GMT
        Subject: CN=6c281a45f5e7425b1228278e016c5ea1275d8a5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c7:29:b9:79:f7:54:ed:f0:81:16:55:00:c8:
                    cc:06:ce:f1:b7:19:83:94:c5:32:b3:28:c0:cd:6f:
                    d7:39:79:a0:45:a2:4e:ba:e9:fb:61:27:47:61:f3:
                    22:89:67:ce:bd:80:a7:d0:b9:cb:c1:8a:d9:35:38:
                    66:c0:a1:f8:4d:9e:93:f4:8d:21:61:36:bb:71:28:
                    b3:51:e7:08:18:8a:7f:82:2a:e5:3e:88:04:40:13:
                    f1:41:48:a7:32:01:b6:f9:00:22:be:d2:e8:8a:e1:
                    da:0d:9d:73:a9:de:b9:10:44:6b:0c:37:08:70:f9:
                    a0:9c:80:30:b3:57:94:7f:d7:44:02:bf:62:92:fb:
                    78:77:b9:7a:87:64:98:a4:f8:58:e3:13:b6:bc:fd:
                    7e:aa:34:69:b5:aa:ee:36:e4:56:d2:1f:b6:c9:89:
                    b6:4a:bc:7f:68:89:4e:25:a0:76:9c:69:1e:d0:55:
                    fb:4c:37:18:4d:b8:16:f7:4c:94:a4:68:8f:68:96:
                    df:21:18:2a:b0:df:0d:21:5f:21:bd:0a:e7:c0:f4:
                    c9:7f:ac:16:18:ad:b5:eb:99:de:f0:37:96:3a:48:
                    c9:6d:9a:87:6c:e3:44:be:2b:2d:a0:db:7d:13:d2:
                    a1:74:ec:0e:c4:18:c1:92:f0:9f:19:4d:e3:6d:f7:
                    1f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:28:1A:45:F5:E7:42:5B:12:28:27:8E:01:6C:5E:A1:27:5D:8A:5E
            X509v3 Authority Key Identifier:
                keyid:EC:1F:A9:CE:83:CA:14:1D:29:AA:BE:EC:00:C5:F9:F7:CB:A9:93:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7B-pzoPKFB0pqr7sAMX598upk8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/7B-pzoPKFB0pqr7sAMX598upk8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/7B-pzoPKFB0pqr7sAMX598upk8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:b1:8a:b6:e5:38:ae:0b:09:7d:99:4d:52:94:b1:4b:61:8b:
         34:01:29:7d:06:07:a9:11:ce:0b:7d:36:26:ab:fc:02:a1:34:
         bc:77:97:7d:9d:45:56:7d:42:98:cf:76:22:c0:fc:27:29:84:
         dd:da:19:cc:35:f8:2a:f6:d2:c9:50:31:3b:9c:53:ef:d1:fe:
         da:42:9f:cb:8c:76:1f:eb:4f:77:7b:8b:e8:08:8d:eb:81:0f:
         1c:80:63:f0:7c:1e:b6:08:ef:b3:e8:0a:c9:8c:d8:30:d9:d3:
         ce:fd:9e:2c:cc:c2:e9:3a:95:2f:71:bf:d2:46:a5:08:dc:d6:
         93:a8:99:3a:0a:da:71:5c:c3:41:46:e1:7b:45:72:ea:63:97:
         ba:50:7e:23:7b:4c:d8:9d:c7:70:d9:ea:46:35:55:9c:a5:9a:
         c6:58:d7:a0:09:87:58:8d:89:d1:59:7d:39:41:96:32:30:ba:
         9d:b0:bc:a9:f9:93:c1:2f:20:1b:13:7f:2d:d2:fb:e9:95:dc:
         bc:36:53:5d:58:dd:dc:ef:3b:76:03:3f:df:f4:a6:23:b9:a5:
         30:8e:4b:0f:8c:34:31:65:81:ec:82:f5:9b:0c:dd:67:48:77:
         39:8c:a4:44:bf:ef:3c:28:13:1c:d0:46:8e:61:8c:1a:5f:be:
         be:1b:ec:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:37:42 2026 by rpki-client