Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/adf540-5379-470e-bfb4-a7bbecd5a394/1/R2IQZq9PT1jGPuQ_75tS9cj8Qqk.mft
File:                     R2IQZq9PT1jGPuQ_75tS9cj8Qqk.mft (raw, json)
Hash identifier:          MwepnPqnxuWtn256tl3KkB4tSNHqafduvx3Ccg4ecMI=
Subject key identifier:   7A:4D:11:7B:86:F2:CD:9F:B8:6D:EF:70:C3:D6:38:07:B3:D3:D6:E2
Authority key identifier: 47:62:10:66:AF:4F:4F:58:C6:3E:E4:3F:EF:9B:52:F5:C8:FC:42:A9
Certificate issuer:       /CN=47621066af4f4f58c63ee43fef9b52f5c8fc42a9
Certificate serial:       019F924828A9A4BBCE852D4127FB2A5F6AD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R2IQZq9PT1jGPuQ_75tS9cj8Qqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/adf540-5379-470e-bfb4-a7bbecd5a394/1/R2IQZq9PT1jGPuQ_75tS9cj8Qqk.mft
Manifest number:          F7
Signing time:             Fri 24 Jul 2026 04:00:29 +0000
Manifest this update:     Fri 24 Jul 2026 04:00:29 +0000
Manifest next update:     Sat 25 Jul 2026 04:00:29 +0000
Files and hashes:         1: R2IQZq9PT1jGPuQ_75tS9cj8Qqk.crl (hash: X9qRHNZf2GNjQYzL+X4I9AhErGMzz9Pl1/Y5znhUxsQ=)
                          2: Z39nPiyL47Feha5WgnFZCSCcy3g.roa (hash: 9mJiZv7ItrIrPIwP8G0w4T0RBvTILri5Zzv8pQIllIY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/adf540-5379-470e-bfb4-a7bbecd5a394/1/R2IQZq9PT1jGPuQ_75tS9cj8Qqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/adf540-5379-470e-bfb4-a7bbecd5a394/1/R2IQZq9PT1jGPuQ_75tS9cj8Qqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R2IQZq9PT1jGPuQ_75tS9cj8Qqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:28:a9:a4:bb:ce:85:2d:41:27:fb:2a:5f:6a:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47621066af4f4f58c63ee43fef9b52f5c8fc42a9
        Validity
            Not Before: Jul 24 04:00:29 2026 GMT
            Not After : Jul 25 04:00:29 2026 GMT
        Subject: CN=7a4d117b86f2cd9fb86def70c3d63807b3d3d6e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f6:3c:19:22:0a:a2:ac:99:02:e5:b2:8a:59:
                    9e:1d:54:c4:dc:a4:4f:85:ae:3e:ce:ab:2a:89:31:
                    b5:37:cb:c8:6b:bf:fa:3e:40:e6:71:96:fa:f5:fb:
                    43:ba:e3:5b:fc:67:b8:4d:31:ef:51:ce:fd:1b:cf:
                    ef:d8:32:8e:ba:43:58:80:e1:34:ec:7a:b6:bd:a5:
                    cd:13:e4:e0:bc:7b:87:ed:a1:6a:02:8b:e7:d1:d6:
                    3d:a3:37:29:7d:fd:64:78:87:e2:84:c5:47:b0:8e:
                    24:be:f6:e9:5e:4a:d6:01:2f:71:ff:54:df:52:19:
                    65:f7:50:f7:50:40:9d:53:fd:21:47:42:90:23:0a:
                    87:4e:c1:54:dd:5b:1c:c3:fc:cc:d5:dd:bf:08:fa:
                    16:ad:7c:78:68:fd:0c:44:34:8c:a8:83:13:30:04:
                    22:7a:14:bf:1f:3f:76:fa:ed:1e:98:a9:75:2b:e8:
                    ca:38:60:98:13:1e:1f:df:c6:36:bb:48:75:c1:63:
                    56:a7:fa:ba:13:95:b6:41:32:d6:dc:ff:a8:0a:0d:
                    ff:5f:dd:80:18:2a:d2:2f:c4:ce:94:9a:74:9c:20:
                    b5:ef:3c:d9:95:f0:6d:10:59:b8:dd:1c:ab:43:ff:
                    76:02:d9:e7:05:ff:d0:ef:ac:78:ab:e2:de:58:b4:
                    97:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:4D:11:7B:86:F2:CD:9F:B8:6D:EF:70:C3:D6:38:07:B3:D3:D6:E2
            X509v3 Authority Key Identifier:
                keyid:47:62:10:66:AF:4F:4F:58:C6:3E:E4:3F:EF:9B:52:F5:C8:FC:42:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2IQZq9PT1jGPuQ_75tS9cj8Qqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/adf540-5379-470e-bfb4-a7bbecd5a394/1/R2IQZq9PT1jGPuQ_75tS9cj8Qqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/adf540-5379-470e-bfb4-a7bbecd5a394/1/R2IQZq9PT1jGPuQ_75tS9cj8Qqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:2b:cb:b7:a8:90:9c:6e:12:e3:c8:06:b2:27:89:f3:4b:b4:
         17:6a:8a:a6:06:c0:56:a6:13:63:03:ed:9a:42:d7:0b:3d:55:
         7f:ae:f0:c8:cf:e9:ad:28:b6:e0:8d:ff:d5:d4:30:08:8f:78:
         da:17:9c:94:9d:41:af:0c:6f:74:d1:e7:c6:63:9e:56:37:9d:
         89:f2:bc:8d:f5:0b:a4:aa:34:59:2e:30:09:23:05:c4:e9:00:
         9c:48:2d:b6:ae:f4:6c:08:e4:a9:65:57:27:43:4f:a2:ef:82:
         91:f3:85:7a:43:af:e8:00:28:14:bc:aa:09:df:50:b2:fa:8e:
         d4:0e:3d:63:81:77:bc:2d:e5:b8:fc:7e:c9:e7:e4:db:2a:fd:
         fe:a1:82:b7:9d:a2:64:67:40:03:eb:02:27:16:df:d1:43:d2:
         fd:92:20:25:b2:4e:bb:a1:a6:28:4b:0f:4e:ba:3d:10:8c:ba:
         96:90:bf:6f:36:ee:ba:fd:72:8a:23:1e:b9:a7:53:a8:03:1b:
         5d:09:cd:4a:30:de:a9:99:c6:09:1e:40:77:16:38:b2:14:93:
         79:46:ae:cd:e0:66:04:cd:d5:63:6c:5b:78:cc:b5:db:45:33:
         cc:5f:83:b3:22:51:87:04:13:af:58:27:70:e2:94:a3:49:68:
         cc:ec:09:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSCippLvOhS1BJ/sqX2rVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NjIxMDY2YWY0ZjRmNThjNjNlZTQzZmVmOWI1MmY1Yzhm
YzQyYTkwHhcNMjYwNzI0MDQwMDI5WhcNMjYwNzI1MDQwMDI5WjAzMTEwLwYDVQQD
Eyg3YTRkMTE3Yjg2ZjJjZDlmYjg2ZGVmNzBjM2Q2MzgwN2IzZDNkNmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvY8GSIKoqyZAuWyilmeHVTE3KRP
ha4+zqsqiTG1N8vIa7/6PkDmcZb69ftDuuNb/Ge4TTHvUc79G8/v2DKOukNYgOE0
7Hq2vaXNE+TgvHuH7aFqAovn0dY9ozcpff1keIfihMVHsI4kvvbpXkrWAS9x/1Tf
Uhll91D3UECdU/0hR0KQIwqHTsFU3Vscw/zM1d2/CPoWrXx4aP0MRDSMqIMTMAQi
ehS/Hz92+u0emKl1K+jKOGCYEx4f38Y2u0h1wWNWp/q6E5W2QTLW3P+oCg3/X92A
GCrSL8TOlJp0nCC17zzZlfBtEFm43RyrQ/92AtnnBf/Q76x4q+LeWLSX1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHpNEXuG8s2fuG3vcMPWOAez09biMB8GA1UdIwQY
MBaAFEdiEGavT09Yxj7kP++bUvXI/EKpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjJJUVpxOVBUMWpHUHVRXzc1dFM5Y2o4UXFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hZGY1NDAtNTM3OS00NzBlLWJmYjQt
YTdiYmVjZDVhMzk0LzEvUjJJUVpxOVBUMWpHUHVRXzc1dFM5Y2o4UXFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9hZGY1NDAtNTM3OS00NzBlLWJmYjQtYTdiYmVjZDVhMzk0
LzEvUjJJUVpxOVBUMWpHUHVRXzc1dFM5Y2o4UXFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKyvLt6iQ
nG4S48gGsieJ80u0F2qKpgbAVqYTYwPtmkLXCz1Vf67wyM/prSi24I3/1dQwCI94
2heclJ1BrwxvdNHnxmOeVjedifK8jfULpKo0WS4wCSMFxOkAnEgttq70bAjkqWVX
J0NPou+CkfOFekOv6AAoFLyqCd9QsvqO1A49Y4F3vC3luPx+yefk2yr9/qGCt52i
ZGdAA+sCJxbf0UPS/ZIgJbJOu6GmKEsPTro9EIy6lpC/bzbuuv1yiiMeuadTqAMb
XQnNSjDeqZnGCR5AdxY4shSTeUauzeBmBM3VY2xbeMy120UzzF+DsyJRhwQTr1gn
cOKUo0lozOwJaw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:56:22 2026 by rpki-client