Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.mft
File:                     0l7-VEtjV8f7woGy5BscsudD6Jw.mft (raw, json)
Hash identifier:          s3+keigkj9fNCZXrctyyCyzamlQgqkChw09K5tWShn8=
Subject key identifier:   4D:11:99:4E:01:E6:FD:97:1A:C5:83:0E:3E:07:01:0F:F1:58:5E:3F
Authority key identifier: D2:5E:FE:54:4B:63:57:C7:FB:C2:81:B2:E4:1B:1C:B2:E7:43:E8:9C
Certificate issuer:       /CN=d25efe544b6357c7fbc281b2e41b1cb2e743e89c
Certificate serial:       019F8F101BA98058885914C0D95A7BF5682E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0l7-VEtjV8f7woGy5BscsudD6Jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.mft
Manifest number:          021F
Signing time:             Thu 23 Jul 2026 13:00:25 +0000
Manifest this update:     Thu 23 Jul 2026 13:00:25 +0000
Manifest next update:     Fri 24 Jul 2026 13:00:25 +0000
Files and hashes:         1: 0l7-VEtjV8f7woGy5BscsudD6Jw.crl (hash: 6mPye3dee37anaiih6B289ho709xOFdGz0cw7AnxFIU=)
                          2: HYHPGDt2fjAgC47_M3DioNC03-E.roa (hash: cxx+e28mtQ/DOkAQ7RXQpszf/7Q5+36ijtIPOYGFO4M=)
                          3: LwR4VXrBpkRMHSbEFyenX6LXrCE.asa (hash: jVrxmc6svS9BB1rMG7dzIKPVWauhr47/OGDAYdAMkRY=)
                          4: QTLtDqEEsM_tlA6w6CJrYZAb75c.roa (hash: f/By1t4BWg4HCaNfNQT18viP9uwH0OR37HcliKJPeuM=)
                          5: b2VOFAnqw5bF8fvnjITcw0QPySc.roa (hash: p6e5jWlWStkGfYACB8q5Ip0Xm5alg3UPW1AjXMay8TY=)
                          6: h-9H8BvmwSMG-2kh1YXJYtXWY6Y.asa (hash: sCIUmJSoLok4G31DTxZhSpfZ1i35wAj3Z+H4d8mT8To=)
                          7: xYx_vOW7vkTjvjtpiy67I2LnOhE.roa (hash: N7u6humGzKYT/H6+9vAbd+SuhUaYJnp74HRkR2a2nH4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0l7-VEtjV8f7woGy5BscsudD6Jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:10:1b:a9:80:58:88:59:14:c0:d9:5a:7b:f5:68:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d25efe544b6357c7fbc281b2e41b1cb2e743e89c
        Validity
            Not Before: Jul 23 13:00:25 2026 GMT
            Not After : Jul 24 13:00:25 2026 GMT
        Subject: CN=4d11994e01e6fd971ac5830e3e07010ff1585e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:73:3a:d3:f6:e3:3b:b8:9a:99:9f:12:a7:98:
                    63:22:2b:c5:36:8f:28:88:3e:80:5e:7c:07:c3:81:
                    2a:85:57:71:b6:6d:41:a5:d7:a0:b3:4d:6b:05:85:
                    ef:22:c7:d1:87:39:7a:11:b5:45:f3:87:21:78:e8:
                    5a:18:69:1a:79:d2:d4:d8:55:ff:c3:da:9e:4c:12:
                    f3:5e:e7:62:ab:cb:c7:d8:65:48:3f:06:5a:01:17:
                    28:20:88:8b:27:c7:1c:0a:83:a5:b8:8e:59:1b:09:
                    a3:c9:c6:4b:18:33:d6:c5:68:db:b4:87:a2:84:c2:
                    b6:f1:75:ad:ff:8d:63:84:a1:35:75:46:25:00:50:
                    9c:66:72:85:12:9d:7f:13:98:ca:99:4b:70:65:21:
                    df:00:5f:bb:c7:95:04:a2:93:52:ad:f2:16:b5:a9:
                    2a:b4:5b:be:9e:ed:74:9d:8d:dc:78:7f:2a:a9:5e:
                    79:30:9f:86:45:a7:b4:c8:bf:c0:09:ad:46:de:70:
                    6d:ea:2a:d4:7e:35:aa:d2:23:ba:f7:99:f6:59:f9:
                    e0:f1:a1:5b:39:02:5a:17:e9:81:bd:b5:0b:b6:d8:
                    62:4a:2c:ff:c5:a0:2d:32:6e:9b:b2:4c:3b:5b:4f:
                    a6:30:9f:65:98:22:9a:60:b3:a5:01:99:df:21:e3:
                    73:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:11:99:4E:01:E6:FD:97:1A:C5:83:0E:3E:07:01:0F:F1:58:5E:3F
            X509v3 Authority Key Identifier:
                keyid:D2:5E:FE:54:4B:63:57:C7:FB:C2:81:B2:E4:1B:1C:B2:E7:43:E8:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0l7-VEtjV8f7woGy5BscsudD6Jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:f3:49:3d:7f:a0:af:89:3c:7b:c4:75:76:0d:b2:15:1d:6f:
         70:91:d4:14:1f:ee:7e:c9:22:8d:cd:bf:72:85:f0:c5:f8:d3:
         77:7e:60:17:1d:29:48:5a:69:fd:02:a5:64:7f:53:47:99:74:
         be:a7:c9:f3:3c:53:ae:b6:b9:4c:58:51:ae:a7:49:9d:bc:3d:
         bf:e6:95:60:8f:43:93:68:92:a2:3e:db:cc:cd:51:14:fc:89:
         53:8a:3c:28:6b:73:43:91:3a:ee:7c:c9:26:7a:8c:b2:56:b0:
         a1:68:5a:84:2b:3f:56:68:bd:2b:4e:d5:98:ac:b2:ec:17:d2:
         da:1c:48:da:8f:af:8a:72:6b:c7:be:c9:c6:dc:77:b1:64:01:
         fd:51:c8:0e:22:6c:df:2c:01:30:19:0d:90:9e:60:02:29:97:
         52:d3:b6:0f:ff:cc:e6:21:8e:7b:2b:c6:f0:f1:cf:29:40:c9:
         60:b6:3b:53:af:bf:6a:43:93:7b:ee:2b:99:47:de:55:b5:4c:
         6e:b9:44:9f:62:75:5f:d0:68:72:7d:88:39:3a:4b:54:f5:4f:
         0b:77:25:12:9c:7b:b2:3a:f6:e4:a0:2c:ba:7c:7d:69:45:58:
         b2:77:7c:5c:e0:ef:07:83:69:68:d1:fc:6b:af:cb:04:e7:c4:
         3b:ee:59:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PEBupgFiIWRTA2Vp79WguMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNWVmZTU0NGI2MzU3YzdmYmMyODFiMmU0MWIxY2IyZTc0
M2U4OWMwHhcNMjYwNzIzMTMwMDI1WhcNMjYwNzI0MTMwMDI1WjAzMTEwLwYDVQQD
Eyg0ZDExOTk0ZTAxZTZmZDk3MWFjNTgzMGUzZTA3MDEwZmYxNTg1ZTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXM60/bjO7iamZ8Sp5hjIivFNo8o
iD6AXnwHw4EqhVdxtm1Bpdegs01rBYXvIsfRhzl6EbVF84cheOhaGGkaedLU2FX/
w9qeTBLzXudiq8vH2GVIPwZaARcoIIiLJ8ccCoOluI5ZGwmjycZLGDPWxWjbtIei
hMK28XWt/41jhKE1dUYlAFCcZnKFEp1/E5jKmUtwZSHfAF+7x5UEopNSrfIWtakq
tFu+nu10nY3ceH8qqV55MJ+GRae0yL/ACa1G3nBt6irUfjWq0iO695n2Wfng8aFb
OQJaF+mBvbULtthiSiz/xaAtMm6bskw7W0+mMJ9lmCKaYLOlAZnfIeNzAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0RmU4B5v2XGsWDDj4HAQ/xWF4/MB8GA1UdIwQY
MBaAFNJe/lRLY1fH+8KBsuQbHLLnQ+icMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGw3LVZFdGpWOGY3d29HeTVCc2NzdWRENkp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83ZDhiNDEtYmM2Ni00YTVmLTgyZTYt
YTgyY2JiYzczNjc1LzEvMGw3LVZFdGpWOGY3d29HeTVCc2NzdWRENkp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83ZDhiNDEtYmM2Ni00YTVmLTgyZTYtYTgyY2JiYzczNjc1
LzEvMGw3LVZFdGpWOGY3d29HeTVCc2NzdWRENkp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO/NJPX+g
r4k8e8R1dg2yFR1vcJHUFB/ufskijc2/coXwxfjTd35gFx0pSFpp/QKlZH9TR5l0
vqfJ8zxTrra5TFhRrqdJnbw9v+aVYI9Dk2iSoj7bzM1RFPyJU4o8KGtzQ5E67nzJ
JnqMslawoWhahCs/Vmi9K07VmKyy7BfS2hxI2o+vinJrx77Jxtx3sWQB/VHIDiJs
3ywBMBkNkJ5gAimXUtO2D//M5iGOeyvG8PHPKUDJYLY7U6+/akOTe+4rmUfeVbVM
brlEn2J1X9Bocn2IOTpLVPVPC3clEpx7sjr25KAsunx9aUVYsnd8XODvB4NpaNH8
a6/LBOfEO+5Z5w==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:27 2026 by rpki-client