Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
File:                     cQ7F-mjPme49u9GUnoIERQOh33I.mft (raw, json)
Hash identifier:          56gOQpTaww3z3X68w+bs6K6lgsPdGcI5VE1a7Wpx8Gw=
Subject key identifier:   88:0C:3F:CE:06:DE:5B:ED:5C:DF:85:80:76:F2:40:C0:6B:17:42:31
Authority key identifier: 71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
Certificate issuer:       /CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Certificate serial:       019F95EDE097809931F41F7B16508EC27CA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
Manifest number:          0937
Signing time:             Fri 24 Jul 2026 21:00:22 +0000
Manifest this update:     Fri 24 Jul 2026 21:00:22 +0000
Manifest next update:     Sat 25 Jul 2026 21:00:22 +0000
Files and hashes:         1: cQ7F-mjPme49u9GUnoIERQOh33I.crl (hash: T4UDm8lUKZqsnZ4ojVQ+5Hfbi5Z5YXAPWmdjvJARYfM=)
                          2: xth3SgaYG73nXmBzt5a_zS7YmPE.roa (hash: UPhg5p0PVUeMrIrZDkSLdMR4fuwy++NIiwWlcyibl/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:ed:e0:97:80:99:31:f4:1f:7b:16:50:8e:c2:7c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
        Validity
            Not Before: Jul 24 21:00:22 2026 GMT
            Not After : Jul 25 21:00:22 2026 GMT
        Subject: CN=880c3fce06de5bed5cdf858076f240c06b174231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:69:9f:50:09:7a:f8:c0:69:82:77:1e:d9:11:
                    6f:8f:19:4d:bc:0e:57:4a:fa:2b:f6:88:7a:24:7a:
                    ae:34:6c:ef:5f:25:63:b1:fd:44:23:1f:b2:73:fc:
                    da:ee:75:56:8d:aa:39:95:7c:8c:49:e9:33:9c:59:
                    88:02:e1:a0:fc:e5:b2:ee:ee:b1:2a:30:1b:bb:d3:
                    51:1e:82:ed:3a:dd:a8:d8:10:ea:71:35:96:37:45:
                    88:90:16:70:88:87:6d:41:99:7d:92:ea:4e:47:5c:
                    ca:db:ce:c4:4d:0e:50:72:af:81:59:17:0c:16:a5:
                    b0:e9:54:a8:df:5d:5d:64:c6:63:89:8e:16:0e:fd:
                    6a:45:a9:d2:26:ee:ea:99:36:3a:8c:b6:c7:f2:cf:
                    8b:93:23:97:6c:61:af:3a:a6:eb:58:a4:90:c7:4e:
                    16:ba:9c:cc:b3:85:14:46:25:29:d6:82:c8:af:4d:
                    96:10:4f:5f:3d:9c:7b:82:4b:88:25:a6:4d:b6:54:
                    7b:df:e6:82:44:f6:37:e8:49:16:64:d3:f4:0b:6f:
                    b0:9d:4d:04:89:7d:e6:e8:90:88:f9:60:b9:f7:99:
                    e2:f2:2e:7c:3c:21:76:39:e6:7f:01:7f:ab:c3:80:
                    b2:51:2a:01:44:ec:f4:08:a0:c5:6f:45:2c:fb:0e:
                    93:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:0C:3F:CE:06:DE:5B:ED:5C:DF:85:80:76:F2:40:C0:6B:17:42:31
            X509v3 Authority Key Identifier:
                keyid:71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:c0:a8:85:f0:71:bc:c9:d1:4e:f7:a7:18:de:94:a3:7f:56:
         0a:d6:4c:1e:8d:11:f4:c1:2e:d3:e8:9a:de:32:54:3f:32:d4:
         67:51:c2:7c:2f:e8:a6:b3:dc:19:dd:69:9d:cd:29:e7:8f:aa:
         6a:48:de:ba:3b:08:5a:b1:42:69:04:5f:b2:de:e1:35:2a:b9:
         f9:ec:39:23:0c:81:9e:a5:49:26:3d:72:16:5d:e0:dd:27:a4:
         d0:14:b2:d5:d1:b6:ac:8d:3e:c8:83:2a:fd:d6:85:c7:d6:2d:
         27:91:94:35:fc:21:3e:fc:70:b7:9c:6b:ea:fe:9c:58:d2:98:
         3e:fd:d6:dd:80:c0:5a:2e:c5:c9:e0:94:8e:df:b6:32:00:8d:
         5e:69:4a:0e:b1:c4:f1:c9:4a:ec:b2:d1:ea:34:19:11:e1:1c:
         5e:da:f0:45:7a:97:71:0c:d8:17:9c:f8:ae:41:2c:58:a4:55:
         37:7c:2b:f4:fb:6f:61:4a:66:46:b2:75:d8:e1:25:52:12:db:
         56:78:5d:d5:e6:2f:d5:46:59:ac:fc:98:bc:f1:33:db:3a:91:
         4d:41:28:69:8f:d1:eb:94:5c:67:5b:33:d8:dd:2b:37:b6:0f:
         98:f5:33:7a:b5:ad:c0:7f:f9:15:15:bb:6b:b9:e2:78:a0:12:
         54:1f:ab:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:13:07 2026 by rpki-client