Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/eae6b4-5687-4e4a-845e-742f7c8685ed/1/7gItaN8GanYaO-hkGnG7acFeJy0.mft
File:                     7gItaN8GanYaO-hkGnG7acFeJy0.mft (raw, json)
Hash identifier:          QdhJYo3yOe+jx+QCWE5aRPUfKtTLpvNMtBfAmA5+e4Q=
Subject key identifier:   75:25:DE:8B:14:B4:DD:26:AE:B4:6F:62:42:76:2E:32:7D:FD:C5:67
Authority key identifier: EE:02:2D:68:DF:06:6A:76:1A:3B:E8:64:1A:71:BB:69:C1:5E:27:2D
Certificate issuer:       /CN=ee022d68df066a761a3be8641a71bb69c15e272d
Certificate serial:       019F90C7DD65FA2B6237FEDD4E2C925C6FD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7gItaN8GanYaO-hkGnG7acFeJy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/eae6b4-5687-4e4a-845e-742f7c8685ed/1/7gItaN8GanYaO-hkGnG7acFeJy0.mft
Manifest number:          F8
Signing time:             Thu 23 Jul 2026 21:00:45 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:45 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:45 +0000
Files and hashes:         1: 7gItaN8GanYaO-hkGnG7acFeJy0.crl (hash: l/B0LzWmg4nzl8PsjEwR007VAbz5zSEvImQgwB6uRu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/eae6b4-5687-4e4a-845e-742f7c8685ed/1/7gItaN8GanYaO-hkGnG7acFeJy0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/eae6b4-5687-4e4a-845e-742f7c8685ed/1/7gItaN8GanYaO-hkGnG7acFeJy0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7gItaN8GanYaO-hkGnG7acFeJy0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:dd:65:fa:2b:62:37:fe:dd:4e:2c:92:5c:6f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee022d68df066a761a3be8641a71bb69c15e272d
        Validity
            Not Before: Jul 23 21:00:45 2026 GMT
            Not After : Jul 24 21:00:45 2026 GMT
        Subject: CN=7525de8b14b4dd26aeb46f6242762e327dfdc567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:90:48:10:0a:dd:31:0e:97:95:f6:20:9a:1c:
                    63:e6:4e:4c:32:74:83:ad:27:79:4b:bf:27:89:2f:
                    25:4d:9a:39:85:18:aa:f5:37:1e:18:b7:d7:41:e2:
                    ce:b4:44:d9:6e:cc:87:43:34:8c:b4:55:78:6c:62:
                    67:82:11:4a:3f:72:af:ca:21:6a:95:e1:fd:39:81:
                    0b:28:a4:f5:1b:c7:07:c3:bd:68:26:c5:6c:cf:70:
                    47:32:13:90:59:52:81:d9:f8:be:87:f2:c2:b3:3b:
                    72:0d:54:e7:5f:1b:54:19:77:ab:c0:05:e2:bb:41:
                    45:8f:0d:8d:fc:ba:1c:66:e8:b8:4a:33:c7:f5:0e:
                    7b:d2:b6:ce:9b:74:fb:d6:a3:06:14:aa:f2:38:49:
                    f0:24:53:c1:61:be:fb:c6:c2:0b:e6:7a:6e:7f:9d:
                    80:b3:60:a9:7a:d2:4f:97:97:9f:e8:d7:74:4e:41:
                    c0:df:cb:65:b7:ae:22:4a:bb:fc:a1:2a:30:22:6c:
                    bd:54:5c:ae:46:2e:ce:a5:fd:79:d7:0c:f0:c2:ce:
                    12:82:2d:f2:78:d1:00:81:0c:f0:01:66:c4:d7:0b:
                    b7:46:7a:f6:76:3d:d2:89:66:76:b6:98:f8:7b:06:
                    b3:20:31:a9:06:9e:fa:00:9d:82:c5:c0:68:e2:40:
                    94:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:25:DE:8B:14:B4:DD:26:AE:B4:6F:62:42:76:2E:32:7D:FD:C5:67
            X509v3 Authority Key Identifier:
                keyid:EE:02:2D:68:DF:06:6A:76:1A:3B:E8:64:1A:71:BB:69:C1:5E:27:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gItaN8GanYaO-hkGnG7acFeJy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eae6b4-5687-4e4a-845e-742f7c8685ed/1/7gItaN8GanYaO-hkGnG7acFeJy0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eae6b4-5687-4e4a-845e-742f7c8685ed/1/7gItaN8GanYaO-hkGnG7acFeJy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:f2:e0:65:ee:ce:0f:4a:fc:ff:c8:a2:bd:64:a8:61:ec:14:
         81:95:b8:1a:4c:ee:02:0a:9d:74:7a:1f:cb:32:4e:92:72:9b:
         8a:52:a0:af:af:58:56:89:b5:59:99:8d:b0:9d:c6:fa:0a:f4:
         28:f0:3a:e8:7f:2b:ad:2d:64:53:44:bc:2c:17:43:49:95:28:
         b4:31:68:3e:07:b5:5b:80:ba:31:1c:ed:97:69:13:19:40:ed:
         bd:0c:3a:71:e6:6b:ae:fe:63:0a:44:d4:ac:14:39:06:0f:b9:
         df:84:4c:e7:ae:1e:a8:de:f9:fd:22:56:82:f1:75:9e:c9:6d:
         47:f4:5d:9b:0e:13:20:31:92:8c:bd:b6:1d:a1:ea:76:18:ca:
         63:92:d8:7a:fe:08:39:7e:97:2f:6a:fd:f8:11:d6:3d:94:8b:
         3c:42:ce:05:22:d1:c4:ee:a1:10:f1:a1:f1:06:30:0d:4c:77:
         10:d4:12:1d:e1:e2:b1:11:55:10:9c:66:32:14:da:16:b6:cb:
         60:b2:2e:ab:0e:37:9b:5c:7c:2f:cd:5d:e8:08:3c:9f:79:e8:
         ef:f4:0c:83:b2:8d:f6:e6:75:95:6a:d2:44:ab:dd:43:a5:bd:
         1b:ba:c5:0a:13:6e:98:3e:b6:64:03:08:b5:1f:75:a1:b7:82:
         50:f2:80:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:26:22 2026 by rpki-client