Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
File:                     1-EplWZr7nYcnw9uUfv-64uW4U9E.mft (raw, json)
Hash identifier:          ucHPUVMLvx+nn3WGlcmDNOVw8Gx0eXiSHS0G1hVkNjk=
Subject key identifier:   42:16:56:7F:86:76:E6:8E:A1:E2:E2:9D:B0:BD:35:A0:2F:4F:4F:BC
Authority key identifier: F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1
Certificate issuer:       /CN=f84a65599afb9d8727c3db947effbae2e5b853d1
Certificate serial:       019F8FEC0FDC2AA0CD69776259B119989203
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
Manifest number:          0F65
Signing time:             Thu 23 Jul 2026 17:00:40 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:40 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:40 +0000
Files and hashes:         1: 1-EplWZr7nYcnw9uUfv-64uW4U9E.crl (hash: IR+rZPphb8seTjRH9gx0U7whgFCuVroYP3pWWngMWu8=)
                          2: PYSOuEJKXfFv96PrgahNaZWMo90.roa (hash: 1YHoKoxpfqieDN1YXiLCsR8fSH3v1YL6XK2N4m5fa+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:0f:dc:2a:a0:cd:69:77:62:59:b1:19:98:92:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f84a65599afb9d8727c3db947effbae2e5b853d1
        Validity
            Not Before: Jul 23 17:00:40 2026 GMT
            Not After : Jul 24 17:00:40 2026 GMT
        Subject: CN=4216567f8676e68ea1e2e29db0bd35a02f4f4fbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:62:42:01:c7:bf:20:7d:ba:8b:66:09:fa:d8:
                    8c:00:a5:f6:f1:eb:75:02:e0:c1:68:30:33:c8:c1:
                    83:ca:e8:24:4f:cc:9c:2d:0d:59:e5:1b:3c:1c:10:
                    06:1f:06:16:ed:26:32:94:cb:4c:8c:78:fb:aa:65:
                    28:e5:11:31:e3:29:c5:4c:27:5e:70:41:79:02:1b:
                    c7:64:0b:7c:ad:75:76:ad:49:0d:63:cb:62:51:41:
                    c2:7b:27:fa:2f:31:34:f3:57:51:b9:19:47:1a:d9:
                    6d:e7:56:57:83:c1:4a:bc:f0:b6:32:af:81:32:e0:
                    53:45:72:b2:2f:ce:bd:d7:46:2b:88:99:a5:ba:4c:
                    e4:ce:f9:67:9d:ce:01:6f:55:25:ce:d2:d0:a8:55:
                    f3:f5:2a:62:45:cd:6d:0e:23:12:2c:ff:8f:b8:7a:
                    b9:e4:9b:cb:5f:34:64:8e:b1:e1:a4:f8:84:08:2c:
                    c1:62:a3:d7:55:73:03:42:ed:5b:ed:b4:d7:12:ec:
                    15:80:9b:89:c1:af:34:58:31:71:ae:6c:41:87:96:
                    21:56:8f:45:fe:58:ed:cd:1b:f7:cc:32:76:a3:09:
                    5f:4e:2a:b2:d6:18:51:6c:ed:04:de:0c:ac:5d:16:
                    63:25:29:33:a8:d9:2d:e0:64:6a:bc:11:aa:81:a0:
                    78:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:16:56:7F:86:76:E6:8E:A1:E2:E2:9D:B0:BD:35:A0:2F:4F:4F:BC
            X509v3 Authority Key Identifier:
                keyid:F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:19:c7:e5:da:b0:ae:fa:2e:1a:36:d2:da:ed:a5:88:ec:e8:
         7e:d7:c6:79:c2:fa:fe:6f:02:e3:4d:fb:83:70:be:17:aa:07:
         b5:49:8b:5a:b3:5e:67:f2:1c:c9:86:5d:9b:11:d1:85:54:6b:
         89:c6:99:9c:ca:a5:e0:d6:98:1f:bb:e0:6d:33:bd:e0:81:c1:
         76:b9:d4:14:eb:7c:54:2d:7f:e1:f0:da:09:24:3a:a0:61:3f:
         4c:e7:65:40:5d:8b:ad:87:68:a0:fa:6b:c7:db:fd:8f:10:0e:
         75:b1:d6:e1:0c:ac:03:a9:fe:12:14:cd:ca:3c:c7:c8:48:c1:
         6a:74:b3:88:db:40:f1:f0:33:b3:c2:68:20:85:49:67:b1:ce:
         e5:26:9e:16:2d:50:e9:61:50:96:44:1d:3f:55:51:c5:e8:0a:
         37:49:cd:a5:25:f5:ff:d5:51:1c:7d:47:42:ca:36:d7:91:12:
         fa:31:1e:d1:40:65:52:e5:e0:b5:9c:7a:c6:64:13:07:10:5d:
         ef:3b:89:51:fa:e0:ef:a2:75:4d:a5:7a:cc:0a:d2:04:7f:01:
         66:52:3a:a8:4f:d8:93:f1:86:3e:93:ee:70:24:2f:a7:18:64:
         01:28:bb:a3:23:4a:51:1a:51:bc:c6:d4:8b:b5:27:00:0b:27:
         59:ea:df:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:18:05 2026 by rpki-client