Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
File:                     7cPfBG4eHVvwUiu5E_KVcoekm0s.mft (raw, json)
Hash identifier:          coPNgB5PiHtf/06MjjRcLfntIOuhxwLQ43b5AH9sBa4=
Subject key identifier:   95:B7:1B:46:A8:90:82:24:18:2C:83:4C:0F:07:93:6D:30:A7:28:AC
Authority key identifier: ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B
Certificate issuer:       /CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
Certificate serial:       019F90C7EA2C31B0E4B310496CE136769DBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
Manifest number:          1136
Signing time:             Thu 23 Jul 2026 21:00:48 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:48 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:48 +0000
Files and hashes:         1: 7cPfBG4eHVvwUiu5E_KVcoekm0s.crl (hash: dvoLh8VlV55vD54jEfg6gGvlp3Rs8Oy4oh2atmd90HI=)
                          2: seylKk68qXKxhoBzXl7E0-tTkU0.roa (hash: 14ms6tysm87Rxm8W+2zvydPUm5MTtyrDqlszeDC47Cw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:ea:2c:31:b0:e4:b3:10:49:6c:e1:36:76:9d:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
        Validity
            Not Before: Jul 23 21:00:48 2026 GMT
            Not After : Jul 24 21:00:48 2026 GMT
        Subject: CN=95b71b46a8908224182c834c0f07936d30a728ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2e:14:32:7b:61:b4:a0:ff:08:45:af:64:0f:
                    b1:f6:56:73:a3:0d:67:7e:c6:a5:b5:f5:8b:e6:c1:
                    4b:e7:e0:08:35:50:bb:99:28:77:03:f1:c0:12:d5:
                    54:b3:bb:b6:09:ba:d4:3a:de:27:18:26:63:1b:92:
                    a8:b3:ca:08:e0:92:1d:40:cb:75:1c:db:8a:41:9c:
                    a1:a4:18:77:fb:10:8a:0d:98:92:ec:75:27:f7:17:
                    00:fb:33:c0:2f:35:4f:05:56:a7:8a:6a:b0:80:88:
                    75:92:c2:8c:1d:95:25:90:14:5c:86:80:2a:25:84:
                    8a:42:03:20:1f:aa:55:80:11:31:af:66:be:90:31:
                    eb:06:1f:57:91:58:c1:bc:c1:d1:4f:fb:00:11:ce:
                    6b:d0:ae:19:69:38:3b:84:11:9b:55:54:da:61:2a:
                    5d:fc:ec:3e:2d:95:e7:42:de:73:0c:3f:b9:67:9b:
                    09:9a:e4:d7:81:72:9b:89:c1:86:b1:9b:3c:82:41:
                    2e:2a:b0:98:35:cc:ba:b9:9a:8e:4b:5b:c6:d9:51:
                    04:8b:14:68:a1:5f:1b:b8:be:6d:b1:0c:1f:e6:7b:
                    ea:b1:41:26:95:67:58:af:b7:f3:ca:50:ab:cd:22:
                    0d:41:85:14:e0:b3:0e:c0:f6:6f:51:f7:c3:5e:06:
                    d6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B7:1B:46:A8:90:82:24:18:2C:83:4C:0F:07:93:6D:30:A7:28:AC
            X509v3 Authority Key Identifier:
                keyid:ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:50:4b:3f:6e:7d:e1:46:f0:8f:3f:00:4b:ad:9b:73:c2:6c:
         6b:21:a2:68:b9:5d:1a:2d:f1:df:91:39:1f:d6:c2:51:cc:13:
         8f:16:15:a6:2d:9c:8d:24:3c:7e:7a:87:9c:cb:3b:90:99:fd:
         f0:fa:2c:2c:d0:06:9a:f4:8f:55:04:99:f0:fa:cf:83:72:cc:
         d4:aa:11:c6:3a:72:7c:d8:8a:6b:1b:45:e6:e9:ee:37:d9:35:
         90:80:40:d8:23:d3:95:c7:36:b5:d1:47:f0:f3:7b:cf:a4:10:
         40:dc:78:ba:58:64:fc:d3:27:44:a8:51:8b:60:ef:e1:2f:ef:
         77:92:fd:52:50:90:ba:51:2f:54:d4:16:2b:c4:87:31:28:ec:
         19:c5:2c:fd:99:47:37:57:3a:b3:2b:d1:65:2c:08:df:50:a9:
         2a:dc:4c:9e:96:b3:26:ed:93:f8:5f:36:3f:2e:4d:0a:57:79:
         b9:05:ff:65:51:5e:d3:8c:5a:19:38:fa:c2:fa:a4:53:55:b8:
         90:b6:ff:0f:71:c5:83:5e:43:b8:52:b2:e3:58:da:69:30:2e:
         b4:c7:4d:f9:cc:e4:2a:a8:fc:42:1a:59:6a:40:12:e2:44:c4:
         e5:98:0f:c8:19:12:1a:99:b2:b4:cb:05:4a:54:88:03:22:28:
         6b:fa:0f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:02:41 2026 by rpki-client