Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/D7JAVZB3wRHaVfjisw5xF2QNguw.mft
File:                     D7JAVZB3wRHaVfjisw5xF2QNguw.mft (raw, json)
Hash identifier:          W7pcHWUtBLFanGYwCirOOuN6ltUyfdT/ktxlWoCTzvM=
Subject key identifier:   4E:DF:70:20:10:61:10:04:71:DE:E1:F2:7C:76:71:83:37:16:91:C0
Authority key identifier: 0F:B2:40:55:90:77:C1:11:DA:55:F8:E2:B3:0E:71:17:64:0D:82:EC
Certificate issuer:       /CN=0fb240559077c111da55f8e2b30e7117640d82ec
Certificate serial:       019F8F7E8EEB2DBE54A4E6E1C82D1CCD8E60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D7JAVZB3wRHaVfjisw5xF2QNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/D7JAVZB3wRHaVfjisw5xF2QNguw.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 15:01:03 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:03 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:03 +0000
Files and hashes:         1: 2FjkxVJwhbBSDsFlqMOylRx1h7w.roa (hash: lWPoUqWqXBuYP0fhmCr8Qtwx5dmWT/xwoh3ALnECDtg=)
                          2: D7JAVZB3wRHaVfjisw5xF2QNguw.crl (hash: Z5dWvKkevMEB2tD8zFYOPn58ZhhAk1NMeBZPMlo/73g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/D7JAVZB3wRHaVfjisw5xF2QNguw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/D7JAVZB3wRHaVfjisw5xF2QNguw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D7JAVZB3wRHaVfjisw5xF2QNguw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:8e:eb:2d:be:54:a4:e6:e1:c8:2d:1c:cd:8e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fb240559077c111da55f8e2b30e7117640d82ec
        Validity
            Not Before: Jul 23 15:01:03 2026 GMT
            Not After : Jul 24 15:01:03 2026 GMT
        Subject: CN=4edf70201061100471dee1f27c767183371691c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:75:da:b7:99:cd:35:13:75:17:f6:b3:8c:50:
                    f2:c0:9e:68:5b:bb:0f:81:25:75:8e:51:14:ec:ff:
                    89:dd:55:52:65:c0:0b:38:e8:e5:14:af:de:dd:f9:
                    a9:e7:97:19:0c:02:a8:be:f8:e7:5e:f0:55:bf:43:
                    e5:f3:42:ca:13:17:a0:dd:5b:8f:e4:63:fe:98:b1:
                    5c:74:bc:fc:62:1c:a6:1d:71:77:07:e7:e7:eb:34:
                    80:e2:09:11:b3:6a:fe:3d:1e:dd:55:f4:5c:9e:99:
                    14:2b:4f:aa:36:da:d0:56:eb:a8:88:d1:80:6a:98:
                    d1:bb:11:37:84:43:5e:42:73:de:74:45:80:fa:97:
                    99:4f:35:f2:80:20:b8:5a:ee:91:6a:95:a3:4e:6c:
                    70:d2:44:08:d6:03:7c:fa:27:b3:7a:06:d2:1a:95:
                    6e:e7:d7:ca:92:3c:91:cf:2a:84:10:9b:9d:d8:89:
                    e0:5c:63:f1:aa:4b:55:01:19:c1:33:d3:71:3c:2e:
                    b0:a3:62:5c:e6:2b:5d:d7:b9:12:81:8a:e0:10:30:
                    a8:be:95:a8:3a:0d:55:05:61:af:de:15:95:f3:79:
                    af:14:c7:e2:20:06:c5:17:18:e4:8c:b9:c8:6e:cb:
                    60:c6:8d:7b:71:45:7d:42:b7:58:44:cf:e9:3b:af:
                    e1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:DF:70:20:10:61:10:04:71:DE:E1:F2:7C:76:71:83:37:16:91:C0
            X509v3 Authority Key Identifier:
                keyid:0F:B2:40:55:90:77:C1:11:DA:55:F8:E2:B3:0E:71:17:64:0D:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7JAVZB3wRHaVfjisw5xF2QNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/D7JAVZB3wRHaVfjisw5xF2QNguw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/D7JAVZB3wRHaVfjisw5xF2QNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:d4:7a:7c:8d:e7:05:73:aa:82:29:11:36:b4:4e:11:3b:f0:
         2a:4d:54:1b:da:38:89:16:16:af:61:af:07:b9:7a:a4:4b:db:
         f5:78:2c:33:63:d1:4d:dc:0c:2b:cb:48:af:78:c1:cd:60:2a:
         2d:e9:10:d5:02:35:0e:55:2e:bd:56:49:4b:0f:e4:a9:df:78:
         e1:dc:4b:e1:8f:04:92:e1:f0:20:06:01:06:4e:fe:95:68:ec:
         79:d1:71:f4:52:e5:86:f0:ba:ff:26:6d:04:4e:36:9a:41:c8:
         57:8a:af:d7:be:a6:5a:3c:ed:0b:c3:2e:7c:7e:89:66:7f:a0:
         11:70:a8:a3:15:2a:8d:6f:48:fe:c6:3b:51:75:87:74:29:06:
         57:7e:84:65:fc:ed:8d:0a:90:a4:b1:82:12:e7:0b:c8:8a:3b:
         2e:2c:21:a6:75:5b:2c:3e:48:34:8f:8d:09:f8:79:6c:29:03:
         63:6d:70:77:9d:d0:10:04:b3:a3:75:f2:c6:20:15:69:39:fa:
         fb:f1:af:aa:59:16:48:3d:0a:d4:df:71:1d:ba:77:bb:43:de:
         1d:1f:1d:67:a6:cc:98:c4:af:71:bd:a4:bd:9d:5e:f3:cb:0c:
         84:f3:2a:9d:51:8e:6f:12:dc:b5:a4:98:fd:2b:1e:fc:58:b6:
         d9:38:cb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:38 2026 by rpki-client