Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
File:                     7_ktk2igmtNvelft-9CgXZ_UDh0.mft (raw, json)
Hash identifier:          9fMzot/9/heMTm4PDWR0FpNiCKRuLN3NVFJ2m7wijEs=
Subject key identifier:   DF:17:2B:75:3F:56:DF:26:C3:B0:ED:5B:D2:A3:26:20:A7:BB:28:A2
Authority key identifier: EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D
Certificate issuer:       /CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d
Certificate serial:       019F916D792C29BBA261C60372F2E18331B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
Manifest number:          19C8
Signing time:             Fri 24 Jul 2026 00:01:38 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:38 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:38 +0000
Files and hashes:         1: 7_ktk2igmtNvelft-9CgXZ_UDh0.crl (hash: rYN6n4LuWdxHntoN+WUUl83X6Fn9e0oz2C9FQIMeBcE=)
                          2: krZVBDiWkvm4PD1vJnwzxrmFRBs.roa (hash: U9k/zcmCxVKcnCozIhgmcwJH3uFDUp/Q9q36sgU5rBk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:79:2c:29:bb:a2:61:c6:03:72:f2:e1:83:31:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d
        Validity
            Not Before: Jul 24 00:01:38 2026 GMT
            Not After : Jul 25 00:01:38 2026 GMT
        Subject: CN=df172b753f56df26c3b0ed5bd2a32620a7bb28a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4b:c9:ec:d5:79:10:50:47:97:15:ab:9e:d7:
                    a9:6f:b5:b7:f8:85:e0:86:a8:9a:2c:d6:8b:8c:3b:
                    b2:f5:e2:37:1e:87:de:1a:5f:b2:22:51:3f:56:8c:
                    e9:38:73:0b:47:ac:06:55:2d:d8:9e:78:c1:3b:68:
                    f8:73:ff:5b:ab:37:34:4a:9d:39:f5:92:ca:d5:f9:
                    c0:02:33:e1:9a:1e:5c:32:cf:23:79:7f:3d:7f:ee:
                    bb:3c:0d:6d:61:4b:fb:40:21:9f:de:12:d9:5b:1a:
                    1c:8f:d1:b8:e2:ea:81:be:7e:84:f5:e8:f8:ff:62:
                    69:7c:ed:ba:37:31:31:ba:ef:c6:f3:63:5a:9e:5a:
                    5b:cb:61:c4:1f:e7:28:43:97:0c:f3:ed:31:45:2e:
                    f0:55:e8:72:83:93:fa:72:89:27:29:3c:67:85:9b:
                    5e:aa:b6:aa:e1:9c:ea:b3:1f:8d:c2:67:b4:66:68:
                    64:97:39:82:f5:55:2f:60:a6:60:48:0f:df:61:2d:
                    fd:a9:52:aa:53:20:2a:06:15:82:b1:06:05:70:34:
                    5f:19:95:ac:ed:b5:d9:67:70:33:cc:19:b4:70:35:
                    19:9e:13:f4:41:74:8f:8b:76:43:65:91:dd:7e:52:
                    dd:d5:2d:37:52:2e:38:7e:2b:f9:f3:4a:fa:ea:be:
                    65:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:17:2B:75:3F:56:DF:26:C3:B0:ED:5B:D2:A3:26:20:A7:BB:28:A2
            X509v3 Authority Key Identifier:
                keyid:EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:91:29:ca:79:7d:a6:28:36:6c:dd:ac:9f:70:cd:0b:b5:d8:
         fc:35:62:88:93:a1:f6:c0:ba:41:0f:dc:d2:3c:c0:fb:39:26:
         8c:2a:20:78:08:15:ad:31:f9:fb:99:3f:94:d8:b7:b3:bd:30:
         c7:6f:f0:e6:69:fb:74:31:4a:3c:82:b3:82:26:4f:95:73:14:
         a7:6e:13:ea:1d:e3:8e:44:5f:0c:76:d1:89:f2:c9:3c:cd:1c:
         85:3f:a9:88:ec:af:88:e8:d8:59:a1:10:59:f0:52:e5:41:f0:
         72:91:ae:3e:dd:96:2e:b6:ef:60:84:ba:12:98:08:b6:ba:57:
         da:08:83:9d:fd:28:c8:2b:0f:66:d0:b7:9f:18:f4:92:74:35:
         0a:99:24:4d:ee:8d:d2:a9:9c:ee:c8:66:20:8b:89:a4:64:a2:
         99:35:e3:b4:ef:01:4c:1f:b4:5b:23:2b:91:25:b3:32:d6:eb:
         2a:be:b0:45:eb:6e:d5:44:07:65:43:b8:2e:1f:7e:03:82:24:
         a1:01:42:20:97:3c:09:0f:34:29:e8:73:2d:18:28:6b:2e:d9:
         94:a2:a6:07:6a:16:e3:d2:e7:d9:3f:45:b7:0f:c9:39:0a:3f:
         4a:9b:04:86:c7:5a:6d:9c:48:16:b4:a3:90:a6:e1:14:32:26:
         73:12:86:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:15:33 2026 by rpki-client