Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/eee238-6c28-45e8-a898-823c18559d53/1/7oyjsNxPDZda4PqDJ0lvSwzkVt4.mft
File:                     7oyjsNxPDZda4PqDJ0lvSwzkVt4.mft (raw, json)
Hash identifier:          +qvY+Xj9jBgTbyLmqu03gc3f0GNMFwtwTQAPC67qJsw=
Subject key identifier:   29:B6:5C:10:92:3A:0F:E7:B8:95:3F:93:1B:E1:75:F5:E2:C0:DA:E6
Authority key identifier: EE:8C:A3:B0:DC:4F:0D:97:5A:E0:FA:83:27:49:6F:4B:0C:E4:56:DE
Certificate issuer:       /CN=ee8ca3b0dc4f0d975ae0fa8327496f4b0ce456de
Certificate serial:       019F8F47302ED01A352D57A513E45AB4D0E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7oyjsNxPDZda4PqDJ0lvSwzkVt4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/eee238-6c28-45e8-a898-823c18559d53/1/7oyjsNxPDZda4PqDJ0lvSwzkVt4.mft
Manifest number:          0136
Signing time:             Thu 23 Jul 2026 14:00:35 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:35 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:35 +0000
Files and hashes:         1: 7oyjsNxPDZda4PqDJ0lvSwzkVt4.crl (hash: EKU5XIotNcC7BFa34EJHs18cTFqplZoPaS6FKqxFfv8=)
                          2: hYcOltYQ3coRzHfHtwK1cUy8X-c.asa (hash: GLuGjxVic7tB9lRTvZboOAKtaGC1m0nPNnwMd0FZxG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/eee238-6c28-45e8-a898-823c18559d53/1/7oyjsNxPDZda4PqDJ0lvSwzkVt4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/eee238-6c28-45e8-a898-823c18559d53/1/7oyjsNxPDZda4PqDJ0lvSwzkVt4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7oyjsNxPDZda4PqDJ0lvSwzkVt4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:47:30:2e:d0:1a:35:2d:57:a5:13:e4:5a:b4:d0:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee8ca3b0dc4f0d975ae0fa8327496f4b0ce456de
        Validity
            Not Before: Jul 23 14:00:35 2026 GMT
            Not After : Jul 24 14:00:35 2026 GMT
        Subject: CN=29b65c10923a0fe7b8953f931be175f5e2c0dae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:88:8b:d8:be:95:a4:52:70:e9:b4:43:2e:57:
                    ff:18:c9:54:34:a3:36:9c:dd:2f:57:02:9a:84:cf:
                    7f:25:e5:98:0d:3e:af:fb:8a:eb:c5:e5:3d:0c:74:
                    60:29:30:f8:6e:09:a0:51:94:b9:93:92:ed:22:25:
                    75:89:93:a8:b7:f3:73:93:76:1a:9a:f7:64:20:d6:
                    8a:78:d9:82:10:d3:c8:87:b1:ed:54:a3:93:0f:4b:
                    5f:31:23:7e:83:b7:80:5e:22:69:25:2e:dc:07:80:
                    d0:c3:cf:dc:5d:8f:6e:97:ae:fd:d4:a4:bb:7c:65:
                    cc:ea:18:51:c8:87:18:c6:d2:d1:c9:ae:a4:ed:25:
                    9e:1a:02:d6:c9:69:e7:6c:80:c0:39:db:1e:76:50:
                    1d:62:ae:f0:0e:aa:5b:5b:5b:59:fd:63:81:8b:a0:
                    a3:34:46:1e:2d:88:a4:05:60:f8:9f:36:99:92:81:
                    2a:f4:eb:ca:7c:7c:a0:e8:9e:d5:35:32:42:f4:b4:
                    b9:0b:14:46:f8:f7:b9:c8:d4:c6:3d:b2:d6:4e:df:
                    f8:79:e4:96:95:96:55:bd:8d:f9:49:5a:5f:33:c9:
                    da:7a:d8:16:f7:04:3b:0f:89:ad:6e:f2:2d:65:33:
                    15:bd:a3:c4:26:22:4a:f2:25:08:d5:0e:d5:32:4a:
                    2b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B6:5C:10:92:3A:0F:E7:B8:95:3F:93:1B:E1:75:F5:E2:C0:DA:E6
            X509v3 Authority Key Identifier:
                keyid:EE:8C:A3:B0:DC:4F:0D:97:5A:E0:FA:83:27:49:6F:4B:0C:E4:56:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oyjsNxPDZda4PqDJ0lvSwzkVt4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/eee238-6c28-45e8-a898-823c18559d53/1/7oyjsNxPDZda4PqDJ0lvSwzkVt4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/eee238-6c28-45e8-a898-823c18559d53/1/7oyjsNxPDZda4PqDJ0lvSwzkVt4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:4c:ef:db:72:44:c8:fb:cb:d2:21:b6:36:41:5c:a4:4a:a9:
         35:9f:56:bd:b5:77:c0:23:85:cb:a0:2a:77:6c:fe:28:b3:ad:
         85:f6:04:86:16:b2:98:73:fb:ca:c7:92:26:1e:26:4e:7b:fa:
         ee:68:e2:4f:fc:d7:47:80:5d:45:78:f9:97:40:67:f4:c8:c5:
         99:47:bf:79:41:f1:fe:67:44:fb:96:74:e1:48:73:45:84:6e:
         93:c7:15:c3:89:27:22:4e:58:c3:69:ea:9e:1d:26:e0:9b:90:
         2f:06:b1:50:c1:e8:1d:07:11:55:cb:5c:b0:43:ab:d7:4a:d9:
         9c:fe:81:8f:62:14:2a:ae:07:35:a9:c2:8d:1e:93:b9:d5:e3:
         5e:48:c5:0d:f5:65:b7:34:20:87:fc:72:3f:d9:9e:e2:8f:a5:
         10:a2:6b:fb:8e:47:a7:87:bf:47:c1:01:54:5c:28:69:3d:9b:
         2f:35:76:46:2b:44:e0:ca:cc:46:06:59:ef:2c:0d:71:55:30:
         f8:f4:f9:4d:2a:da:72:b4:6a:b3:39:77:2e:3e:e7:0f:ad:16:
         12:c9:8e:da:64:36:ae:1a:65:53:91:9e:92:d1:37:ac:47:69:
         ec:df:b7:1a:2a:7d:ba:9a:8c:d7:46:26:96:ac:0c:b7:89:c1:
         e1:e8:5a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:46:24 2026 by rpki-client