Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.mft
File:                     7vvoNpp7vAOob75jm376oCtxcoc.mft (raw, json)
Hash identifier:          m1/TwkR5OVYoCveu+vEHQm7UFf5QXSHIb3OvPwn9TU8=
Subject key identifier:   5A:9B:4A:F9:85:BF:75:9C:22:5A:F0:AE:09:64:C1:0C:DE:08:B2:AF
Authority key identifier: EE:FB:E8:36:9A:7B:BC:03:A8:6F:BE:63:9B:7E:FA:A0:2B:71:72:87
Certificate issuer:       /CN=eefbe8369a7bbc03a86fbe639b7efaa02b717287
Certificate serial:       019F9023017E2702C1EF73A5668CA7591BC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7vvoNpp7vAOob75jm376oCtxcoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.mft
Manifest number:          10AE
Signing time:             Thu 23 Jul 2026 18:00:40 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:40 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:40 +0000
Files and hashes:         1: 7vvoNpp7vAOob75jm376oCtxcoc.crl (hash: rPpVVt45PVgAQslguQLoPmua1I0a5cQusqbhyRUHu24=)
                          2: EiatrI83uO9tftsPdHu8fpbPds0.roa (hash: NS244B8Thb+nWglSt1HPIJiaD9wGsscqn8SIEyk9kQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7vvoNpp7vAOob75jm376oCtxcoc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 18:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:23:01:7e:27:02:c1:ef:73:a5:66:8c:a7:59:1b:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eefbe8369a7bbc03a86fbe639b7efaa02b717287
        Validity
            Not Before: Jul 23 18:00:40 2026 GMT
            Not After : Jul 24 18:00:40 2026 GMT
        Subject: CN=5a9b4af985bf759c225af0ae0964c10cde08b2af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e1:02:e8:a0:f5:2a:58:cd:db:0b:c5:8b:98:
                    37:e9:ab:36:82:95:2b:00:46:88:5d:79:02:12:73:
                    49:0b:88:4f:24:00:e0:05:b1:08:3c:c4:dd:0d:72:
                    c0:18:aa:fe:60:17:8e:d0:82:fc:3c:dd:64:c4:bf:
                    b2:c2:bf:6a:23:4f:45:b6:0f:3c:21:22:65:9e:a7:
                    da:53:c0:dd:ad:33:71:4e:c2:7b:3b:da:06:26:43:
                    dd:43:7f:88:13:7f:74:27:a9:ca:ef:9c:ee:26:91:
                    22:89:db:1b:5c:c6:73:a4:f6:7d:7e:87:b6:4e:9f:
                    f0:cf:cf:04:24:88:aa:54:e1:57:f7:c5:4e:90:eb:
                    c6:b7:13:17:d8:74:77:44:ba:37:80:32:13:1b:b3:
                    59:bd:09:a2:8b:82:73:4e:5b:bd:26:31:38:a7:fc:
                    1a:9c:b4:c3:59:7a:b2:48:49:b9:c0:cf:4b:6e:24:
                    08:5d:60:66:93:d6:03:72:62:d7:66:57:fb:a3:a5:
                    9e:97:e4:4a:04:b4:05:de:41:24:0b:12:05:44:dd:
                    e1:7f:50:cb:b0:e0:36:d7:71:bf:ec:09:53:e2:3f:
                    83:59:6e:1b:83:72:2b:8d:30:63:62:00:ef:22:61:
                    bb:bf:f5:a8:03:68:db:93:39:fc:7c:24:98:92:20:
                    ca:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:9B:4A:F9:85:BF:75:9C:22:5A:F0:AE:09:64:C1:0C:DE:08:B2:AF
            X509v3 Authority Key Identifier:
                keyid:EE:FB:E8:36:9A:7B:BC:03:A8:6F:BE:63:9B:7E:FA:A0:2B:71:72:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vvoNpp7vAOob75jm376oCtxcoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:48:88:80:01:0c:61:db:cc:68:fe:3a:9f:36:bd:49:75:19:
         f8:14:23:db:80:64:89:1a:2d:37:d6:0b:15:b7:10:7a:bb:17:
         9e:9f:db:19:02:c6:20:a7:29:35:6b:67:b2:e8:23:36:6a:8e:
         6c:32:29:7d:b8:16:e9:5f:d8:cb:fa:49:d1:33:2c:3d:dd:01:
         12:80:72:1b:2c:0e:3a:0b:99:40:21:3e:e1:8a:c0:da:fb:f3:
         79:ee:7a:11:1a:e1:4f:5f:b8:d9:63:14:6f:bd:b1:46:26:8a:
         ca:a6:f9:0d:7d:63:23:e0:f8:40:c3:d7:c6:64:5b:8d:d5:e1:
         db:05:90:ec:7e:7d:1a:41:38:60:24:4d:c7:d4:8c:0d:e8:7d:
         c7:09:27:18:e1:1e:e6:1f:84:ad:f0:12:d3:0d:55:2a:ff:4a:
         df:30:3d:32:57:b5:04:17:1f:f9:79:64:54:ed:3e:3c:29:ce:
         62:44:2f:cd:0b:fa:43:ec:ed:02:5b:7e:5d:40:d0:8b:61:e1:
         e8:83:69:c0:d5:db:99:87:8e:e4:05:37:ff:8e:bf:e5:64:7e:
         a2:01:14:de:04:d9:dd:6d:b3:10:fd:ef:37:49:59:79:bb:1c:
         4b:36:97:bb:69:09:8f:5c:f2:00:4f:48:a6:7a:ae:13:b9:98:
         a1:56:c4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:52:31 2026 by rpki-client