Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
File:                     v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft (raw, json)
Hash identifier:          Z/aUdLNsiMiV9fsOkIAOMRPZFKDr/fjsS62z9AcPgWw=
Subject key identifier:   F5:50:18:85:D7:B8:37:C4:96:CB:B9:E7:66:3B:0A:95:74:11:CB:72
Authority key identifier: BF:62:8B:93:66:1E:90:58:87:35:9F:C8:E9:A1:88:80:75:DB:3C:D8
Certificate issuer:       /CN=bf628b93661e905887359fc8e9a1888075db3cd8
Certificate serial:       019F91A3ACFB5EF26BC471DA8F72F136EDDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
Manifest number:          19C7
Signing time:             Fri 24 Jul 2026 01:00:50 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:50 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:50 +0000
Files and hashes:         1: 5PEM24BMPrcvxY-cL8Z6QKGwr1U.roa (hash: 9iefR/dFPM3ozUCII4KvIo+RC9gYE16NJW6hpn8+KmU=)
                          2: v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl (hash: eKiEA7hXSzqCtm6cog5q2QaNQ+YfARt3D9P3xPAm/Wo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:ac:fb:5e:f2:6b:c4:71:da:8f:72:f1:36:ed:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf628b93661e905887359fc8e9a1888075db3cd8
        Validity
            Not Before: Jul 24 01:00:50 2026 GMT
            Not After : Jul 25 01:00:50 2026 GMT
        Subject: CN=f5501885d7b837c496cbb9e7663b0a957411cb72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:01:dc:03:19:cc:81:a6:72:50:79:c8:1c:bf:
                    7f:9d:02:cf:28:4b:eb:61:cb:03:61:d3:b7:4f:54:
                    fd:f5:46:0c:da:c2:5f:12:db:31:19:d0:51:f6:97:
                    76:f4:42:51:0b:04:91:b1:d8:d2:c4:5b:ee:b8:4d:
                    ca:47:b0:1d:d2:a3:f3:5c:ca:ad:71:eb:1b:62:45:
                    34:08:cb:7d:75:55:ae:03:a2:68:6d:ef:b9:25:a6:
                    00:74:f5:ef:4f:04:e7:47:5f:3b:fd:61:77:e4:d0:
                    38:99:66:08:be:00:a5:6f:a3:26:87:84:9b:05:60:
                    f2:80:d0:89:5e:bb:fe:4c:13:47:49:f0:44:0f:91:
                    05:de:9c:fb:ce:c7:b9:0b:34:6e:4f:89:dc:74:f5:
                    9f:2d:a2:39:32:de:a4:a2:4b:b7:f9:28:b0:be:e1:
                    99:7f:50:96:bc:01:61:aa:aa:8a:1c:3e:1a:75:9f:
                    b0:49:3f:ac:a5:02:6a:58:da:e5:ff:bd:9b:21:77:
                    74:50:17:69:f1:46:60:28:eb:ca:0b:87:d7:64:84:
                    ab:fb:87:1c:b6:6c:12:43:00:cd:dd:71:55:e9:43:
                    09:01:52:40:5a:0c:c2:18:f9:51:a6:d4:81:76:7c:
                    7a:98:6b:d2:18:50:51:35:67:45:2f:94:4d:d3:a4:
                    27:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:50:18:85:D7:B8:37:C4:96:CB:B9:E7:66:3B:0A:95:74:11:CB:72
            X509v3 Authority Key Identifier:
                keyid:BF:62:8B:93:66:1E:90:58:87:35:9F:C8:E9:A1:88:80:75:DB:3C:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:c0:2f:8f:08:34:c0:df:3d:fa:34:e2:dc:2b:ee:d0:13:e1:
         0b:27:d4:ce:20:c2:5f:71:7a:1d:ca:26:3b:d7:c0:6c:bf:99:
         2d:1d:07:9d:87:9f:11:ad:2e:50:d0:20:bd:03:99:df:39:a4:
         f1:b8:e5:61:eb:cc:26:ad:e7:d0:b0:74:8d:17:95:32:e9:ec:
         c7:e6:32:57:03:12:a6:44:51:cc:72:f0:fa:c8:23:b8:59:15:
         97:78:aa:29:5a:e6:cb:47:93:3f:a6:3d:92:63:fb:a1:6d:a6:
         d1:7f:31:61:26:2e:9c:37:77:85:77:cf:41:c4:5d:89:d1:de:
         54:be:22:4a:b3:1a:59:7d:fd:93:78:01:10:98:65:c7:02:a2:
         d7:f2:27:13:e6:fb:8d:ac:2d:4d:2c:a9:eb:79:ff:7e:e5:ea:
         f8:94:bf:8d:68:cc:31:44:1d:b8:cd:cb:9b:16:93:d8:86:53:
         ed:e0:ee:5a:7b:21:1c:2a:4f:39:fa:4f:45:16:f3:73:28:45:
         6f:8c:ff:d7:e2:8d:53:a7:a4:f8:80:84:78:8a:38:28:17:97:
         e8:33:7b:f5:89:ac:65:3f:09:32:79:9f:e6:70:89:d8:97:6a:
         fa:cc:67:5b:d3:dd:9b:75:ea:1b:b6:fa:3e:e9:bd:94:ef:f1:
         d0:16:19:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:33:47 2026 by rpki-client