Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
File:                     e7M4LBagpWFZkNS85jTcUWgvLqo.mft (raw, json)
Hash identifier:          UrYu1k+wPU8YTf6n0FRiav/WZiAawlZauIaMmLGr5zM=
Subject key identifier:   64:E3:EE:18:98:C2:43:B3:FA:82:E6:A7:23:E2:E8:63:8C:D4:CC:D6
Authority key identifier: 7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA
Certificate issuer:       /CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa
Certificate serial:       019F905A6D065F667FF1EEDB731C343DBE95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
Manifest number:          0CBC
Signing time:             Thu 23 Jul 2026 19:01:12 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:12 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:12 +0000
Files and hashes:         1: 0Kt7LiOyFuDuV2M_OzgTRHmb6LM.roa (hash: VPIlG57nzf4K1jRvgJYnV75pO4BokyTEgK0DgtYr3dc=)
                          2: e7M4LBagpWFZkNS85jTcUWgvLqo.crl (hash: 0CLNvE+j6fReYVUqFKILXVO/PPMMRnSeagPGseJEahQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:6d:06:5f:66:7f:f1:ee:db:73:1c:34:3d:be:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa
        Validity
            Not Before: Jul 23 19:01:12 2026 GMT
            Not After : Jul 24 19:01:12 2026 GMT
        Subject: CN=64e3ee1898c243b3fa82e6a723e2e8638cd4ccd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:28:ec:f4:09:9d:7e:a1:b0:7c:07:c8:08:b6:
                    ee:6f:1e:e0:81:68:27:92:dd:89:56:99:fe:42:10:
                    56:5a:e1:2a:25:75:54:96:18:40:19:2f:77:cd:fc:
                    13:df:ca:8f:fc:af:f2:6f:22:2b:1c:a7:eb:0f:73:
                    36:7e:5f:b1:ce:6a:dd:21:ab:7f:26:3c:fe:3d:87:
                    79:2f:ec:53:55:ce:7e:3c:b6:c0:9c:a0:d5:4b:78:
                    56:80:3c:92:1e:7d:d5:cb:dd:0b:4f:74:c0:61:60:
                    25:2d:12:35:bb:db:46:11:86:6e:6a:07:5e:5b:6a:
                    b1:48:55:c0:6f:2a:1d:80:08:ad:8b:6e:b2:9e:fe:
                    8e:0e:26:16:9e:2a:e4:2e:ea:b0:6e:5b:9a:6c:ae:
                    8c:c1:df:ed:1a:22:82:f3:31:2f:0d:86:78:54:7f:
                    3c:7c:27:e6:47:0b:14:1d:8a:73:fd:b2:aa:fc:63:
                    ef:6b:28:78:66:21:fe:6e:c1:ed:e9:91:6a:cf:39:
                    20:13:ee:62:53:d5:f0:d9:7e:a0:7c:e3:2d:fe:e8:
                    fe:91:80:d5:a1:cb:20:ab:45:86:dd:06:8e:86:52:
                    5c:c8:e4:bd:3a:05:62:91:3a:c5:47:70:05:9f:75:
                    2b:57:ed:60:9d:f1:bb:50:03:b5:39:a3:11:37:52:
                    71:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E3:EE:18:98:C2:43:B3:FA:82:E6:A7:23:E2:E8:63:8C:D4:CC:D6
            X509v3 Authority Key Identifier:
                keyid:7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:9b:23:55:cf:a3:6e:de:a6:fd:77:07:d7:8e:4e:aa:37:7f:
         b4:1b:ae:59:50:95:fb:50:c3:75:19:18:fe:99:63:7f:41:c0:
         25:0e:d8:b7:62:21:00:82:c6:fb:1a:65:b3:7f:bd:c6:e6:62:
         b1:8c:06:16:78:20:46:6c:ec:b7:9a:1d:4a:02:40:f1:64:4f:
         a7:9a:01:4b:24:6a:66:c5:1d:f9:5f:0e:dc:37:51:82:7a:ba:
         8d:6e:34:e2:1b:92:c4:0e:6c:46:6d:69:dc:2d:d3:8d:6b:56:
         15:39:0c:82:26:d7:7b:9f:67:0f:1b:9a:e9:ab:c4:e9:50:4c:
         2b:0e:13:fd:6f:fc:a9:af:c7:80:12:71:d8:65:a3:4d:93:ad:
         96:b1:e7:79:33:e6:90:3c:c0:4a:de:85:be:29:70:b6:e8:b9:
         5b:66:35:97:eb:0b:c5:be:6a:50:73:c9:ee:34:e4:35:ed:89:
         99:2d:97:f6:dc:ed:ed:71:02:83:4b:d1:fc:2f:b8:8c:c5:68:
         31:6b:a6:14:f4:e2:29:82:c6:d3:aa:ef:68:52:1b:e8:40:7e:
         0f:58:b3:e7:56:70:4a:5a:30:23:95:44:59:e0:57:43:2f:88:
         b6:43:3b:0b:c3:60:7b:65:60:61:94:7e:cd:1b:11:12:0e:fb:
         5e:47:19:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:56:19 2026 by rpki-client