Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft
File:                     7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft (raw, json)
Hash identifier:          /fK6zPfkrOsdxSNhPwuNwcb7uKBiStgi0H4AAstCKDE=
Subject key identifier:   EB:67:4B:F4:05:0F:09:73:F4:2B:2E:16:75:53:8B:5A:D5:F7:16:5E
Authority key identifier: EC:91:7C:0A:FD:A4:49:EC:C0:42:9C:04:6D:F5:0F:BC:95:9B:4E:EA
Certificate issuer:       /CN=ec917c0afda449ecc0429c046df50fbc959b4eea
Certificate serial:       019F924895B0E7477F8287BF6CA8D6C38405
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft
Manifest number:          1942
Signing time:             Fri 24 Jul 2026 04:00:58 +0000
Manifest this update:     Fri 24 Jul 2026 04:00:58 +0000
Manifest next update:     Sat 25 Jul 2026 04:00:58 +0000
Files and hashes:         1: 7JF8Cv2kSezAQpwEbfUPvJWbTuo.crl (hash: L0tqX5WAv1bDndO+0Og/+LegVGqlxeuZ2Y6D584dlYc=)
                          2: eZj5aI-pFV4NqPbPLKEKvj8QCIY.roa (hash: Ql1Y8D/xx7OIIHVESezWmyzRYEY4CZx9sPnyUIH5jGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:95:b0:e7:47:7f:82:87:bf:6c:a8:d6:c3:84:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec917c0afda449ecc0429c046df50fbc959b4eea
        Validity
            Not Before: Jul 24 04:00:58 2026 GMT
            Not After : Jul 25 04:00:58 2026 GMT
        Subject: CN=eb674bf4050f0973f42b2e1675538b5ad5f7165e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b4:fa:81:3f:e2:02:f9:cc:ee:68:eb:1d:bc:
                    92:1f:6e:64:20:9e:f8:a6:7b:64:f1:a6:f4:36:22:
                    23:9d:e5:b3:74:5d:66:f4:0e:d1:b3:f4:45:16:db:
                    ca:1c:d7:9a:38:8d:c5:e7:66:48:32:d4:57:1a:29:
                    50:03:f3:e9:ea:2e:7f:95:b0:5f:1b:09:58:2f:90:
                    bb:8c:69:bb:a3:d5:23:15:b4:4b:1a:3a:1c:75:3b:
                    64:1f:3e:1f:23:7e:de:80:cd:64:59:5e:e8:db:5a:
                    d5:ec:6e:1f:27:02:32:af:fb:1d:ea:97:07:6a:f0:
                    3d:b4:e1:e4:02:a0:c1:25:01:cf:da:b0:f4:2c:9f:
                    3b:fc:0f:23:4d:6b:fc:90:00:d3:33:72:77:e1:eb:
                    3c:54:14:1f:36:b9:10:b3:2f:05:ba:b5:16:2f:74:
                    27:9a:c8:8b:f4:b4:5b:d0:59:80:a9:b9:58:da:4b:
                    ba:ad:d9:88:41:3f:b3:b4:81:78:a7:8b:54:05:9a:
                    ce:69:fd:0d:fa:52:de:e1:fa:51:c6:6a:6f:ad:1a:
                    c8:1b:3b:22:8b:1b:6d:dd:a8:87:86:a4:56:d1:0b:
                    d8:c1:37:25:04:4e:58:38:a5:1b:ac:4b:77:63:7f:
                    3f:80:77:b5:13:2a:86:b1:89:e9:5d:ed:5f:71:41:
                    45:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:67:4B:F4:05:0F:09:73:F4:2B:2E:16:75:53:8B:5A:D5:F7:16:5E
            X509v3 Authority Key Identifier:
                keyid:EC:91:7C:0A:FD:A4:49:EC:C0:42:9C:04:6D:F5:0F:BC:95:9B:4E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:b0:59:6b:0a:88:45:63:ee:b8:18:8b:da:01:be:da:9f:40:
         72:47:63:ab:c2:4f:2e:2a:48:49:e5:54:57:ab:02:9a:8d:7c:
         bc:87:97:d5:09:c4:79:f9:38:3e:b7:5b:9d:df:a8:b7:6d:7c:
         ae:e4:36:6d:c5:73:43:c2:b0:4d:cd:7a:a0:04:a6:68:d5:69:
         57:04:c7:16:05:7f:06:8e:76:f1:ab:a5:52:27:50:90:48:fe:
         67:97:f6:06:1e:89:05:e8:a8:ff:2c:5a:86:48:86:01:3a:a7:
         b6:97:00:40:ea:51:63:7d:b5:d0:38:e4:c3:f7:e9:cb:f4:1e:
         c5:12:fe:e4:4a:00:2d:8e:92:6a:93:95:48:dd:58:54:46:36:
         50:b5:68:6b:1e:68:41:78:cf:6a:e6:8d:02:d1:8b:fc:f6:ac:
         5f:24:bc:af:4e:a5:c6:fd:e3:24:95:4a:c5:ce:76:4b:29:18:
         93:19:af:e1:e0:ce:95:6b:a8:5f:12:11:34:35:d1:c4:f1:c8:
         89:a2:c3:fb:57:47:f5:ef:50:9d:f3:31:15:72:aa:ce:eb:91:
         4d:98:9b:e4:5e:6b:f9:c6:8d:23:78:49:54:60:3b:23:a3:02:
         cd:4c:25:ee:58:80:54:36:32:d3:a4:b5:c9:b6:58:f7:b7:d7:
         a8:74:02:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSJWw50d/goe/bKjWw4QFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjOTE3YzBhZmRhNDQ5ZWNjMDQyOWMwNDZkZjUwZmJjOTU5
YjRlZWEwHhcNMjYwNzI0MDQwMDU4WhcNMjYwNzI1MDQwMDU4WjAzMTEwLwYDVQQD
EyhlYjY3NGJmNDA1MGYwOTczZjQyYjJlMTY3NTUzOGI1YWQ1ZjcxNjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrT6gT/iAvnM7mjrHbySH25kIJ74
pntk8ab0NiIjneWzdF1m9A7Rs/RFFtvKHNeaOI3F52ZIMtRXGilQA/Pp6i5/lbBf
GwlYL5C7jGm7o9UjFbRLGjocdTtkHz4fI37egM1kWV7o21rV7G4fJwIyr/sd6pcH
avA9tOHkAqDBJQHP2rD0LJ87/A8jTWv8kADTM3J34es8VBQfNrkQsy8FurUWL3Qn
msiL9LRb0FmAqblY2ku6rdmIQT+ztIF4p4tUBZrOaf0N+lLe4fpRxmpvrRrIGzsi
ixtt3aiHhqRW0QvYwTclBE5YOKUbrEt3Y38/gHe1EyqGsYnpXe1fcUFFOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtnS/QFDwlz9CsuFnVTi1rV9xZeMB8GA1UdIwQY
MBaAFOyRfAr9pEnswEKcBG31D7yVm07qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0pGOEN2MmtTZXpBUXB3RWJmVVB2SldiVHVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9jODhhOGYtN2JlMC00ZTQwLTljZTYt
ZDI1MmE1NzRhZThkLzEvN0pGOEN2MmtTZXpBUXB3RWJmVVB2SldiVHVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9jODhhOGYtN2JlMC00ZTQwLTljZTYtZDI1MmE1NzRhZThk
LzEvN0pGOEN2MmtTZXpBUXB3RWJmVVB2SldiVHVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFbBZawqI
RWPuuBiL2gG+2p9Ackdjq8JPLipISeVUV6sCmo18vIeX1QnEefk4Prdbnd+ot218
ruQ2bcVzQ8KwTc16oASmaNVpVwTHFgV/Bo528aulUidQkEj+Z5f2Bh6JBeio/yxa
hkiGATqntpcAQOpRY3210Djkw/fpy/QexRL+5EoALY6SapOVSN1YVEY2ULVoax5o
QXjPauaNAtGL/PasXyS8r06lxv3jJJVKxc52SykYkxmv4eDOlWuoXxIRNDXRxPHI
iaLD+1dH9e9QnfMxFXKqzuuRTZib5F5r+caNI3hJVGA7I6MCzUwl7liAVDYy06S1
ybZY97fXqHQC2Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:05:56 2026 by rpki-client