Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft
File:                     7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft (raw, json)
Hash identifier:          KbmIxNTMg1KRrnFqICxx9jGrVfLfYD0OrA916knu6sU=
Subject key identifier:   CE:B4:6F:25:02:DF:1A:0A:7B:0B:E9:BE:0E:C2:41:A6:7A:CD:16:ED
Authority key identifier: EC:EE:47:0B:F5:10:99:76:93:4F:51:E7:EA:EF:21:07:79:A2:C4:DE
Certificate issuer:       /CN=ecee470bf5109976934f51e7eaef210779a2c4de
Certificate serial:       019F916D5D98363FB960CDD34F706D37A852
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft
Manifest number:          19C7
Signing time:             Fri 24 Jul 2026 00:01:31 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:31 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:31 +0000
Files and hashes:         1: 7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl (hash: fkjfRClB7nGvKkEee67TMqddlqYvB2JoIoH2ofdqWgY=)
                          2: i9futBXgsX5FN5Oy7LRhwMH28E8.roa (hash: O7Qfk152zcRaRv43cCEp1BeLvPwD5mzKuSykiTRHSEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:5d:98:36:3f:b9:60:cd:d3:4f:70:6d:37:a8:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecee470bf5109976934f51e7eaef210779a2c4de
        Validity
            Not Before: Jul 24 00:01:31 2026 GMT
            Not After : Jul 25 00:01:31 2026 GMT
        Subject: CN=ceb46f2502df1a0a7b0be9be0ec241a67acd16ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:38:15:88:1e:79:b3:c4:01:b7:a9:32:cf:22:
                    af:fb:cf:3b:79:97:9c:2d:85:94:d0:65:4f:21:e5:
                    0e:7b:b9:5f:4d:51:98:8f:cb:0d:b8:a5:86:2a:89:
                    53:ad:1b:d2:f6:ea:97:9a:1e:ad:ae:0d:4e:70:52:
                    81:27:6c:e0:f0:43:43:76:74:6d:76:fc:8e:c1:84:
                    d5:0f:25:28:cf:f8:97:76:de:d6:d6:d1:b7:e5:db:
                    56:53:81:c5:19:2e:c2:48:35:8d:9d:9d:fa:81:d5:
                    7b:30:67:10:2f:ae:f2:08:45:69:19:eb:8e:25:35:
                    c2:3c:11:36:89:6b:10:03:2e:a4:fe:10:76:5c:d4:
                    83:85:e0:65:df:50:7e:16:b8:7b:ca:39:06:95:1b:
                    80:7a:af:3d:07:13:26:97:4b:0a:30:af:03:95:7e:
                    96:d4:55:ca:e2:e3:10:6f:52:d2:8f:b5:16:84:27:
                    8d:2e:83:43:94:18:6a:82:bb:37:c6:10:e2:99:66:
                    0f:eb:c4:41:29:60:cc:73:41:32:b8:8a:2f:16:f1:
                    29:40:eb:87:b1:a1:93:5a:c9:ad:20:89:bd:9c:9c:
                    41:a1:23:81:24:cc:00:b0:20:d0:24:8b:38:43:39:
                    7e:d1:81:99:9a:27:a2:69:23:59:06:25:3c:b9:86:
                    4c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B4:6F:25:02:DF:1A:0A:7B:0B:E9:BE:0E:C2:41:A6:7A:CD:16:ED
            X509v3 Authority Key Identifier:
                keyid:EC:EE:47:0B:F5:10:99:76:93:4F:51:E7:EA:EF:21:07:79:A2:C4:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:58:b4:c3:fe:01:50:0d:42:10:7a:6c:17:02:52:a7:2a:95:
         ef:a0:33:f4:2b:f9:6d:a6:f6:0e:54:51:39:a7:7d:3c:3d:23:
         f4:62:57:b4:00:b2:8c:d5:68:60:45:f3:73:3a:9b:af:e1:0f:
         f9:4f:f6:9f:cc:5e:55:f2:50:09:13:8d:40:58:bc:b3:38:d3:
         a5:4d:2d:2b:35:59:91:1e:8f:f0:f2:7f:23:12:dc:60:cc:65:
         01:21:66:4b:e0:49:bb:9a:7e:0b:e0:4c:7a:4e:45:19:7a:02:
         5e:c0:af:35:7d:16:a2:0a:0c:40:fe:ae:27:94:99:e4:a9:b3:
         6c:62:76:9d:dd:4b:86:e3:f8:4c:37:10:89:73:b3:95:79:05:
         d4:23:74:a7:51:c9:73:f2:44:88:6c:31:83:44:bf:3d:85:d4:
         aa:b9:a9:e3:5b:35:9a:54:30:74:6c:af:70:c8:de:5d:9f:bd:
         83:cf:33:c4:84:d7:c2:eb:7b:5d:63:0b:7e:ca:f3:19:66:fb:
         b9:74:ad:28:82:d9:ac:e4:71:f4:65:3e:f6:04:b3:80:5a:d4:
         83:0c:f7:ba:9b:a5:4f:bd:96:1e:6e:03:1f:8b:47:fb:42:95:
         89:b8:ef:b9:15:d2:b7:59:2b:3f:80:49:0e:44:5e:c1:82:55:
         70:29:f9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:06:32 2026 by rpki-client