Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
File:                     7qq8oRa05zqZRKuXAs-YZleANYA.mft (raw, json)
Hash identifier:          hPi99kyup6RcZWlaXMFDK6qhvM/5vjxQdMOfLty3DmI=
Subject key identifier:   84:13:D8:2E:F7:2F:F1:AD:0F:94:09:14:84:D8:CB:AE:A5:9C:AE:6B
Authority key identifier: EE:AA:BC:A1:16:B4:E7:3A:99:44:AB:97:02:CF:98:66:57:80:35:80
Certificate issuer:       /CN=eeaabca116b4e73a9944ab9702cf986657803580
Certificate serial:       019F9022FA91A76150208C824D95DCEA849E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
Manifest number:          060F
Signing time:             Thu 23 Jul 2026 18:00:39 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:39 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:39 +0000
Files and hashes:         1: 7qq8oRa05zqZRKuXAs-YZleANYA.crl (hash: sBnVLYX6aYFnx3SzPKeuZHg7icLniE+6ci/bMRkmeZU=)
                          2: QsP30C5AyyrplhJOQtwBFKHc2pI.roa (hash: 1rl1zPT5VgUb8N7x1I4JvxDOw2OsxnlXtnTYVUm9hGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:22:fa:91:a7:61:50:20:8c:82:4d:95:dc:ea:84:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeaabca116b4e73a9944ab9702cf986657803580
        Validity
            Not Before: Jul 23 18:00:39 2026 GMT
            Not After : Jul 24 18:00:39 2026 GMT
        Subject: CN=8413d82ef72ff1ad0f94091484d8cbaea59cae6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:10:3d:d8:85:30:4e:10:4c:2a:80:8d:92:e0:
                    bb:f5:c1:8a:dc:76:f3:85:e4:56:cd:76:d6:48:40:
                    cb:67:74:8e:1c:e6:4e:6d:be:26:d0:47:6c:90:fa:
                    5c:b1:b5:2d:31:70:3c:25:bc:40:67:72:ec:f9:f1:
                    9b:ea:8e:1b:40:40:35:ff:fd:85:b4:4a:41:10:e4:
                    03:26:98:a5:a1:d2:3e:7f:66:1a:03:f3:4b:41:c0:
                    2a:1e:02:62:f1:9e:b2:1f:fb:2b:69:8a:ed:ba:78:
                    a8:fb:72:f3:2d:a8:e6:73:31:59:af:5a:77:de:bb:
                    0e:83:40:61:11:42:15:cf:7c:a5:f7:a5:af:9c:58:
                    b4:8e:b7:65:44:52:14:65:ee:8e:c2:2a:36:e1:74:
                    3b:ed:ba:29:df:14:96:d2:50:f6:8a:04:b0:1c:6f:
                    22:15:a3:17:34:d2:78:85:35:0b:d7:9f:d2:41:0d:
                    a8:bb:13:b6:56:63:f5:6b:1d:c1:8a:c7:a9:48:3e:
                    88:cc:f5:c6:32:3e:e7:60:00:1f:ca:cd:22:6f:cf:
                    c3:c0:88:96:34:e2:6f:34:d2:f2:b1:1e:82:fd:54:
                    be:7c:32:e8:92:08:b6:7e:23:ff:2e:71:df:86:95:
                    e4:27:67:84:be:46:cd:a7:4f:bb:4e:2b:44:e7:32:
                    ec:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:13:D8:2E:F7:2F:F1:AD:0F:94:09:14:84:D8:CB:AE:A5:9C:AE:6B
            X509v3 Authority Key Identifier:
                keyid:EE:AA:BC:A1:16:B4:E7:3A:99:44:AB:97:02:CF:98:66:57:80:35:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:1f:86:f5:13:9b:39:fa:51:97:05:98:85:b2:90:51:72:d3:
         a1:f3:2f:ba:e7:b5:a5:a6:2b:e7:b2:78:cb:1a:e7:77:9c:b1:
         93:54:2a:65:76:40:72:a8:99:b5:83:4f:df:dd:80:c1:19:34:
         64:5b:24:25:37:0c:89:a3:60:3c:ad:69:65:1c:56:39:06:53:
         67:e5:93:ce:0c:54:ba:90:11:75:e1:c7:63:bd:47:b0:1c:47:
         be:2b:11:36:1a:0c:66:c2:3e:24:e6:9d:2b:5e:6d:57:35:d7:
         39:ef:a7:8a:cf:12:73:77:5e:15:50:ae:12:6b:32:1d:60:08:
         d2:f0:c7:06:84:43:61:cd:bf:81:63:5d:d1:37:53:84:75:25:
         29:ac:05:63:84:6d:ea:6b:a0:59:ca:19:5d:54:bd:7a:27:bc:
         c7:aa:00:36:cd:aa:c5:44:7c:19:87:fb:f6:f0:be:40:0e:94:
         93:bb:3d:14:92:41:dd:22:7d:99:de:e0:0c:a1:f8:73:c8:21:
         35:0f:b6:79:0c:f1:f8:98:3a:13:6c:95:5a:73:e0:41:ac:02:
         2a:8d:bd:74:bc:4a:e3:7d:9f:f0:b4:9a:17:bb:50:0a:16:2b:
         07:a1:18:1c:45:b4:e5:33:3c:92:e7:4d:9f:4d:40:e7:af:8b:
         52:ec:43:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:20:08 2026 by rpki-client