Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
File:                     A7sK13ZWE5U7krbL9M2pP5wTcuY.mft (raw, json)
Hash identifier:          zaNdk6lbFLSXU6ugtwH7IK+02fAGjPomc1OAS0SQUd4=
Subject key identifier:   78:93:DF:2D:97:2A:33:23:72:93:B6:FF:CD:71:E6:5C:69:F6:55:38
Authority key identifier: 03:BB:0A:D7:76:56:13:95:3B:92:B6:CB:F4:CD:A9:3F:9C:13:72:E6
Certificate issuer:       /CN=03bb0ad7765613953b92b6cbf4cda93f9c1372e6
Certificate serial:       019F8EA21609439E12BE162ABF464194D85E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
Manifest number:          0649
Signing time:             Thu 23 Jul 2026 11:00:14 +0000
Manifest this update:     Thu 23 Jul 2026 11:00:14 +0000
Manifest next update:     Fri 24 Jul 2026 11:00:14 +0000
Files and hashes:         1: 8ysjWfo50oYB18bxQ9D9a3-kZCE.asa (hash: 3Bf1TDm5M4w9EIZ76rBYWXtw2Bws6ycg1lO/t+ClFIU=)
                          2: A7sK13ZWE5U7krbL9M2pP5wTcuY.crl (hash: Pcp9Vens7yHaloxswcbmnV9PZbRvzlLehxvnS+xnchw=)
                          3: DBrxR8mTi6SEhBmvb30k8Eb8j2s.roa (hash: h24c3qKtryXONntLsae9vJY3swqsjyg/ugcW2+IoENk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:16:09:43:9e:12:be:16:2a:bf:46:41:94:d8:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bb0ad7765613953b92b6cbf4cda93f9c1372e6
        Validity
            Not Before: Jul 23 11:00:14 2026 GMT
            Not After : Jul 24 11:00:14 2026 GMT
        Subject: CN=7893df2d972a33237293b6ffcd71e65c69f65538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6c:b2:1c:0f:2d:ba:25:99:42:bb:41:0f:77:
                    55:17:b8:65:37:dc:33:86:6d:ac:6c:63:d7:4b:34:
                    d7:0a:a5:2a:5f:c6:e5:c3:d1:68:57:96:c9:e0:c0:
                    05:6b:f1:2a:74:36:12:23:94:02:90:e1:20:e2:be:
                    46:dc:61:9f:7c:aa:6b:d4:71:50:a8:3f:00:60:b6:
                    e3:b4:da:64:ce:3b:fc:86:18:59:5c:a4:66:bb:3b:
                    be:35:62:eb:40:de:ba:60:64:02:c7:88:91:83:24:
                    db:81:2d:a4:a4:f6:70:ca:7c:cf:db:9e:e4:07:eb:
                    56:71:52:22:8c:a7:21:e0:ac:33:1c:20:3f:a5:0f:
                    18:d5:9c:b0:cb:1a:2e:be:18:ba:6b:e4:c0:ec:2f:
                    c1:c0:95:f3:d1:0a:15:e0:f9:42:ec:f5:22:5b:37:
                    90:84:18:3b:47:79:fd:43:db:3e:02:d4:1f:88:23:
                    5d:52:5b:c2:d9:7b:30:64:13:87:ca:0f:82:9a:20:
                    8c:05:3f:1f:42:5b:0d:93:17:9a:bf:a7:39:8d:3a:
                    08:25:0a:78:b6:c9:4e:99:4c:a9:0e:2e:5f:fa:ac:
                    0a:9c:08:75:c4:57:6a:dc:90:74:da:4e:32:06:89:
                    f9:0b:84:22:bb:b6:d8:af:be:2b:8b:8a:03:51:f7:
                    e3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:93:DF:2D:97:2A:33:23:72:93:B6:FF:CD:71:E6:5C:69:F6:55:38
            X509v3 Authority Key Identifier:
                keyid:03:BB:0A:D7:76:56:13:95:3B:92:B6:CB:F4:CD:A9:3F:9C:13:72:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:4f:d2:e8:53:a4:a6:0f:3a:13:e4:ba:67:12:37:f4:8f:9d:
         7f:fc:f4:9b:c6:71:ce:06:e7:8f:37:8a:91:5c:2c:02:37:29:
         c5:3f:3e:cf:b7:29:27:4c:48:16:80:d8:e4:06:2a:1e:20:4b:
         96:fc:28:11:1b:f5:e6:51:e8:70:dc:21:db:43:55:34:83:13:
         c8:ee:a7:0d:1b:bf:de:55:2c:f0:ba:bf:d0:3e:63:c7:1a:df:
         97:71:34:3b:10:c3:48:88:9e:b0:7b:2d:6b:b0:8b:81:60:f1:
         a7:1c:9f:00:26:53:ee:8d:5b:37:d0:da:a9:a9:fd:35:7c:9c:
         ad:46:51:6c:04:4f:02:c3:ad:53:01:9d:c7:d0:7c:f4:c0:3f:
         c1:49:76:ef:b1:26:93:17:12:3e:8b:7c:a2:98:ae:ac:8b:f9:
         db:63:09:2b:15:a7:a1:1f:18:60:5d:89:2f:45:65:65:9a:ee:
         48:4b:18:fb:a1:da:48:86:03:c7:e3:42:93:8b:37:79:93:b7:
         c1:01:a5:84:c2:ff:3a:7c:69:6c:af:26:ca:a6:b0:a0:b8:1e:
         d3:a9:3e:c0:03:ac:54:e0:fc:e5:e2:ef:ef:86:9f:7f:b1:a8:
         eb:87:06:3e:cd:aa:a5:5c:23:0e:55:86:33:b4:3a:8e:8f:64:
         12:91:b6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:09:39 2026 by rpki-client