Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.mft
File:                     7p_-U-YuKeqlvWqoF4mNPDj4_KQ.mft (raw, json)
Hash identifier:          t8+/cit0fZOZ0CHTrxMXJAi3Xq9Hj7LPwkML30XumJc=
Subject key identifier:   75:52:B7:71:94:03:5D:E1:8F:C2:0C:A2:18:97:C7:41:B6:7A:F8:E2
Authority key identifier: EE:9F:FE:53:E6:2E:29:EA:A5:BD:6A:A8:17:89:8D:3C:38:F8:FC:A4
Certificate issuer:       /CN=ee9ffe53e62e29eaa5bd6aa817898d3c38f8fca4
Certificate serial:       019F8F7E69039B1847C1E83B2BB31FC1750A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 15:00:53 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:53 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:53 +0000
Files and hashes:         1: 7p_-U-YuKeqlvWqoF4mNPDj4_KQ.crl (hash: XezzZYXW+oVYLB7JwrYzRvRhuxEYS/6nIIyanIC4rys=)
                          2: HknPQh-0Yk6yaxmwcZa5py8_zl0.roa (hash: wuIV5US3SZC05FFGszlUmrIVNWyDFMwcOW0Vs4e0MUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:69:03:9b:18:47:c1:e8:3b:2b:b3:1f:c1:75:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee9ffe53e62e29eaa5bd6aa817898d3c38f8fca4
        Validity
            Not Before: Jul 23 15:00:53 2026 GMT
            Not After : Jul 24 15:00:53 2026 GMT
        Subject: CN=7552b77194035de18fc20ca21897c741b67af8e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:da:2c:11:bb:68:d9:87:0c:72:e8:31:ba:00:
                    7f:7d:72:4d:52:f9:6a:82:55:92:d6:ae:aa:ec:e3:
                    be:ba:68:d3:9d:14:56:a7:24:d5:79:5e:ca:11:c0:
                    6c:39:48:d4:3b:88:73:ff:03:ee:59:db:e6:f4:a4:
                    5f:cd:02:e2:80:43:6f:a9:43:91:0a:d1:e2:20:0c:
                    06:40:25:94:cb:50:7d:55:9e:ec:a0:b0:08:57:5c:
                    2d:98:a8:9c:26:58:c9:d4:6a:73:92:15:bd:60:9b:
                    e2:61:e4:78:17:1d:df:6b:54:d0:b5:2e:4d:98:b0:
                    7a:3c:51:3c:9a:07:22:c0:f3:ff:d5:22:7c:bb:9f:
                    5b:80:f8:30:92:fb:2e:ea:c0:00:a9:22:41:42:c8:
                    31:3d:e4:b2:3f:03:2c:94:87:27:6a:94:4b:72:1a:
                    4c:05:d8:49:3f:88:d8:b3:1b:d2:b3:18:0f:21:aa:
                    64:04:d8:64:ea:05:28:17:48:48:cd:39:fb:e2:8f:
                    42:b5:7c:3b:10:c8:7b:43:d9:fa:7f:a3:b7:a1:78:
                    02:36:5e:07:4d:ee:b6:42:5b:13:a7:d7:38:1a:69:
                    89:da:ea:1c:b5:77:71:e9:14:02:60:7f:44:67:0d:
                    74:ee:b2:4f:70:ad:67:9b:9b:7d:d1:e8:00:8a:11:
                    ee:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:52:B7:71:94:03:5D:E1:8F:C2:0C:A2:18:97:C7:41:B6:7A:F8:E2
            X509v3 Authority Key Identifier:
                keyid:EE:9F:FE:53:E6:2E:29:EA:A5:BD:6A:A8:17:89:8D:3C:38:F8:FC:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:f4:33:b0:7f:5a:ed:a8:03:1b:14:66:93:34:7c:0a:ec:75:
         86:f1:8a:a8:fa:e3:c0:46:cf:99:63:4f:a5:67:90:bd:3b:55:
         81:0e:f2:a5:46:0c:30:8b:2d:c6:45:e6:65:8e:3e:5e:1d:81:
         62:57:49:a8:7e:68:99:a7:45:bc:bf:10:0a:40:f4:1f:64:16:
         93:c8:8e:55:35:ac:17:3e:5a:6a:37:6f:b0:d2:83:ed:b8:b7:
         bd:49:5f:84:97:76:50:30:5d:4e:4b:62:3f:9d:10:e5:6a:4a:
         0e:6b:ae:1f:b7:e3:37:e5:f9:d2:2c:ae:cc:a7:1c:82:7d:57:
         83:f2:98:9e:60:3d:83:6b:89:62:eb:7e:d9:78:25:4b:2e:11:
         ed:e8:e8:eb:12:a0:bf:98:d1:06:1a:8c:39:8d:92:d2:c5:55:
         7f:63:b6:ca:d9:13:ab:f8:fc:2a:47:e0:f0:9a:62:07:10:57:
         eb:a7:97:5a:c7:cc:8c:51:40:73:a0:4d:65:e6:9c:55:a2:17:
         7f:3e:4b:5a:23:5f:91:50:86:e1:56:fb:c3:ca:61:af:1b:70:
         90:99:04:65:80:48:0a:83:c7:62:e8:4e:4b:19:ef:9e:20:aa:
         a3:98:57:b1:c8:dd:2c:37:63:02:51:4e:b5:c0:ea:ab:4d:2d:
         02:9c:50:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:37 2026 by rpki-client