Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft
File:                     7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft (raw, json)
Hash identifier:          qdqimJTem/CNGkspZUuO3+VLYayRdLWdyLYIf2aCFjo=
Subject key identifier:   CA:CA:E4:5F:AC:76:E3:31:C1:DA:F2:9A:AA:C6:7C:95:36:66:30:A9
Authority key identifier: ED:D4:82:C2:BE:E8:46:00:48:D8:29:02:CE:C9:86:72:05:22:29:97
Certificate issuer:       /CN=edd482c2bee8460048d82902cec9867205222997
Certificate serial:       019F905A5CF08298C7D8763E778FAD00CEBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7dSCwr7oRgBI2CkCzsmGcgUiKZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft
Manifest number:          1958
Signing time:             Thu 23 Jul 2026 19:01:08 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:08 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:08 +0000
Files and hashes:         1: 7dSCwr7oRgBI2CkCzsmGcgUiKZc.crl (hash: v7UcsLll5dAV93uqjjrYv1+K5/AfK10TT3pdChCMdKo=)
                          2: kZTziAa0DgXcVz_jjt8ocyWshEA.roa (hash: k50z4fUJByZtjEgPsuwfKj4Iy/ObhXOJlHABsB/DwCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7dSCwr7oRgBI2CkCzsmGcgUiKZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:5c:f0:82:98:c7:d8:76:3e:77:8f:ad:00:ce:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edd482c2bee8460048d82902cec9867205222997
        Validity
            Not Before: Jul 23 19:01:08 2026 GMT
            Not After : Jul 24 19:01:08 2026 GMT
        Subject: CN=cacae45fac76e331c1daf29aaac67c95366630a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c1:ed:d7:b9:88:c4:6a:c0:d5:9d:f0:8a:d4:
                    cc:cd:06:97:08:c6:43:84:a4:6e:96:9e:63:a8:8f:
                    e9:7a:3c:52:97:54:b2:c9:f8:8a:a4:ea:63:6d:25:
                    81:f0:af:f0:42:17:8a:8e:2f:42:19:43:68:2d:64:
                    89:41:7c:f0:67:6c:26:42:69:8b:ab:7b:10:31:54:
                    87:96:e6:05:1c:75:24:b8:0c:a0:0d:ad:ce:d9:d2:
                    0f:bc:4a:ac:3b:7e:35:3d:bc:0e:11:ab:c3:60:4b:
                    4e:33:5a:39:96:b9:1b:ea:48:c3:52:c2:73:62:ce:
                    6c:a5:14:6e:9f:6e:e2:3c:16:6b:90:be:4d:04:5b:
                    68:09:8b:e8:c5:bf:f6:69:65:f7:9a:d6:60:2a:69:
                    92:8c:8a:3c:c0:a8:cc:73:30:c1:c1:ac:48:83:34:
                    ee:70:11:3c:d8:6b:9e:f0:91:4b:c5:ad:a8:70:a8:
                    6a:f5:7b:fb:67:a6:27:59:89:fc:9a:d8:7a:af:20:
                    d2:42:47:6f:e8:0f:7e:07:19:c7:44:20:49:80:80:
                    d9:bb:3a:a6:a8:b8:55:72:b1:75:41:f1:be:16:7b:
                    10:6d:6f:a6:3f:d0:73:24:39:95:dd:f1:4b:9c:bf:
                    57:e2:b5:35:12:98:2e:46:16:3e:e8:86:cd:ae:d6:
                    d1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:CA:E4:5F:AC:76:E3:31:C1:DA:F2:9A:AA:C6:7C:95:36:66:30:A9
            X509v3 Authority Key Identifier:
                keyid:ED:D4:82:C2:BE:E8:46:00:48:D8:29:02:CE:C9:86:72:05:22:29:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dSCwr7oRgBI2CkCzsmGcgUiKZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:f0:66:ea:27:bd:43:d4:2d:5b:0e:ff:9b:6f:39:cf:4f:52:
         09:1a:67:9e:7e:d1:a6:ae:9d:88:e4:eb:b4:03:08:2c:e8:52:
         cf:5f:58:5d:ee:bf:5e:eb:cc:94:82:27:c4:97:cc:61:08:fd:
         ba:47:86:26:3c:7c:cf:89:de:19:b2:6d:42:2c:b4:3b:7d:1b:
         04:c5:50:f6:81:97:d1:8f:b4:73:87:4e:18:87:02:64:f8:8b:
         86:e5:9f:dc:7f:52:db:87:49:32:f2:26:cc:3c:24:af:6d:3c:
         b5:3d:67:32:83:83:ea:4d:95:7e:14:83:06:af:1a:31:39:e5:
         cc:59:4e:4b:3a:b1:39:1a:e6:bd:2b:fd:cb:2b:62:33:b6:41:
         90:c8:07:03:90:96:7f:58:6d:70:1d:57:dc:03:02:61:ae:ab:
         67:48:c8:fa:e2:f9:01:23:c2:53:f1:37:8f:4b:31:eb:f0:64:
         9f:d8:af:77:a2:ff:ce:80:be:94:32:09:4d:06:c7:08:9f:5c:
         a5:da:ed:b1:d8:96:95:18:b6:1d:40:ce:54:50:fd:ce:2b:ea:
         8d:b6:c9:a9:4f:a8:5a:41:cd:32:fb:62:c1:da:02:2f:be:8d:
         1b:7e:1c:ac:6a:1d:a5:62:4b:f0:48:36:51:90:a8:84:41:71:
         99:a4:6c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:14:54 2026 by rpki-client