Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
File:                     7xM1mLsQVCEUaB6oajXfFpgxzwM.mft (raw, json)
Hash identifier:          c7dezLYBh0+oOcs3584WXgbqmW0YaPhtWfeVDk1C/X8=
Subject key identifier:   53:C0:EC:10:F9:98:B0:49:10:CB:F9:1A:28:CE:9A:31:33:30:C7:1A
Authority key identifier: EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03
Certificate issuer:       /CN=ef133598bb10542114681ea86a35df169831cf03
Certificate serial:       019F8F7E621B2167A8CF6DD40C384A67B616
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
Manifest number:          0A0A
Signing time:             Thu 23 Jul 2026 15:00:52 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:52 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:52 +0000
Files and hashes:         1: 7xM1mLsQVCEUaB6oajXfFpgxzwM.crl (hash: iJ6iD78BUIiLrMZF440JEoUa9v7hq4tq0msG5E34qXM=)
                          2: sMDnDS7b5WQ5D-JoFss-D-9gaX4.roa (hash: UIum8I7uAuNske5DioiLLh5KWIejx8PVPwTt3WKIKnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:62:1b:21:67:a8:cf:6d:d4:0c:38:4a:67:b6:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef133598bb10542114681ea86a35df169831cf03
        Validity
            Not Before: Jul 23 15:00:52 2026 GMT
            Not After : Jul 24 15:00:52 2026 GMT
        Subject: CN=53c0ec10f998b04910cbf91a28ce9a313330c71a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:85:5d:52:67:6c:2f:97:d2:6e:30:ad:5c:64:
                    14:74:46:26:8c:30:99:9c:9a:76:03:26:a5:bb:db:
                    4e:cd:d3:2e:af:cf:8d:3f:0f:76:ae:96:ab:d0:bc:
                    d6:e5:74:e1:a9:e7:c6:77:02:5c:4c:41:74:86:87:
                    9f:98:d4:ac:02:a8:9f:0e:c4:f1:0f:c2:47:39:05:
                    2f:1b:bb:f7:99:1e:96:27:3b:af:e5:53:95:12:04:
                    b6:a6:11:08:3b:a7:91:fc:30:e6:25:65:56:fa:b1:
                    2d:93:c6:d9:ae:9e:c9:a4:a8:48:31:00:fe:78:83:
                    81:32:d3:55:56:aa:92:e8:a2:44:0c:64:3b:5c:f1:
                    d7:8f:b8:d7:4f:d7:e1:2a:b7:7b:35:78:cb:e5:ab:
                    ae:32:dc:dc:1a:02:eb:e2:08:03:43:33:37:79:5f:
                    1c:b6:bc:9f:09:bb:ad:6a:56:d8:93:ce:21:87:5c:
                    43:2e:3b:7d:b7:b5:e2:ad:f0:b5:d3:36:19:06:14:
                    a0:ed:51:12:d7:35:1b:db:3b:8d:44:73:48:81:8c:
                    f9:c9:8f:1c:c7:9c:94:c0:d7:5d:a1:c0:02:91:d0:
                    5b:30:a8:9d:29:2f:2f:57:92:f1:53:b8:42:60:be:
                    36:46:55:49:e2:22:7e:9c:29:7f:81:08:7e:2d:8c:
                    23:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C0:EC:10:F9:98:B0:49:10:CB:F9:1A:28:CE:9A:31:33:30:C7:1A
            X509v3 Authority Key Identifier:
                keyid:EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:03:3e:5f:f3:75:40:41:31:1e:3f:d1:ae:22:4a:06:65:7f:
         a9:cd:c1:92:36:18:0f:d9:a4:03:e4:d3:60:d7:3e:61:ff:28:
         6c:68:3f:03:a1:df:26:54:54:5d:31:f5:08:7e:75:ae:fa:5a:
         98:d8:07:13:f4:d7:1e:2f:ac:2c:d6:49:d3:4f:64:ff:2d:a0:
         9a:87:da:89:c4:a8:3c:2d:c8:e3:b9:a3:39:c9:af:87:4b:b6:
         51:73:7a:77:11:33:9c:2c:b9:b4:d8:76:f2:76:67:22:18:5d:
         cd:85:76:47:df:5c:86:59:fa:65:94:a6:94:9f:b0:aa:45:f0:
         b8:cd:df:75:cb:25:6b:dc:75:a9:3f:77:93:fe:8f:34:43:7e:
         13:14:b5:0b:51:96:0a:8f:75:73:cc:7e:96:8d:8f:05:a5:f2:
         2c:7c:57:3d:3a:ec:74:58:7f:a0:44:e4:3d:99:90:e5:71:04:
         f4:45:2e:2b:b6:fc:0d:d8:ae:e3:90:65:1b:76:23:56:4a:41:
         5a:e3:33:34:a8:7d:2c:43:c8:ed:71:61:f8:ec:0e:d8:03:26:
         89:e4:de:f9:b0:66:6d:99:12:24:bd:00:f4:0f:ce:08:61:6c:
         a3:f4:83:47:49:d7:2b:97:ad:f5:e8:3e:73:8d:ff:0e:15:fc:
         ff:32:06:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PfmIbIWeoz23UDDhKZ7YWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMTMzNTk4YmIxMDU0MjExNDY4MWVhODZhMzVkZjE2OTgz
MWNmMDMwHhcNMjYwNzIzMTUwMDUyWhcNMjYwNzI0MTUwMDUyWjAzMTEwLwYDVQQD
Eyg1M2MwZWMxMGY5OThiMDQ5MTBjYmY5MWEyOGNlOWEzMTMzMzBjNzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YVdUmdsL5fSbjCtXGQUdEYmjDCZ
nJp2Ayalu9tOzdMur8+NPw92rpar0LzW5XThqefGdwJcTEF0hoefmNSsAqifDsTx
D8JHOQUvG7v3mR6WJzuv5VOVEgS2phEIO6eR/DDmJWVW+rEtk8bZrp7JpKhIMQD+
eIOBMtNVVqqS6KJEDGQ7XPHXj7jXT9fhKrd7NXjL5auuMtzcGgLr4ggDQzM3eV8c
tryfCbutalbYk84hh1xDLjt9t7XirfC10zYZBhSg7VES1zUb2zuNRHNIgYz5yY8c
x5yUwNddocACkdBbMKidKS8vV5LxU7hCYL42RlVJ4iJ+nCl/gQh+LYwjSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFPA7BD5mLBJEMv5GijOmjEzMMcaMB8GA1UdIwQY
MBaAFO8TNZi7EFQhFGgeqGo13xaYMc8DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3hNMW1Mc1FWQ0VVYUI2b2FqWGZGcGd4endNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80NWI5ZTMtNWZhNi00NTM0LTkxYWYt
ZjRjN2E3OTI1OTc1LzEvN3hNMW1Mc1FWQ0VVYUI2b2FqWGZGcGd4endNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS80NWI5ZTMtNWZhNi00NTM0LTkxYWYtZjRjN2E3OTI1OTc1
LzEvN3hNMW1Mc1FWQ0VVYUI2b2FqWGZGcGd4endNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKgM+X/N1
QEExHj/RriJKBmV/qc3BkjYYD9mkA+TTYNc+Yf8obGg/A6HfJlRUXTH1CH51rvpa
mNgHE/TXHi+sLNZJ009k/y2gmofaicSoPC3I47mjOcmvh0u2UXN6dxEznCy5tNh2
8nZnIhhdzYV2R99chln6ZZSmlJ+wqkXwuM3fdcsla9x1qT93k/6PNEN+ExS1C1GW
Co91c8x+lo2PBaXyLHxXPTrsdFh/oETkPZmQ5XEE9EUuK7b8Ddiu45BlG3YjVkpB
WuMzNKh9LEPI7XFh+OwO2AMmieTe+bBmbZkSJL0A9A/OCGFso/SDR0nXK5et9eg+
c43/DhX8/zIGVQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:17:17 2026 by rpki-client