Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
File:                     ehJ9Y84cnzVXOQryH8BhBypSX04.mft (raw, json)
Hash identifier:          S3W5hzVXs/OL/EVvQUMEbV1yWJ1aQNxoVX0uvdcR3Ag=
Subject key identifier:   00:FF:81:BF:A1:C4:40:F1:A4:1B:9E:9D:39:A1:6A:7C:7E:FA:DA:0C
Authority key identifier: 7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
Certificate issuer:       /CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Certificate serial:       019F94DB33142532D55B339E9B1DD00DCE06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
Manifest number:          051F
Signing time:             Fri 24 Jul 2026 16:00:21 +0000
Manifest this update:     Fri 24 Jul 2026 16:00:21 +0000
Manifest next update:     Sat 25 Jul 2026 16:00:21 +0000
Files and hashes:         1: ehJ9Y84cnzVXOQryH8BhBypSX04.crl (hash: OXeHUCbhmKDonqAfRLSbLyq3vW45o9N6nkr7uiTjvlw=)
                          2: mryfSMsiVc0yv4FSUpt7qiqcwh4.roa (hash: 0IMb7oddMwh/zy5T4EnTss9mtPc9VXAUaEOcmqL1xfU=)
                          3: o_rtVjzkw0KDuX61bKwdi27cJvI.roa (hash: /gFVliPW+JCCvNfNfgkacSugBlyQGtqR4HbJDxkhEjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:db:33:14:25:32:d5:5b:33:9e:9b:1d:d0:0d:ce:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a127d63ce1c9f3557390af21fc061072a525f4e
        Validity
            Not Before: Jul 24 16:00:21 2026 GMT
            Not After : Jul 25 16:00:21 2026 GMT
        Subject: CN=00ff81bfa1c440f1a41b9e9d39a16a7c7efada0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:16:11:2b:b3:96:ac:da:22:3c:87:15:cb:ac:
                    6e:e8:6b:f1:56:02:de:99:0a:9a:0c:6a:d3:8c:7e:
                    92:78:13:62:bd:8f:2f:b5:21:73:62:7e:c8:7b:8f:
                    64:68:cc:5a:dd:41:9b:b6:e7:25:78:61:20:f8:e0:
                    b7:d7:cc:03:6a:ea:08:a0:3d:40:86:1b:61:08:c5:
                    ae:a9:b0:5f:f6:78:0b:08:c6:ac:c1:0b:75:2e:78:
                    53:a4:ef:5d:39:af:b1:7d:fd:e3:4a:bb:b5:08:7a:
                    66:52:24:c0:05:ed:3a:c1:0e:56:f2:8a:cf:27:d1:
                    4f:53:18:94:0d:5c:b5:cd:93:18:97:09:ff:3e:51:
                    18:46:72:7e:61:0d:7a:80:9d:e9:51:06:f8:21:4e:
                    5c:e1:68:c4:3b:4f:d4:9d:8b:8d:d1:ca:72:4e:0e:
                    7e:98:3e:0f:f0:b8:a4:f0:21:5f:04:d5:8c:17:f1:
                    9d:f7:5b:62:34:5d:a7:ed:a3:9e:7d:13:d1:8b:45:
                    2f:04:d8:24:1c:0c:80:ac:48:eb:93:6e:55:f7:05:
                    de:11:ed:bc:60:ff:df:42:49:fb:72:c4:6c:d4:8d:
                    84:53:83:f3:05:6a:d0:77:4a:30:71:d6:2b:c2:db:
                    14:fe:61:10:89:2c:9f:6b:f2:83:37:c4:28:6a:4f:
                    02:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FF:81:BF:A1:C4:40:F1:A4:1B:9E:9D:39:A1:6A:7C:7E:FA:DA:0C
            X509v3 Authority Key Identifier:
                keyid:7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:78:18:55:f1:75:1d:0a:ed:b0:b4:8c:ff:9c:c6:48:76:42:
         39:a7:7f:00:7c:92:0f:a0:18:78:2d:29:47:7e:86:88:1f:e2:
         ec:ee:a3:1e:fa:11:fe:6e:85:a6:6b:e9:4c:87:f8:e4:2c:5f:
         19:44:92:bb:ad:78:f6:0e:d0:bc:38:c2:17:28:dc:af:c5:8c:
         bd:3b:ea:cb:f8:e8:10:38:0d:72:79:ae:54:c0:d1:56:1f:dc:
         d4:63:4b:25:6e:fe:ab:72:7c:19:27:0e:a5:46:93:e8:66:91:
         30:c4:f2:15:6f:45:90:9b:3a:ed:d3:d7:dc:29:df:4b:c3:67:
         6c:d3:a9:dd:03:16:5c:3f:08:5a:13:62:f5:6c:d5:d5:5a:70:
         cc:26:c2:14:5b:19:7a:cb:e7:90:11:fe:18:aa:47:15:2a:7a:
         a3:00:62:ec:28:41:7c:10:ec:99:20:dd:be:da:15:2f:29:ed:
         42:65:4b:f1:97:62:11:ae:14:8e:89:42:ab:88:f4:03:37:a0:
         a7:54:8f:3b:b0:b2:25:d6:63:c6:59:29:1a:5a:3e:59:cb:85:
         f6:57:53:72:ab:78:91:d8:0c:4a:ca:52:45:44:a1:33:5a:13:
         a0:da:62:be:bd:a1:e4:f5:27:91:41:f0:a0:09:fb:19:79:64:
         d4:e4:4e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:05:56 2026 by rpki-client