Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/7VxHFPIguKxeq3Au-sEaEUJdCmk.mft
File:                     7VxHFPIguKxeq3Au-sEaEUJdCmk.mft (raw, json)
Hash identifier:          85Q4eZOt0WDtS/2o7+K4wwPLMCRYuFoUCHN1l9pS41c=
Subject key identifier:   89:36:26:A7:7F:93:33:D2:26:10:FA:B9:10:66:95:6F:A1:9F:01:77
Authority key identifier: ED:5C:47:14:F2:20:B8:AC:5E:AB:70:2E:FA:C1:1A:11:42:5D:0A:69
Certificate issuer:       /CN=ed5c4714f220b8ac5eab702efac11a11425d0a69
Certificate serial:       019F8F1071FB367C57E9AB95EEF9AACD4BB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7VxHFPIguKxeq3Au-sEaEUJdCmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/7VxHFPIguKxeq3Au-sEaEUJdCmk.mft
Manifest number:          02A6
Signing time:             Thu 23 Jul 2026 13:00:47 +0000
Manifest this update:     Thu 23 Jul 2026 13:00:47 +0000
Manifest next update:     Fri 24 Jul 2026 13:00:47 +0000
Files and hashes:         1: 7VxHFPIguKxeq3Au-sEaEUJdCmk.crl (hash: 4qTlJruLYyMMHFKXj8pS5wGXIZnLKGHwsJSTwWoDygQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/7VxHFPIguKxeq3Au-sEaEUJdCmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/7VxHFPIguKxeq3Au-sEaEUJdCmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7VxHFPIguKxeq3Au-sEaEUJdCmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:10:71:fb:36:7c:57:e9:ab:95:ee:f9:aa:cd:4b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed5c4714f220b8ac5eab702efac11a11425d0a69
        Validity
            Not Before: Jul 23 13:00:47 2026 GMT
            Not After : Jul 24 13:00:47 2026 GMT
        Subject: CN=893626a77f9333d22610fab91066956fa19f0177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:40:b6:08:31:fb:bc:19:00:19:90:15:f1:92:
                    3d:14:e0:49:a6:b3:1e:ac:19:af:e0:41:3d:b8:7d:
                    26:9f:81:f6:e6:0b:7e:92:65:d2:1e:31:44:0b:27:
                    fa:f9:01:21:08:40:f8:14:3f:37:12:23:06:fb:d4:
                    3a:1f:64:9f:bd:1f:93:85:4c:0c:70:16:0f:df:95:
                    a2:96:6a:7d:44:bf:91:2a:46:74:4a:3b:c4:e9:c7:
                    3a:1c:bf:33:68:44:92:b5:31:f8:0c:eb:3f:17:fd:
                    a0:92:c9:bf:a3:80:24:69:d2:12:62:b9:25:42:6a:
                    97:b7:7d:f2:25:75:b1:24:8d:4c:59:3e:6c:bf:ad:
                    b6:1b:5e:0c:c1:3f:96:b7:50:fc:98:9f:9c:e8:45:
                    7c:a0:cb:aa:75:13:44:0a:a6:d4:ae:2b:6f:53:0c:
                    0b:cb:47:0d:9b:ef:13:9c:04:20:53:cc:17:90:b3:
                    51:9c:32:fe:94:b9:c6:71:98:6e:71:e0:b4:02:f2:
                    08:ab:32:e0:bf:85:c5:b4:b8:80:25:b4:57:91:ef:
                    df:b8:04:49:22:e1:29:44:64:fa:8c:fc:e8:bc:e5:
                    59:1f:5e:1f:a1:e2:db:a1:2a:c3:77:57:e0:4d:ff:
                    2b:e6:68:98:ee:29:c5:2e:14:da:45:3c:ce:4a:a1:
                    6a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:36:26:A7:7F:93:33:D2:26:10:FA:B9:10:66:95:6F:A1:9F:01:77
            X509v3 Authority Key Identifier:
                keyid:ED:5C:47:14:F2:20:B8:AC:5E:AB:70:2E:FA:C1:1A:11:42:5D:0A:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VxHFPIguKxeq3Au-sEaEUJdCmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/7VxHFPIguKxeq3Au-sEaEUJdCmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/7VxHFPIguKxeq3Au-sEaEUJdCmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:6d:0e:73:be:66:48:e3:83:4f:55:78:72:24:bc:d2:7f:91:
         cc:2c:df:12:83:e3:18:bf:5d:b6:1a:61:69:61:cc:98:72:30:
         c5:8a:4e:e1:2b:6c:4b:09:29:6b:66:8f:ca:f8:98:d9:4b:76:
         cc:30:c9:63:d5:8a:15:60:c4:8e:22:16:f0:d5:1d:e6:37:a6:
         af:45:63:2f:19:d2:ee:76:bb:8f:b7:0a:b2:2f:6a:2e:59:13:
         f3:7e:1e:74:bf:1a:cc:2a:ab:4c:4c:f9:96:84:4f:ba:73:e5:
         da:91:77:31:f0:d1:91:6a:cf:63:40:d2:2d:ae:14:e0:57:59:
         89:76:4e:4c:b6:63:51:12:e3:14:0d:5c:80:cc:46:cb:99:da:
         47:34:57:b6:1a:3f:8f:3b:56:41:26:36:da:13:1f:26:c2:0f:
         5c:a3:31:33:e1:00:29:2c:7c:e2:09:ba:7c:4b:a6:bc:e6:1c:
         e1:12:b6:38:64:3d:88:0e:55:1f:52:80:da:88:b6:40:8f:90:
         9f:a1:df:0c:da:9b:4e:0e:75:40:4a:b9:b1:8c:5a:62:e5:cd:
         c5:c6:b0:7c:59:48:dc:56:46:46:86:e0:51:2b:50:c8:a9:46:
         90:b5:a9:39:d5:7d:67:e5:2e:11:dc:47:a3:85:9d:fc:0b:cf:
         7c:af:ac:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PEHH7NnxX6auV7vmqzUu4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNWM0NzE0ZjIyMGI4YWM1ZWFiNzAyZWZhYzExYTExNDI1
ZDBhNjkwHhcNMjYwNzIzMTMwMDQ3WhcNMjYwNzI0MTMwMDQ3WjAzMTEwLwYDVQQD
Eyg4OTM2MjZhNzdmOTMzM2QyMjYxMGZhYjkxMDY2OTU2ZmExOWYwMTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEC2CDH7vBkAGZAV8ZI9FOBJprMe
rBmv4EE9uH0mn4H25gt+kmXSHjFECyf6+QEhCED4FD83EiMG+9Q6H2SfvR+ThUwM
cBYP35Wilmp9RL+RKkZ0SjvE6cc6HL8zaESStTH4DOs/F/2gksm/o4AkadISYrkl
QmqXt33yJXWxJI1MWT5sv622G14MwT+Wt1D8mJ+c6EV8oMuqdRNECqbUritvUwwL
y0cNm+8TnAQgU8wXkLNRnDL+lLnGcZhuceC0AvIIqzLgv4XFtLiAJbRXke/fuARJ
IuEpRGT6jPzovOVZH14foeLboSrDd1fgTf8r5miY7inFLhTaRTzOSqFqMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIk2Jqd/kzPSJhD6uRBmlW+hnwF3MB8GA1UdIwQY
MBaAFO1cRxTyILisXqtwLvrBGhFCXQppMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1Z4SEZQSWd1S3hlcTNBdS1zRWFFVUpkQ21rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9iOThlOTAtNzk1ZC00MmM5LTk2OWEt
OWFiNjAxMjNlNjdmLzEvN1Z4SEZQSWd1S3hlcTNBdS1zRWFFVUpkQ21rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9iOThlOTAtNzk1ZC00MmM5LTk2OWEtOWFiNjAxMjNlNjdm
LzEvN1Z4SEZQSWd1S3hlcTNBdS1zRWFFVUpkQ21rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWW0Oc75m
SOODT1V4ciS80n+RzCzfEoPjGL9dthphaWHMmHIwxYpO4StsSwkpa2aPyviY2Ut2
zDDJY9WKFWDEjiIW8NUd5jemr0VjLxnS7na7j7cKsi9qLlkT834edL8azCqrTEz5
loRPunPl2pF3MfDRkWrPY0DSLa4U4FdZiXZOTLZjURLjFA1cgMxGy5naRzRXtho/
jztWQSY22hMfJsIPXKMxM+EAKSx84gm6fEumvOYc4RK2OGQ9iA5VH1KA2oi2QI+Q
n6HfDNqbTg51QEq5sYxaYuXNxcawfFlI3FZGRobgUStQyKlGkLWpOdV9Z+UuEdxH
o4Wd/AvPfK+sKQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:28:35 2026 by rpki-client