Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
File:                     7ixIe2tr3aIheQctkqjwHo5zZjQ.mft (raw, json)
Hash identifier:          Rig5T995YwGYpph1MmzE8sJhND8hf/qZQlMjoP19n8k=
Subject key identifier:   D3:72:F2:91:5D:25:45:70:6E:9C:AE:AD:AC:D3:14:69:7D:3E:19:D7
Authority key identifier: EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34
Certificate issuer:       /CN=ee2c487b6b6bdda22179072d92a8f01e8e736634
Certificate serial:       019F8FECC67097F938E2318B7561E7B34DB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
Manifest number:          19C5
Signing time:             Thu 23 Jul 2026 17:01:26 +0000
Manifest this update:     Thu 23 Jul 2026 17:01:26 +0000
Manifest next update:     Fri 24 Jul 2026 17:01:26 +0000
Files and hashes:         1: 7ixIe2tr3aIheQctkqjwHo5zZjQ.crl (hash: QaRdZ+8iVIcpONNsOKOHskL1lfK8FB11OFyoDsjG1+4=)
                          2: _osGDzZycVvwVO8jk7tST0-kMuc.roa (hash: V5At1uVjWkeBJy6WzVu631/zeJQGqErhpfeeQ5kY2uw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:c6:70:97:f9:38:e2:31:8b:75:61:e7:b3:4d:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee2c487b6b6bdda22179072d92a8f01e8e736634
        Validity
            Not Before: Jul 23 17:01:26 2026 GMT
            Not After : Jul 24 17:01:26 2026 GMT
        Subject: CN=d372f2915d2545706e9caeadacd314697d3e19d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:be:64:63:26:3d:15:8e:01:c1:ed:f4:bc:ad:
                    ca:6b:86:51:57:bf:76:f9:04:a2:94:2e:d4:5e:96:
                    28:fb:4d:5b:eb:36:c2:40:79:ca:47:bb:a0:cb:cb:
                    d9:23:72:bb:8c:05:ed:0e:20:c5:4b:2b:da:31:e9:
                    6e:a8:ea:2f:f4:75:aa:99:62:d6:34:16:89:88:01:
                    1f:46:f5:a6:5b:25:3a:c7:05:17:ff:ee:25:f8:5d:
                    64:49:d7:4b:b4:f6:b9:c5:01:81:2e:78:98:d6:be:
                    e3:51:37:3f:e1:11:53:41:9f:a1:19:7c:4b:25:7f:
                    5c:0d:7a:5d:49:4d:cc:2d:f8:1c:b2:ff:c9:08:fe:
                    2e:67:88:ab:a4:37:1f:39:cd:b0:cb:e5:9f:11:64:
                    5c:76:f7:38:d9:98:6e:d2:03:7d:1a:b4:f5:d6:a8:
                    22:ed:7c:7c:0e:7e:95:75:4f:78:b8:7e:a4:85:85:
                    5b:13:19:e1:8a:70:9b:5b:ce:c9:92:71:ed:16:21:
                    91:34:fe:49:6a:51:37:17:2f:54:7e:92:d2:c5:36:
                    9a:a1:3f:79:b8:a1:5a:64:62:d5:93:65:d9:76:6a:
                    14:07:e6:95:f2:1a:83:71:11:26:69:87:12:01:a5:
                    04:f4:36:07:73:fd:93:f4:ca:a9:c8:b2:e6:dc:f2:
                    5a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:72:F2:91:5D:25:45:70:6E:9C:AE:AD:AC:D3:14:69:7D:3E:19:D7
            X509v3 Authority Key Identifier:
                keyid:EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:5f:32:47:09:49:d1:ff:1c:e0:48:e2:72:69:e9:cd:c4:20:
         05:1d:f6:4a:e4:37:a9:d2:b3:57:6e:7e:6c:95:df:08:35:d4:
         9d:e3:f8:ce:0f:7a:1b:35:49:64:bf:7d:ec:30:c0:5a:91:57:
         3f:58:f5:9d:2b:6f:cb:03:49:b5:8b:71:1e:08:70:d3:f5:44:
         12:59:0f:9a:5c:c3:78:3c:e4:68:dc:da:bd:19:c4:b7:95:d9:
         d9:7b:64:a2:03:a6:cb:a5:9b:ae:77:1d:3e:ea:68:91:af:94:
         52:65:54:5a:66:0d:78:84:dc:25:70:56:97:66:06:be:9d:58:
         ea:48:1c:4d:9c:ad:6a:fc:fe:c8:59:35:b8:05:33:80:87:8e:
         4d:63:23:70:50:7e:17:84:73:cd:f2:08:91:c2:7f:5c:7c:cf:
         c8:92:6f:48:da:62:03:f6:ad:51:a8:2e:f4:35:11:16:c5:d9:
         b0:ca:9f:42:f2:d4:ea:d3:ad:05:98:72:89:c4:34:66:ad:93:
         dd:22:7f:2e:99:13:e4:18:81:6f:69:d9:55:b9:da:fe:9e:0c:
         5b:c4:1d:28:70:71:b9:8e:90:9f:81:e1:70:55:27:41:b7:4d:
         ec:86:77:a5:c1:55:2a:84:8e:a2:cf:82:db:dc:f0:59:12:0e:
         d4:48:b7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:36:03 2026 by rpki-client