Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9ba5fa-ca9b-4f99-9ce5-0870c19ed7f8/1/7OuzK9a4SwHPpNQnfUm7dS8W1IA.mft
File:                     7OuzK9a4SwHPpNQnfUm7dS8W1IA.mft (raw, json)
Hash identifier:          2+ioqLkqjdtb+Mh3kOBOO8hZ9s2spYx0kzE3S7DtSeA=
Subject key identifier:   09:94:37:95:F8:88:41:81:72:58:68:9C:D7:45:D6:95:5D:FD:73:A0
Authority key identifier: EC:EB:B3:2B:D6:B8:4B:01:CF:A4:D4:27:7D:49:BB:75:2F:16:D4:80
Certificate issuer:       /CN=ecebb32bd6b84b01cfa4d4277d49bb752f16d480
Certificate serial:       019F8F10C2D9288498F5D3C8CA1638F261E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7OuzK9a4SwHPpNQnfUm7dS8W1IA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/9ba5fa-ca9b-4f99-9ce5-0870c19ed7f8/1/7OuzK9a4SwHPpNQnfUm7dS8W1IA.mft
Manifest number:          3A
Signing time:             Thu 23 Jul 2026 13:01:08 +0000
Manifest this update:     Thu 23 Jul 2026 13:01:08 +0000
Manifest next update:     Fri 24 Jul 2026 13:01:08 +0000
Files and hashes:         1: 7OuzK9a4SwHPpNQnfUm7dS8W1IA.crl (hash: 9S2f5jJpKKEmHyboCPiijiR/HOhblFb0cl//hj0GDRA=)
                          2: qWZEFT_OxQeqd6Y0OYCdMhrVv30.roa (hash: g41dSquqqdgjaDzTxJvTsOMXpBmPaLOtw6LNHhJmIbg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/9ba5fa-ca9b-4f99-9ce5-0870c19ed7f8/1/7OuzK9a4SwHPpNQnfUm7dS8W1IA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/9ba5fa-ca9b-4f99-9ce5-0870c19ed7f8/1/7OuzK9a4SwHPpNQnfUm7dS8W1IA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7OuzK9a4SwHPpNQnfUm7dS8W1IA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:10:c2:d9:28:84:98:f5:d3:c8:ca:16:38:f2:61:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecebb32bd6b84b01cfa4d4277d49bb752f16d480
        Validity
            Not Before: Jul 23 13:01:08 2026 GMT
            Not After : Jul 24 13:01:08 2026 GMT
        Subject: CN=09943795f88841817258689cd745d6955dfd73a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:de:65:6a:d4:83:dc:bf:6f:e6:e1:e4:31:9a:
                    7a:90:69:6a:2e:dd:3b:89:c2:d3:94:92:5e:b2:83:
                    af:d2:e7:4b:59:01:a6:e4:2c:a9:ca:cd:34:32:27:
                    9e:5a:d1:49:19:1e:c8:9d:4a:4a:18:92:99:46:a8:
                    09:10:b4:d0:07:f2:44:cd:3b:97:48:bf:86:6a:3f:
                    29:6b:a1:45:60:62:f2:35:7d:28:60:eb:3b:52:75:
                    59:8b:29:07:5c:54:41:56:bf:65:2a:bc:b2:7c:be:
                    32:38:9b:92:4a:f6:78:18:9e:df:f0:03:26:48:dc:
                    b4:ca:60:87:01:89:3b:93:d9:16:e0:f6:c5:28:82:
                    2d:7e:94:fd:db:9c:f6:6b:ae:d2:c4:a4:96:95:2f:
                    41:c3:a8:7e:c6:a5:57:a4:47:dc:ea:52:f2:69:42:
                    5d:af:74:57:f8:46:87:15:b9:29:00:e4:91:23:71:
                    3e:fc:3e:65:fb:dc:a8:51:ca:16:8e:34:e8:2f:c8:
                    96:4a:79:4e:4a:81:0d:0d:e0:0f:51:eb:b4:7b:0f:
                    2e:84:02:2a:9e:17:44:56:04:e4:87:25:0f:17:06:
                    60:0c:7d:e7:70:93:c2:aa:a0:79:a6:79:30:84:89:
                    e1:a0:b9:fd:35:d1:3c:15:bc:b7:9d:ba:8c:34:63:
                    68:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:94:37:95:F8:88:41:81:72:58:68:9C:D7:45:D6:95:5D:FD:73:A0
            X509v3 Authority Key Identifier:
                keyid:EC:EB:B3:2B:D6:B8:4B:01:CF:A4:D4:27:7D:49:BB:75:2F:16:D4:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OuzK9a4SwHPpNQnfUm7dS8W1IA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ba5fa-ca9b-4f99-9ce5-0870c19ed7f8/1/7OuzK9a4SwHPpNQnfUm7dS8W1IA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ba5fa-ca9b-4f99-9ce5-0870c19ed7f8/1/7OuzK9a4SwHPpNQnfUm7dS8W1IA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:b2:1c:8c:e7:70:e7:4b:85:b0:eb:44:a4:34:86:5f:6c:a5:
         3c:a1:c3:5d:9c:47:b3:e6:72:06:dc:3a:05:b4:db:87:46:ea:
         ff:17:5b:f8:68:e6:8e:f5:9e:0a:ab:8f:ea:4e:e3:a7:4e:7c:
         39:67:4e:1a:4b:fa:25:8a:bc:bc:d5:03:a1:35:03:e4:d4:bc:
         5b:a0:a9:ba:7d:80:91:c7:03:04:15:1a:e9:a1:a7:df:11:17:
         3d:68:62:8d:50:ee:79:fe:05:f1:aa:15:cd:f8:ee:b5:f4:f6:
         f6:91:0f:16:35:7c:59:58:07:fc:22:d5:fd:77:b1:a2:aa:d3:
         7d:a5:52:45:b3:fa:06:6c:ab:cf:5f:d0:96:87:de:3f:2b:bf:
         48:37:7b:41:fa:d4:d3:6a:e1:b1:91:c6:e0:cb:d0:28:ce:8a:
         e1:92:d2:26:66:86:7a:b8:51:cf:3c:2f:f3:07:98:4d:c2:bd:
         cb:ae:6f:10:37:5e:95:dc:ed:a0:18:78:96:36:8c:7b:88:b7:
         78:d4:0a:12:d9:2b:2e:4f:30:09:5f:93:63:7e:03:de:1b:77:
         08:d2:5d:e0:c0:e3:fa:f4:f7:c9:a3:2b:27:aa:a9:d3:4f:7d:
         36:f8:63:2e:62:72:89:e3:51:ba:b9:e9:82:4d:74:d7:88:fd:
         b1:db:41:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:40:51 2026 by rpki-client