Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
File:                     7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft (raw, json)
Hash identifier:          baTl9c4MOf2C3BV00vf0CNrwzndm/6QjkKtwQ7c/jhg=
Subject key identifier:   1D:A9:27:A5:9D:C6:D6:3D:9E:A0:A8:FD:98:D0:E8:2B:1E:2D:89:EE
Authority key identifier: ED:9A:3E:C7:CB:3B:19:0E:72:13:09:9D:E1:67:1B:EA:2D:32:8A:95
Certificate issuer:       /CN=ed9a3ec7cb3b190e7213099de1671bea2d328a95
Certificate serial:       019D9A3DFA8AA750EBA4EA7EAE760B40C357
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
Manifest number:          0798
Signing time:             Fri 17 Apr 2026 07:00:46 +0000
Manifest this update:     Fri 17 Apr 2026 07:00:46 +0000
Manifest next update:     Sat 18 Apr 2026 07:00:46 +0000
Files and hashes:         1: 7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl (hash: m3lCaUZVD6tZppMzDgh2M+dFywapJ0VXuSEBBHVwi94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3d:fa:8a:a7:50:eb:a4:ea:7e:ae:76:0b:40:c3:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed9a3ec7cb3b190e7213099de1671bea2d328a95
        Validity
            Not Before: Apr 17 07:00:46 2026 GMT
            Not After : Apr 18 07:00:46 2026 GMT
        Subject: CN=1da927a59dc6d63d9ea0a8fd98d0e82b1e2d89ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:67:50:8f:79:8b:86:a6:4a:d5:c8:bd:72:c8:
                    a9:5e:3e:d8:b9:bb:5a:0a:e2:15:f7:bf:56:9d:ba:
                    2f:aa:be:b8:fa:c8:2e:55:69:c7:f8:35:d8:ce:88:
                    ce:eb:dd:63:60:97:6a:7a:65:bb:40:69:f3:b7:c9:
                    dc:c3:6e:ac:68:82:bd:c8:38:05:94:3e:06:d1:6b:
                    a0:d7:84:9e:cd:95:73:0b:f8:63:04:fe:ca:e8:a7:
                    12:68:1e:9b:2a:f5:df:ed:f2:4a:5a:72:02:79:d0:
                    73:f6:51:ae:66:80:f5:1f:73:13:50:6e:c9:39:f2:
                    cf:12:b4:63:32:da:e4:5f:0f:aa:91:bb:47:ba:1b:
                    2b:ce:49:12:cc:2d:86:5b:c6:05:f8:a3:0d:24:b0:
                    d8:d9:60:7c:16:74:8b:7f:64:58:e3:b5:28:e0:da:
                    50:f0:90:a7:9d:07:87:55:cc:c7:4a:5e:be:2d:48:
                    35:68:6a:6c:ba:c7:eb:da:a6:bc:2e:c3:a2:fb:ab:
                    2c:ac:87:b8:79:53:06:26:79:44:1a:7a:f8:9e:a2:
                    14:f3:9f:04:09:a4:68:f6:c2:4f:14:57:cb:a9:af:
                    18:08:5f:7f:0e:f6:55:58:da:1b:d4:6a:19:35:d9:
                    2e:06:d8:75:6f:79:14:04:68:77:5f:cf:64:18:72:
                    39:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A9:27:A5:9D:C6:D6:3D:9E:A0:A8:FD:98:D0:E8:2B:1E:2D:89:EE
            X509v3 Authority Key Identifier:
                keyid:ED:9A:3E:C7:CB:3B:19:0E:72:13:09:9D:E1:67:1B:EA:2D:32:8A:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:0d:8a:fc:80:bc:a3:9a:3a:e9:93:93:10:a2:90:84:c1:17:
         8d:5a:fa:86:bb:15:6e:82:02:de:87:6d:c2:26:df:81:0b:60:
         57:85:23:e6:f2:8f:cd:63:6d:1e:60:8d:7b:ab:3c:b5:83:a3:
         8d:8a:ae:60:e6:a6:ca:d5:06:d9:89:0c:8a:ce:a2:6b:34:5f:
         40:ef:23:82:54:9d:6c:05:77:51:df:f2:cd:2a:03:f4:25:a4:
         af:f4:30:b8:d3:be:67:4e:9c:c8:8a:37:62:79:fb:56:1a:da:
         90:2a:b9:70:32:01:c7:59:19:f3:80:f1:53:f2:15:e9:a3:11:
         02:61:8c:53:9f:0d:ad:0e:4f:80:c5:94:a5:50:ad:39:b6:b8:
         d2:4a:b9:0d:5c:cc:7e:2c:e8:3d:f9:8a:bf:26:17:7e:ff:f3:
         34:d7:ff:77:81:12:05:8e:76:41:ac:5d:02:82:5a:b6:a4:31:
         cc:7f:8e:5b:f9:f2:7e:58:28:d9:e7:c1:f4:f8:9d:00:7b:56:
         ac:23:ab:6c:d3:0c:6f:33:69:0d:df:14:a9:fb:52:a8:14:21:
         e4:9a:a2:02:e0:73:4c:cd:d0:64:e9:d5:f9:ae:89:cd:b8:04:
         5e:81:d0:8e:37:d3:1e:63:e2:a2:97:92:79:c9:c5:85:fc:fe:
         6b:9d:46:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPfqKp1DrpOp+rnYLQMNXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkOWEzZWM3Y2IzYjE5MGU3MjEzMDk5ZGUxNjcxYmVhMmQz
MjhhOTUwHhcNMjYwNDE3MDcwMDQ2WhcNMjYwNDE4MDcwMDQ2WjAzMTEwLwYDVQQD
EygxZGE5MjdhNTlkYzZkNjNkOWVhMGE4ZmQ5OGQwZTgyYjFlMmQ4OWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2dQj3mLhqZK1ci9csipXj7Yubta
CuIV979Wnbovqr64+sguVWnH+DXYzojO691jYJdqemW7QGnzt8ncw26saIK9yDgF
lD4G0Wug14SezZVzC/hjBP7K6KcSaB6bKvXf7fJKWnICedBz9lGuZoD1H3MTUG7J
OfLPErRjMtrkXw+qkbtHuhsrzkkSzC2GW8YF+KMNJLDY2WB8FnSLf2RY47Uo4NpQ
8JCnnQeHVczHSl6+LUg1aGpsusfr2qa8LsOi+6ssrIe4eVMGJnlEGnr4nqIU858E
CaRo9sJPFFfLqa8YCF9/DvZVWNob1GoZNdkuBth1b3kUBGh3X89kGHI5jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2pJ6WdxtY9nqCo/ZjQ6CseLYnuMB8GA1UdIwQY
MBaAFO2aPsfLOxkOchMJneFnG+otMoqVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1pvLXg4czdHUTV5RXdtZDRXY2I2aTB5aXBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85Njk3M2UtMmJkYi00Mzk3LWFlMWEt
YTQ0MmY0Nzc2NGQzLzEvN1pvLXg4czdHUTV5RXdtZDRXY2I2aTB5aXBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy85Njk3M2UtMmJkYi00Mzk3LWFlMWEtYTQ0MmY0Nzc2NGQz
LzEvN1pvLXg4czdHUTV5RXdtZDRXY2I2aTB5aXBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFA2K/IC8
o5o66ZOTEKKQhMEXjVr6hrsVboIC3odtwibfgQtgV4Uj5vKPzWNtHmCNe6s8tYOj
jYquYOamytUG2YkMis6iazRfQO8jglSdbAV3Ud/yzSoD9CWkr/QwuNO+Z06cyIo3
Ynn7VhrakCq5cDIBx1kZ84DxU/IV6aMRAmGMU58NrQ5PgMWUpVCtOba40kq5DVzM
fizoPfmKvyYXfv/zNNf/d4ESBY52QaxdAoJatqQxzH+OW/nyflgo2efB9PidAHtW
rCOrbNMMbzNpDd8UqftSqBQh5JqiAuBzTM3QZOnV+a6JzbgEXoHQjjfTHmPiopeS
ecnFhfz+a51G5A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:42:54 2026 by rpki-client