Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
File:                     7W3VjHMPSQxsZTC3ULUY55Okh6U.mft (raw, json)
Hash identifier:          9oc7+sIcEYnTvMO7gbEf3OvQGGeS1d0wSVDN/RoXWdY=
Subject key identifier:   38:55:24:54:1B:A7:17:AA:78:4F:6B:ED:33:56:37:1B:19:86:68:81
Authority key identifier: ED:6D:D5:8C:73:0F:49:0C:6C:65:30:B7:50:B5:18:E7:93:A4:87:A5
Certificate issuer:       /CN=ed6dd58c730f490c6c6530b750b518e793a487a5
Certificate serial:       019FAC0884BA89FEE451EF61211D86F84077
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
Manifest number:          10B9
Signing time:             Wed 29 Jul 2026 04:01:07 +0000
Manifest this update:     Wed 29 Jul 2026 04:01:07 +0000
Manifest next update:     Thu 30 Jul 2026 04:01:07 +0000
Files and hashes:         1: 7W3VjHMPSQxsZTC3ULUY55Okh6U.crl (hash: 9GYBUoy2cmlzUKKVAp8Zy8G6sbDhfnsEk4UmAYTRVnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:84:ba:89:fe:e4:51:ef:61:21:1d:86:f8:40:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6dd58c730f490c6c6530b750b518e793a487a5
        Validity
            Not Before: Jul 29 04:01:07 2026 GMT
            Not After : Jul 30 04:01:07 2026 GMT
        Subject: CN=385524541ba717aa784f6bed3356371b19866881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2c:de:77:bd:d4:68:bb:6b:d4:2d:0f:a1:30:
                    0b:4e:cb:e2:58:8e:ad:41:af:43:81:8f:f5:14:5b:
                    a5:a5:ae:6e:aa:08:0e:81:b3:24:78:15:4d:27:46:
                    ad:eb:6f:0f:55:42:33:98:f2:1d:16:d5:eb:46:80:
                    aa:51:97:6b:a1:46:e3:d1:73:ab:9b:0f:39:75:80:
                    36:74:df:8e:42:2c:41:eb:71:9e:8c:4a:35:b0:03:
                    d0:79:6d:0b:58:c9:04:b1:a5:d8:ac:64:40:43:48:
                    0f:af:81:7f:24:d2:88:9e:df:27:dd:1d:ee:ad:d8:
                    a6:a8:35:3e:46:db:29:69:a7:91:88:c1:65:d4:85:
                    e6:1a:72:0e:e3:fe:99:d4:ab:76:97:64:4b:7a:56:
                    c3:62:3d:76:4e:0f:e2:14:69:06:7e:c7:54:35:f8:
                    02:e8:36:a5:63:1c:01:f7:10:f5:1a:4e:5d:86:f1:
                    18:19:94:93:63:bf:26:53:93:a4:9e:12:3f:f4:d8:
                    d8:10:20:42:60:2f:07:7d:47:7b:8e:aa:00:fc:86:
                    6e:b0:12:9f:ca:7a:dc:50:fd:3f:31:f2:8f:79:41:
                    93:97:97:3f:0e:04:b1:ff:52:b7:fa:b4:9b:51:74:
                    f9:cc:29:56:49:a7:f4:62:67:7d:57:0d:ad:e1:85:
                    2e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:55:24:54:1B:A7:17:AA:78:4F:6B:ED:33:56:37:1B:19:86:68:81
            X509v3 Authority Key Identifier:
                keyid:ED:6D:D5:8C:73:0F:49:0C:6C:65:30:B7:50:B5:18:E7:93:A4:87:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:93:e5:73:1b:65:f2:b1:b3:e1:f4:36:13:4f:55:78:53:16:
         4e:98:a3:2d:5b:9e:23:a5:3c:f8:d5:90:6f:f1:f2:fa:7a:67:
         53:40:a9:77:12:b0:e6:a9:88:24:64:e3:0c:1c:80:47:f6:07:
         ec:65:e5:4a:84:49:6f:f3:f4:b9:00:bd:11:46:6b:fa:02:48:
         71:1b:d1:2a:59:8b:d1:13:d5:d2:f8:5a:de:1e:d5:63:bc:f6:
         bc:41:75:38:1d:12:04:e5:e2:4b:ab:ed:48:3b:d7:1e:2b:5b:
         1b:b0:6e:a2:c7:f2:b4:11:98:60:58:ba:25:e4:9a:29:2a:07:
         08:a4:5d:76:fb:55:1c:da:fd:7e:ba:00:fa:09:47:f7:61:12:
         00:9b:78:51:a6:8f:60:5e:6b:a4:62:31:14:ec:87:63:da:b7:
         60:4b:b3:69:51:94:1a:ce:6f:5c:95:a5:7d:47:ac:c0:1c:ad:
         96:19:2a:39:d2:9b:d5:85:5e:c5:9b:35:34:42:f2:3a:bd:dc:
         62:69:54:67:c3:03:0c:93:19:e3:35:68:ca:90:f7:ab:fd:b8:
         e2:ed:29:3b:8a:df:c6:74:58:af:2f:c2:62:e4:09:0c:10:83:
         e6:5e:05:1f:82:af:fe:33:63:25:55:c1:a3:c7:ac:81:19:48:
         54:3b:1a:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sCIS6if7kUe9hIR2G+EB3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNmRkNThjNzMwZjQ5MGM2YzY1MzBiNzUwYjUxOGU3OTNh
NDg3YTUwHhcNMjYwNzI5MDQwMTA3WhcNMjYwNzMwMDQwMTA3WjAzMTEwLwYDVQQD
EygzODU1MjQ1NDFiYTcxN2FhNzg0ZjZiZWQzMzU2MzcxYjE5ODY2ODgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCzed73UaLtr1C0PoTALTsviWI6t
Qa9DgY/1FFulpa5uqggOgbMkeBVNJ0at628PVUIzmPIdFtXrRoCqUZdroUbj0XOr
mw85dYA2dN+OQixB63GejEo1sAPQeW0LWMkEsaXYrGRAQ0gPr4F/JNKInt8n3R3u
rdimqDU+RtspaaeRiMFl1IXmGnIO4/6Z1Kt2l2RLelbDYj12Tg/iFGkGfsdUNfgC
6DalYxwB9xD1Gk5dhvEYGZSTY78mU5OknhI/9NjYECBCYC8HfUd7jqoA/IZusBKf
ynrcUP0/MfKPeUGTl5c/DgSx/1K3+rSbUXT5zClWSaf0Ymd9Vw2t4YUuGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhVJFQbpxeqeE9r7TNWNxsZhmiBMB8GA1UdIwQY
MBaAFO1t1YxzD0kMbGUwt1C1GOeTpIelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1czVmpITVBTUXhzWlRDM1VMVVk1NU9raDZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9lMWRhZDItMTc5Ni00NzY0LWFjZjkt
MGFhZWE2NjcwNjYzLzEvN1czVmpITVBTUXhzWlRDM1VMVVk1NU9raDZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9lMWRhZDItMTc5Ni00NzY0LWFjZjktMGFhZWE2NjcwNjYz
LzEvN1czVmpITVBTUXhzWlRDM1VMVVk1NU9raDZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJPlcxtl
8rGz4fQ2E09VeFMWTpijLVueI6U8+NWQb/Hy+npnU0CpdxKw5qmIJGTjDByAR/YH
7GXlSoRJb/P0uQC9EUZr+gJIcRvRKlmL0RPV0vha3h7VY7z2vEF1OB0SBOXiS6vt
SDvXHitbG7BuosfytBGYYFi6JeSaKSoHCKRddvtVHNr9froA+glH92ESAJt4UaaP
YF5rpGIxFOyHY9q3YEuzaVGUGs5vXJWlfUeswBytlhkqOdKb1YVexZs1NELyOr3c
YmlUZ8MDDJMZ4zVoypD3q/244u0pO4rfxnRYry/CYuQJDBCD5l4FH4Kv/jNjJVXB
o8esgRlIVDsazA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:07:37 2026 by rpki-client