Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
File:                     7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft (raw, json)
Hash identifier:          3de9L59L0YJPMNS9mbxmUBSCNf7OomMTNqf8qaLwkGA=
Subject key identifier:   9C:A7:C8:9F:CF:4E:21:72:FA:EC:C3:07:43:30:1B:15:64:01:8B:74
Authority key identifier: ED:1B:6A:DC:99:49:7F:D1:B3:0A:0A:48:2E:DC:40:2B:0C:4F:0C:F8
Certificate issuer:       /CN=ed1b6adc99497fd1b30a0a482edc402b0c4f0cf8
Certificate serial:       019CAB6B0933E693D29FE24548F10F62AD9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
Manifest number:          04E5
Signing time:             Sun 01 Mar 2026 22:00:44 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:44 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:44 +0000
Files and hashes:         1: 7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl (hash: xlG1TCBo+kZTfeXZdXaxN5dwAZNj4MrUzaKfSsIAj0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:09:33:e6:93:d2:9f:e2:45:48:f1:0f:62:ad:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed1b6adc99497fd1b30a0a482edc402b0c4f0cf8
        Validity
            Not Before: Mar  1 22:00:44 2026 GMT
            Not After : Mar  2 22:00:44 2026 GMT
        Subject: CN=9ca7c89fcf4e2172faecc30743301b1564018b74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5d:e8:fc:44:97:30:d1:9f:37:ae:38:89:ec:
                    11:74:99:b8:ec:4b:13:74:da:14:f3:a6:9b:4e:50:
                    2c:f3:b5:aa:47:eb:d7:d6:63:e6:97:47:6f:5e:bf:
                    c8:ca:7c:27:9b:05:75:78:8f:a7:b8:55:a0:ea:ae:
                    fa:ea:f8:cd:d8:87:b3:c6:5e:44:0d:79:08:81:33:
                    d4:5f:35:03:ea:bf:95:4a:78:a0:1e:0e:b7:2d:07:
                    0e:b1:78:10:1b:cc:6e:48:21:55:3f:34:f7:52:8e:
                    da:0a:6d:d2:18:34:55:a6:92:d6:a2:6f:dc:46:42:
                    27:c5:9a:90:55:90:b0:14:8b:94:77:d8:d0:64:62:
                    78:1a:40:95:07:8a:ca:a6:d7:ed:54:b3:bb:23:d6:
                    85:cc:66:25:b5:80:32:af:c6:b8:8e:98:11:f2:8f:
                    eb:70:ba:c4:dd:22:90:c8:41:34:bf:5e:97:36:c4:
                    40:23:69:e9:fc:44:af:82:4c:ca:ce:6b:75:a3:85:
                    a0:3f:72:d5:6d:1e:1f:87:44:db:14:69:44:b9:d6:
                    1b:be:ed:7d:0e:31:90:b4:1e:ac:51:33:ad:25:c1:
                    c7:f2:c5:6e:28:f3:de:8b:0b:f9:19:3d:a2:79:d0:
                    3a:de:04:96:b7:fd:1a:da:1e:2b:80:a1:fa:8c:27:
                    c9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A7:C8:9F:CF:4E:21:72:FA:EC:C3:07:43:30:1B:15:64:01:8B:74
            X509v3 Authority Key Identifier:
                keyid:ED:1B:6A:DC:99:49:7F:D1:B3:0A:0A:48:2E:DC:40:2B:0C:4F:0C:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:81:b6:ce:76:2c:4c:01:81:04:91:4a:e2:e9:9f:7d:0a:80:
         bc:8a:8b:ef:f8:f0:ef:da:6c:7d:a5:bd:99:1c:e2:03:86:1b:
         db:79:6d:64:d7:00:da:10:26:6e:65:a0:7c:13:e4:06:42:23:
         50:fb:9b:b0:dd:0e:84:a6:7a:5e:fa:fb:33:92:3c:c8:0a:95:
         59:27:e3:79:ad:2a:14:7f:af:f8:3c:97:35:15:4f:77:a2:05:
         6c:69:94:22:b4:bb:1a:87:46:32:78:54:bf:db:28:c1:dd:e9:
         86:cc:07:dc:13:22:75:12:6d:ba:ce:68:89:d6:04:4d:fe:b1:
         b3:70:16:9d:22:d8:7e:d5:fb:5a:76:fd:f7:3c:27:e0:31:c0:
         22:6a:3e:fc:d2:14:7a:69:ed:fd:98:2a:eb:1d:01:27:78:4e:
         6e:f4:78:e6:39:4b:01:d5:33:91:94:c6:41:4a:4a:f0:df:4c:
         86:bb:70:f0:24:18:77:84:a1:36:35:91:23:a5:b8:e8:e5:20:
         45:c2:c7:8e:9e:b3:1e:5b:c4:d5:15:c2:78:2d:03:8a:e9:70:
         2c:3f:a8:5b:0c:e6:2b:00:6a:ad:cd:28:d3:44:ec:4d:2c:3b:
         a0:0e:3d:eb:6c:1e:34:24:17:77:ac:6b:22:37:c5:6a:f2:42:
         3b:bc:57:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:26:08 2026 by rpki-client