Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
File:                     7crL2itLMjHQi1HxbxsqfAgjetE.mft (raw, json)
Hash identifier:          81Gp3R0GuL74pD5/iVZIQ3+WNgKH1CnW6kdRs9Qxo7A=
Subject key identifier:   17:64:25:EA:C0:E1:50:AD:2E:C7:0C:20:EA:1F:5F:2A:79:A5:AC:F2
Authority key identifier: ED:CA:CB:DA:2B:4B:32:31:D0:8B:51:F1:6F:1B:2A:7C:08:23:7A:D1
Certificate issuer:       /CN=edcacbda2b4b3231d08b51f16f1b2a7c08237ad1
Certificate serial:       019FA899BBF9E525389364CAB50D0E2FBABC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
Manifest number:          063E
Signing time:             Tue 28 Jul 2026 12:01:14 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:14 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:14 +0000
Files and hashes:         1: 7crL2itLMjHQi1HxbxsqfAgjetE.crl (hash: xvoVAjqUAWU2yIiJQK/xJwOXF43bRnYy8HTibdQYPBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:bb:f9:e5:25:38:93:64:ca:b5:0d:0e:2f:ba:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edcacbda2b4b3231d08b51f16f1b2a7c08237ad1
        Validity
            Not Before: Jul 28 12:01:14 2026 GMT
            Not After : Jul 29 12:01:14 2026 GMT
        Subject: CN=176425eac0e150ad2ec70c20ea1f5f2a79a5acf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1e:92:a7:a6:1f:95:2a:4c:2f:2f:03:f1:d1:
                    93:62:3e:92:3f:7d:64:ba:7f:87:cf:40:0b:c6:a1:
                    98:25:ac:c6:f4:90:e2:45:e1:73:ba:4c:7d:00:ad:
                    2e:af:f1:92:bc:26:5a:f5:a9:06:55:5c:75:5a:7b:
                    5b:27:3a:79:17:22:d7:7f:41:85:c0:f9:f1:d4:65:
                    75:e6:ca:df:c1:bc:83:68:cc:9f:7f:96:e2:1a:27:
                    e4:7a:42:4b:20:38:f4:a9:4d:e3:63:be:3d:a9:61:
                    a8:ae:bf:e1:4c:76:a7:7a:80:bf:b8:d1:52:85:ff:
                    e5:c4:90:e2:3c:7e:75:3b:d0:a2:79:55:7c:e3:b7:
                    e1:a0:45:55:03:f2:61:5f:10:74:38:80:0e:e7:36:
                    be:98:7a:27:fe:c7:a7:4e:f1:f6:f1:41:59:d5:2f:
                    4c:ff:ae:92:cf:ef:0f:28:a4:5a:50:e4:90:d5:1c:
                    c6:a5:58:b5:f5:a2:0e:91:0e:1b:44:e1:55:e4:06:
                    53:7d:c6:36:3e:41:01:fa:da:81:eb:54:25:f0:74:
                    c1:d1:61:01:75:bc:00:22:94:6b:91:68:59:4c:df:
                    d3:53:f5:6d:31:a0:9a:4a:24:8c:11:3b:6e:e1:17:
                    50:68:7f:fc:b0:a8:4b:f6:96:73:df:78:2e:69:cb:
                    47:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:64:25:EA:C0:E1:50:AD:2E:C7:0C:20:EA:1F:5F:2A:79:A5:AC:F2
            X509v3 Authority Key Identifier:
                keyid:ED:CA:CB:DA:2B:4B:32:31:D0:8B:51:F1:6F:1B:2A:7C:08:23:7A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:11:51:43:10:bd:7d:18:34:a6:a5:ac:08:58:dd:a6:d4:74:
         cc:43:d7:6f:04:5a:44:9b:e4:50:3a:c9:fa:c7:06:50:a1:19:
         bc:07:bd:03:12:01:f4:ba:e6:63:fa:ce:b9:b9:94:4e:26:79:
         0c:30:16:88:0c:c6:4e:df:e1:11:50:3f:b7:88:a0:49:07:a5:
         12:ee:63:30:39:82:8b:0b:d5:1d:55:9a:6f:b9:97:70:86:fa:
         ff:90:f9:ff:f4:8b:32:d6:c2:5a:fa:dc:56:7f:3c:c7:71:ef:
         4a:25:a9:50:42:dd:03:d4:05:88:f3:91:e6:54:1e:76:03:42:
         b9:36:61:04:05:d7:d8:17:e4:9b:9b:fa:2c:c1:90:77:06:ac:
         3b:2e:f0:72:5d:be:8a:fb:71:dc:90:d2:4e:db:15:ad:bc:e4:
         7c:d5:4f:6d:f2:4f:72:d7:8a:24:40:fc:d4:7d:ab:bc:c0:39:
         7c:10:3a:cb:6e:45:59:1e:ea:e6:c9:98:3b:bb:72:7c:07:4b:
         8c:f4:4e:84:2d:ef:60:d9:f6:b6:ee:af:d3:88:bb:bb:63:26:
         74:9f:b0:3b:68:b3:67:d3:2d:e7:6f:5e:3d:4b:1b:cd:1a:ec:
         ed:de:ea:ab:f1:90:61:4b:18:e4:d0:f0:bb:14:bd:e8:47:08:
         d9:f7:1c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:19 2026 by rpki-client