Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
File:                     7XlzzE58-_RHB0eBDEFuzH6YGIU.mft (raw, json)
Hash identifier:          IhAmVQ55oDA0jf1PaW0uvVguP1iD0/lcmobsogRw/aE=
Subject key identifier:   83:0A:DD:16:B4:ED:63:9B:24:4C:02:8E:71:B5:0D:B4:B2:98:A8:F5
Authority key identifier: ED:79:73:CC:4E:7C:FB:F4:47:07:47:81:0C:41:6E:CC:7E:98:18:85
Certificate issuer:       /CN=ed7973cc4e7cfbf4470747810c416ecc7e981885
Certificate serial:       019EBFC80460D59460F182767F2DC734DA24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
Manifest number:          14D1
Signing time:             Sat 13 Jun 2026 07:00:16 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:16 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:16 +0000
Files and hashes:         1: 7XlzzE58-_RHB0eBDEFuzH6YGIU.crl (hash: gB8eQjonkVxWBRchqh1e5U43J/p/e4aCUV7GZMwdbnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:04:60:d5:94:60:f1:82:76:7f:2d:c7:34:da:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed7973cc4e7cfbf4470747810c416ecc7e981885
        Validity
            Not Before: Jun 13 07:00:16 2026 GMT
            Not After : Jun 14 07:00:16 2026 GMT
        Subject: CN=830add16b4ed639b244c028e71b50db4b298a8f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:4e:c8:98:6a:5e:6d:92:32:e9:58:aa:7c:0d:
                    3c:f8:27:86:4d:28:e5:0f:26:77:f8:73:e0:8e:8a:
                    52:e7:4a:27:ce:91:69:bb:03:32:6d:f9:b2:c8:e8:
                    d2:fd:0e:a0:82:35:a4:cb:9b:55:14:c2:4d:cd:a3:
                    86:f6:43:4b:1a:76:34:09:37:5a:05:98:96:2c:e3:
                    43:c2:3c:9c:e5:a0:7c:c9:91:46:b2:44:a3:d5:5f:
                    d9:fe:07:a0:c6:fc:04:7c:3d:64:77:fc:b2:bc:b6:
                    01:d3:bd:74:c7:71:cd:76:68:a2:4e:b1:9f:d7:ec:
                    01:63:5f:7d:ea:f6:50:b8:05:24:78:38:35:55:3b:
                    b0:c0:97:1f:16:0f:39:48:37:0a:9b:a2:c1:c2:5b:
                    b6:95:64:14:d9:1d:ed:31:e5:52:0e:27:bd:25:25:
                    43:f3:6c:85:1c:31:a0:2f:0e:c2:d4:27:12:08:41:
                    64:c2:ed:c7:32:6b:33:1d:ab:7c:69:76:7e:0b:8c:
                    db:1b:a0:c8:b7:da:97:8f:66:b2:cf:cb:36:2c:e5:
                    7f:d2:f4:1d:96:96:cc:b8:1d:4e:90:8d:6d:68:d2:
                    53:17:18:e2:56:b3:78:3f:f1:dc:32:f5:a7:bb:75:
                    a0:50:83:e4:24:e7:bb:00:03:4c:e8:8d:ac:9d:b2:
                    2b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:0A:DD:16:B4:ED:63:9B:24:4C:02:8E:71:B5:0D:B4:B2:98:A8:F5
            X509v3 Authority Key Identifier:
                keyid:ED:79:73:CC:4E:7C:FB:F4:47:07:47:81:0C:41:6E:CC:7E:98:18:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:69:1d:50:b0:9a:4a:19:07:ab:db:ca:9a:57:2a:af:3a:1a:
         58:e9:50:2a:ba:c1:91:41:73:34:b2:59:11:f5:ec:d2:15:d7:
         a9:4f:13:54:4d:8c:85:90:b8:cf:83:8b:fa:5a:ab:40:b6:c9:
         30:bb:dc:47:41:a8:5a:68:e1:4d:1b:74:5e:cf:e1:83:9f:38:
         d2:a4:e4:ff:67:98:c9:c2:5b:5b:bc:d2:0b:bd:85:f1:fb:a7:
         7b:45:c1:40:e2:6e:ec:ce:c2:2a:2e:25:d2:c8:b3:85:4e:26:
         a8:52:d5:34:38:e3:f3:80:b1:f2:c9:ac:d7:0e:2a:b7:4c:b5:
         ab:3b:6d:58:ed:a9:79:ab:97:84:ff:0d:5f:9b:35:7d:48:00:
         78:54:46:3c:08:dd:94:28:df:ae:e3:cb:eb:cb:bb:9c:92:3c:
         f2:c2:64:2f:5e:c8:3b:09:9e:a1:03:bb:8b:b1:3c:4a:5b:97:
         95:ab:b6:ca:ed:d9:20:e8:8a:1a:1f:b9:cb:11:0a:1d:e2:f6:
         eb:dd:56:a8:0f:0e:49:a9:dc:34:72:bf:fe:fa:3e:14:3a:ea:
         77:7f:62:f6:7a:0d:21:f0:f1:ad:9f:0b:25:24:7f:96:07:62:
         d9:72:67:da:b8:99:da:b5:6a:47:d7:b7:c7:56:17:9f:cc:65:
         84:62:42:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:58:03 2026 by rpki-client