Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
File:                     7XlzzE58-_RHB0eBDEFuzH6YGIU.mft (raw, json)
Hash identifier:          M47xGFD8YQf4TWJaAeyhM7b0fNuABJ06htUODqqxdsA=
Subject key identifier:   BA:06:F9:E4:AA:9C:D0:0A:91:C5:6E:D3:1E:58:AE:62:C5:AE:B0:42
Authority key identifier: ED:79:73:CC:4E:7C:FB:F4:47:07:47:81:0C:41:6E:CC:7E:98:18:85
Certificate issuer:       /CN=ed7973cc4e7cfbf4470747810c416ecc7e981885
Certificate serial:       019CAAC66A7A0480E76E2BE7E90FE5FA1597
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
Manifest number:          13BD
Signing time:             Sun 01 Mar 2026 19:00:55 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:55 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:55 +0000
Files and hashes:         1: 7XlzzE58-_RHB0eBDEFuzH6YGIU.crl (hash: gP9i+Gb3N1Rrh+U2HbztI/u7aOkieJDs0y0kFlBb8cE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:6a:7a:04:80:e7:6e:2b:e7:e9:0f:e5:fa:15:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed7973cc4e7cfbf4470747810c416ecc7e981885
        Validity
            Not Before: Mar  1 19:00:55 2026 GMT
            Not After : Mar  2 19:00:55 2026 GMT
        Subject: CN=ba06f9e4aa9cd00a91c56ed31e58ae62c5aeb042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a6:e8:f9:bf:bc:29:8b:0e:27:c5:3e:4e:73:
                    36:4b:d3:84:41:51:29:9f:8c:ff:a0:3d:2a:e5:1e:
                    df:ec:5b:77:4d:e6:5d:5a:da:f9:63:01:82:ed:ca:
                    39:c1:44:f4:5e:92:a5:79:f1:6a:da:8e:99:23:44:
                    3a:83:6e:da:d4:46:92:35:23:0e:1a:ff:75:ed:7c:
                    80:f8:3d:e3:a1:13:c0:4a:b7:c3:05:ab:64:3b:18:
                    8f:0e:07:dd:8e:0e:16:90:13:b0:e8:13:11:ad:61:
                    02:9a:77:4e:fb:4d:38:70:df:14:c0:7f:31:6a:2a:
                    1d:1d:b2:ed:72:20:ac:95:84:6e:97:26:ac:78:cc:
                    a6:cc:bd:1b:01:8a:7a:0b:1a:e6:11:c8:f7:77:57:
                    26:9a:4e:31:dd:74:ed:b8:79:9e:7e:66:30:1c:54:
                    f3:0a:2f:83:e4:18:c4:28:aa:dc:dd:6f:5d:4e:b0:
                    4a:d8:e6:58:ae:33:f2:e8:fb:d2:1d:76:f5:0c:04:
                    bc:fe:fd:37:4d:4c:86:78:3f:54:3b:1d:76:49:2f:
                    67:f0:94:cf:31:d0:03:58:d2:d4:60:5a:2d:aa:7c:
                    74:13:eb:68:5c:bd:14:ef:fc:2c:ff:ac:9d:eb:fb:
                    5a:df:82:be:50:81:be:79:d6:9b:28:9c:75:c7:86:
                    c0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:06:F9:E4:AA:9C:D0:0A:91:C5:6E:D3:1E:58:AE:62:C5:AE:B0:42
            X509v3 Authority Key Identifier:
                keyid:ED:79:73:CC:4E:7C:FB:F4:47:07:47:81:0C:41:6E:CC:7E:98:18:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:06:74:c9:1d:92:6e:9d:5d:e3:cb:39:14:7e:bc:9d:9f:06:
         88:5e:2a:e7:39:9a:ce:ea:a5:6d:81:8b:f1:ee:e5:7b:ec:de:
         2e:d0:e0:8e:8c:95:f5:58:33:62:e9:c2:e2:f8:44:c3:99:82:
         7d:02:81:56:5f:22:f9:43:ca:7a:0d:05:f3:d7:e5:32:aa:a8:
         32:11:5c:88:2c:ae:fc:1f:98:1a:a5:11:e6:95:69:c3:98:01:
         47:a1:ad:dc:40:6d:f0:91:9e:d9:4a:7b:30:0b:a1:f2:6c:86:
         2a:b7:58:2f:53:51:9b:04:fa:c9:30:07:2d:36:c3:55:1e:86:
         e3:15:47:05:10:b1:44:cb:45:47:a6:2d:30:bc:04:4c:ed:c1:
         ad:90:1f:11:f1:e3:20:63:19:67:8b:c1:f3:97:dd:76:ae:ba:
         54:55:da:ae:f0:34:43:1b:36:b2:1f:42:8d:1b:bb:00:2c:e5:
         ec:02:f1:08:06:7f:b7:9c:0f:bf:59:11:d3:e3:77:37:9a:d5:
         1c:ae:40:83:13:00:b1:82:d7:47:41:8e:02:22:fe:6e:77:89:
         04:fc:06:86:ab:b9:e8:af:aa:9b:32:8e:a2:08:6a:61:02:b3:
         e1:47:2d:e1:4b:3a:ae:7e:21:ed:22:5f:62:3f:71:6b:57:50:
         52:f6:96:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:37:55 2026 by rpki-client