Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
File:                     7MzCuQnHyBXKzLX85THDJSb63Vo.mft (raw, json)
Hash identifier:          cf5jI64q+3kfDs+ACk/ZcwunhJvJVc4ZgicA5LoU96A=
Subject key identifier:   51:A4:6A:44:CA:4B:8F:E1:01:80:D6:C5:7D:0F:74:52:B8:2E:14:81
Authority key identifier: EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A
Certificate issuer:       /CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
Certificate serial:       01A0C70F26A41E8E92BE05BBF8704251EDDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
Manifest number:          1764
Signing time:             Tue 22 Sep 2026 03:00:53 +0000
Manifest this update:     Tue 22 Sep 2026 03:00:53 +0000
Manifest next update:     Wed 23 Sep 2026 03:00:53 +0000
Files and hashes:         1: 7MzCuQnHyBXKzLX85THDJSb63Vo.crl (hash: nZZjt97xIDEJxQzeKChQXZe7Ials/278k4+NR/JHCqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:0f:26:a4:1e:8e:92:be:05:bb:f8:70:42:51:ed:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
        Validity
            Not Before: Sep 22 03:00:53 2026 GMT
            Not After : Sep 23 03:00:53 2026 GMT
        Subject: CN=51a46a44ca4b8fe10180d6c57d0f7452b82e1481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:34:bb:73:43:ce:5f:7a:9f:ba:1b:ed:1a:7f:
                    de:16:e3:f9:24:3e:f8:83:70:4e:9a:93:b4:19:3e:
                    ae:d4:7f:df:2f:93:97:9e:ed:14:50:c4:23:d9:ba:
                    fe:f4:6b:9a:c0:f5:e1:1c:4a:2b:79:fb:46:d1:55:
                    4a:88:a0:4b:07:f8:1b:6e:72:c9:f2:83:09:ed:63:
                    07:04:8e:be:5d:7d:58:89:7d:18:34:0a:61:19:03:
                    63:e1:d8:94:dd:12:60:79:47:83:f7:1d:5c:a0:56:
                    7d:93:bf:24:74:f8:2d:2c:bc:81:55:6c:56:79:b6:
                    fe:bf:07:af:e9:9c:32:40:8c:4e:37:31:18:88:3b:
                    8f:93:47:3d:5d:13:d3:a3:5d:70:f9:9e:77:6d:a7:
                    cb:0e:c2:d0:18:27:b5:ca:17:72:85:6b:b2:e5:bf:
                    ff:46:fe:0b:0f:3b:a9:4a:db:ae:d4:a3:b6:bd:91:
                    14:3d:11:76:6b:91:a1:f6:62:3f:b0:17:8f:9a:93:
                    d4:9f:3f:aa:60:2f:c9:e9:eb:e6:d3:24:54:5a:a4:
                    de:20:6c:4c:f0:07:57:e8:82:c7:b1:1d:7e:b1:fe:
                    18:3e:7f:79:40:b2:93:b0:78:0e:c1:4c:01:71:f8:
                    95:f9:bb:7d:c9:43:ec:3f:23:c5:f7:8a:89:e7:93:
                    13:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A4:6A:44:CA:4B:8F:E1:01:80:D6:C5:7D:0F:74:52:B8:2E:14:81
            X509v3 Authority Key Identifier:
                keyid:EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:fc:f9:62:b7:b3:8e:d3:56:86:b6:61:5e:63:32:e2:35:22:
         7a:50:4a:8a:0a:79:0d:d3:1f:dd:8a:97:de:6d:3d:2e:a6:d9:
         00:94:3c:d6:41:4f:59:d2:0d:ca:26:9d:5c:08:3a:6d:55:92:
         5d:99:1f:52:30:da:fd:d5:a7:0b:54:60:d4:6f:3e:a6:8d:84:
         27:80:df:5b:02:49:0e:08:80:e2:e3:87:23:b2:45:81:4d:77:
         02:c2:06:90:83:1c:7a:a4:17:09:47:ef:75:cc:11:a9:e6:94:
         01:63:b9:c1:13:09:27:14:49:a9:0d:25:38:6b:f5:36:17:79:
         32:c2:37:2c:bb:a4:51:d3:cd:2a:c1:3c:5f:c1:2c:5f:b3:fd:
         5a:c4:a7:11:76:1c:74:31:a6:e2:77:69:d9:4d:c2:76:aa:e6:
         c5:5d:65:55:c5:c8:62:07:fe:8d:a7:55:0d:7e:77:83:77:13:
         5b:67:d0:61:a5:44:69:c7:68:d4:22:ba:98:ba:dd:26:72:2e:
         0a:1d:b1:fd:45:5c:f9:02:f6:1f:b9:3a:65:15:b2:31:5f:4c:
         ea:0a:7a:29:89:7f:1a:a0:ac:84:b2:70:a5:f9:b4:ae:99:d3:
         20:03:6e:11:65:68:80:c5:08:01:2e:17:18:42:65:59:b0:a3:
         e7:df:59:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:40:18 2026 by rpki-client