Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft
File:                     7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft (raw, json)
Hash identifier:          Ca5aolerxUgQzu1GolCae16vw9PcdtonBg7I3C4rzi8=
Subject key identifier:   34:61:C2:6E:87:C9:D8:BD:8D:DD:E4:56:D6:86:D9:15:24:71:56:A9
Authority key identifier: EC:B2:F0:95:30:06:10:45:F4:2F:7B:D5:1F:1C:3B:62:59:EB:AE:1B
Certificate issuer:       /CN=ecb2f09530061045f42f7bd51f1c3b6259ebae1b
Certificate serial:       019EBEEC98CFA62F1FEEA751E23E2B70AA25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft
Manifest number:          1957
Signing time:             Sat 13 Jun 2026 03:00:37 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:37 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:37 +0000
Files and hashes:         1: 7LLwlTAGEEX0L3vVHxw7Ylnrrhs.crl (hash: 53ugS3iScR1OfjfS0viGIQnRiZh0aEXIZCt+6dhNq5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:98:cf:a6:2f:1f:ee:a7:51:e2:3e:2b:70:aa:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb2f09530061045f42f7bd51f1c3b6259ebae1b
        Validity
            Not Before: Jun 13 03:00:37 2026 GMT
            Not After : Jun 14 03:00:37 2026 GMT
        Subject: CN=3461c26e87c9d8bd8ddde456d686d915247156a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:97:e1:c3:f3:69:02:3c:af:89:ad:15:2f:40:
                    2d:96:f0:1a:60:29:78:f9:78:d4:09:3b:45:16:94:
                    c3:b9:6a:1c:75:2f:38:41:85:a9:c0:16:2b:e6:c9:
                    58:c4:d3:f3:d2:f9:f3:8a:f2:4b:8c:2d:ae:af:16:
                    84:50:16:39:95:12:86:2c:41:6d:60:8e:22:16:df:
                    18:de:ac:de:2d:33:48:d7:66:67:7b:11:e6:77:80:
                    ad:aa:43:87:b5:79:ef:4a:4c:af:b1:2b:83:fa:81:
                    78:fb:a9:46:95:5a:30:b5:7a:ae:84:56:80:c9:08:
                    a8:3b:44:84:93:da:3e:1b:7e:b1:f0:43:3f:f6:17:
                    83:b2:88:bc:cd:c2:fc:5b:b2:61:76:cf:ed:8d:eb:
                    33:37:bd:4d:51:35:28:05:fc:b3:c7:36:43:e0:f5:
                    a7:80:35:8a:86:77:4d:8e:63:87:c1:61:aa:7d:7b:
                    72:fc:83:ef:88:be:62:5e:ba:89:a4:9b:6f:bd:b6:
                    24:60:4e:f1:7b:8c:38:3c:e7:b4:0e:f4:9e:dc:52:
                    8b:35:dc:ae:18:9d:66:17:01:d9:91:f4:69:43:82:
                    59:6f:3c:c2:44:bb:ed:2d:a1:e6:ac:da:56:e2:72:
                    45:74:25:44:4f:d5:24:3c:e5:9d:2e:4c:f9:a3:c4:
                    75:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:61:C2:6E:87:C9:D8:BD:8D:DD:E4:56:D6:86:D9:15:24:71:56:A9
            X509v3 Authority Key Identifier:
                keyid:EC:B2:F0:95:30:06:10:45:F4:2F:7B:D5:1F:1C:3B:62:59:EB:AE:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:60:92:fc:07:81:ac:89:9c:2b:b3:f9:c4:01:d3:5b:1a:30:
         44:af:7e:c8:59:a2:ae:67:a3:c0:75:49:ec:89:b1:17:bc:17:
         30:bd:ea:96:24:fe:32:34:4a:39:6d:63:a6:e4:bd:2a:70:a9:
         02:b6:b8:04:72:ce:9b:89:3a:40:06:ea:53:47:32:83:53:c4:
         15:fb:97:cc:db:e5:7c:95:07:e6:aa:f6:58:b1:30:84:04:c0:
         39:a3:bf:66:d0:76:2f:42:70:7e:b9:51:4e:6f:10:ef:fd:01:
         62:14:3d:03:62:6a:83:4d:71:83:b7:db:26:bf:08:1b:a7:3d:
         e5:84:ed:51:b1:4b:20:95:f9:3c:a6:4f:0b:34:12:46:45:3f:
         ce:38:41:04:4a:ff:75:bb:07:16:0c:4b:78:e1:69:ce:13:6c:
         35:77:05:bd:f1:e5:6e:3e:35:55:29:be:9f:6f:fe:6d:7c:70:
         1f:80:49:df:93:59:76:38:f3:36:94:85:d7:ac:82:ae:31:0c:
         47:e6:a2:dd:59:e5:76:16:e4:73:69:ec:71:ad:c3:f6:4c:e6:
         41:d3:d7:50:d5:08:54:30:1e:58:34:e0:62:50:a3:07:76:56:
         8d:69:83:8e:49:68:ad:f8:db:69:03:73:e7:c3:3d:52:24:f6:
         ca:f9:8f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:56:07 2026 by rpki-client