
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/e_7CSauE-BJlaciz2OP0PNgsYRU.mft
File:                     e_7CSauE-BJlaciz2OP0PNgsYRU.mft (raw, json)
Hash identifier:          U8uKMfiM9FdZVAm1vbZFt+x9Gwsgm+HQdrQJ8bFia9c=
Subject key identifier:   B9:13:9B:B4:96:B0:A2:26:45:0E:E6:83:67:A8:59:00:5B:0C:1D:98
Authority key identifier: 7B:FE:C2:49:AB:84:F8:12:65:69:C8:B3:D8:E3:F4:3C:D8:2C:61:15
Certificate issuer:       /CN=7bfec249ab84f8126569c8b3d8e3f43cd82c6115
Certificate serial:       019A4DAAC5A43A2E93361F89508A6838DBB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e_7CSauE-BJlaciz2OP0PNgsYRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/e_7CSauE-BJlaciz2OP0PNgsYRU.mft
Manifest number:          1708
Signing time:             Tue 04 Nov 2025 07:00:28 +0000
Manifest this update:     Tue 04 Nov 2025 07:00:28 +0000
Manifest next update:     Wed 05 Nov 2025 07:00:28 +0000
Files and hashes:         1: e_7CSauE-BJlaciz2OP0PNgsYRU.crl (hash: sOLSNElxJlfOoPguDABzo7NJI+D3FZZNM5vWLyEMpWo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/e_7CSauE-BJlaciz2OP0PNgsYRU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/e_7CSauE-BJlaciz2OP0PNgsYRU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e_7CSauE-BJlaciz2OP0PNgsYRU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 07:00:28 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:aa:c5:a4:3a:2e:93:36:1f:89:50:8a:68:38:db:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bfec249ab84f8126569c8b3d8e3f43cd82c6115
        Validity
            Not Before: Nov  4 07:00:28 2025 GMT
            Not After : Nov  5 07:00:28 2025 GMT
        Subject: CN=b9139bb496b0a226450ee68367a859005b0c1d98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d2:79:c2:ea:7a:36:26:0b:e9:76:b6:79:c9:
                    9d:3e:56:36:85:16:23:c1:35:ea:be:98:00:a7:b3:
                    a3:07:e9:dd:ad:65:76:c8:f5:33:47:9f:60:2f:d5:
                    79:22:3a:df:a8:05:cf:7e:37:c6:b1:43:cf:f0:14:
                    48:a7:ee:c3:bf:a3:9f:89:4a:ac:5a:3d:88:5a:6b:
                    99:2f:9f:a4:f5:79:b3:0d:f0:13:34:c4:d2:44:6a:
                    8c:03:02:95:fc:45:d8:55:7e:85:22:fe:e3:83:e9:
                    f9:92:49:b6:bf:8b:88:d8:ee:04:2e:8c:3a:99:15:
                    5f:13:30:ae:09:b1:da:c7:61:b2:cc:94:f0:1d:c5:
                    a4:62:73:f5:3b:e7:e7:87:c4:c5:e1:6d:35:93:3b:
                    10:5b:06:69:0a:ae:9f:a1:e3:a7:54:48:6d:97:b5:
                    a9:38:ff:b8:02:80:9b:49:8a:72:76:68:00:41:bd:
                    6b:8a:16:df:c4:f8:b3:7a:82:3d:b5:6c:5e:7d:fb:
                    ed:76:5d:d2:93:4b:6a:4d:5f:c2:5a:ce:8f:b7:a7:
                    06:9d:fe:72:03:13:c8:d2:83:68:48:01:b2:26:7c:
                    95:97:6c:6b:c5:8f:72:8f:f5:56:ec:cd:93:60:ac:
                    cb:62:ae:37:7f:f3:87:e3:62:9d:f3:a3:c1:6f:cb:
                    c8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:13:9B:B4:96:B0:A2:26:45:0E:E6:83:67:A8:59:00:5B:0C:1D:98
            X509v3 Authority Key Identifier:
                keyid:7B:FE:C2:49:AB:84:F8:12:65:69:C8:B3:D8:E3:F4:3C:D8:2C:61:15
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_7CSauE-BJlaciz2OP0PNgsYRU.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/e_7CSauE-BJlaciz2OP0PNgsYRU.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/e_7CSauE-BJlaciz2OP0PNgsYRU.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         1d:83:ec:fe:ad:0f:6b:69:f2:f1:d5:67:34:7e:e6:e7:ff:0b:
         64:ad:20:07:0e:bb:62:d8:6d:76:f8:f0:dd:5a:2e:e8:44:db:
         67:a8:b3:5a:6c:dd:67:73:d4:0a:6d:49:66:9c:ed:71:80:de:
         d0:51:5d:33:e1:fc:9e:f1:5c:cb:56:0d:86:8b:8d:a4:a6:b7:
         90:e4:7a:71:cd:d0:38:8d:f1:cb:5a:4e:ef:ec:4a:a6:21:55:
         f3:39:82:8f:3f:1a:88:1b:71:8d:f6:11:b9:d7:b1:c7:75:06:
         2b:62:4e:4f:e0:b1:50:bd:85:50:6d:37:8d:fb:c6:06:05:93:
         c3:b1:18:d4:09:d4:b2:b1:4e:a9:96:e0:1a:49:f1:56:f1:cf:
         aa:9a:6f:ba:45:1c:af:80:16:de:db:ce:c4:63:33:ed:9b:83:
         23:76:70:cd:4f:98:1f:52:ce:4b:4e:2b:af:97:da:db:c1:3b:
         ca:61:8f:77:8b:17:fa:4e:6b:c3:9e:eb:1a:b3:b5:ab:7d:6e:
         d7:72:5a:09:63:9a:9d:b5:13:ad:94:cc:d7:99:dd:63:7c:6b:
         3e:e0:65:83:1c:f5:0d:ab:2b:60:d5:12:8e:d6:53:88:79:7d:
         0a:b4:2d:26:68:1c:b4:11:92:ad:f6:ee:69:9e:39:ae:5d:5f:
         58:be:aa:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 15:17:38 2025 by rpki-client