Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft
File:                     7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft (raw, json)
Hash identifier:          cIgL1ddFb+lT9pB0hlntyvaxQGIouU0BWhIPIjSz9Vw=
Subject key identifier:   CE:0C:DD:8A:2D:25:DB:AF:C2:DF:9E:BF:70:69:00:42:D6:D1:1E:8E
Authority key identifier: ED:6F:9C:79:06:94:0E:3D:44:37:C6:BD:CD:E1:64:D0:65:A8:0E:A5
Certificate issuer:       /CN=ed6f9c7906940e3d4437c6bdcde164d065a80ea5
Certificate serial:       019EBF5A368DF3D931E699208449A4DDE1BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W-ceQaUDj1EN8a9zeFk0GWoDqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft
Manifest number:          0903
Signing time:             Sat 13 Jun 2026 05:00:20 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:20 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:20 +0000
Files and hashes:         1: 7W-ceQaUDj1EN8a9zeFk0GWoDqU.crl (hash: YCQsxxmQl5f7AZYJbn6xDIZE0h8/QPGu8iQmEcaIGTw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7W-ceQaUDj1EN8a9zeFk0GWoDqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:36:8d:f3:d9:31:e6:99:20:84:49:a4:dd:e1:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6f9c7906940e3d4437c6bdcde164d065a80ea5
        Validity
            Not Before: Jun 13 05:00:20 2026 GMT
            Not After : Jun 14 05:00:20 2026 GMT
        Subject: CN=ce0cdd8a2d25dbafc2df9ebf70690042d6d11e8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:35:e0:97:63:8e:bf:85:ab:70:4e:63:86:b9:
                    78:1a:3d:07:71:35:ce:d8:1c:a8:f9:34:40:9b:d2:
                    64:e6:4c:82:25:28:64:b3:3b:52:e7:51:45:8c:ac:
                    1c:c3:e5:00:5f:e3:72:f5:9e:ec:46:93:0d:d1:2c:
                    1b:3d:db:43:a3:5f:5c:69:92:c2:36:f8:bf:3f:dd:
                    2e:16:47:2b:6a:e7:0a:8b:27:68:44:c7:9b:02:5c:
                    a0:75:09:39:5d:bd:42:4c:27:89:d1:a7:d4:bc:84:
                    62:09:bf:02:2a:f6:9c:28:24:a7:25:d8:a3:27:2b:
                    7e:41:80:57:ad:5f:4d:a0:e8:e7:9b:15:b1:02:23:
                    97:90:be:b1:09:da:77:64:00:ff:45:65:b7:ea:62:
                    5d:b0:98:b0:68:01:76:06:5a:30:f3:53:d7:f2:52:
                    3e:71:a3:75:11:65:13:53:44:5e:64:d5:56:5b:df:
                    ab:a6:46:e2:33:dd:ff:cd:b1:31:d4:76:46:c1:0e:
                    18:77:e9:eb:2e:b5:66:d8:3c:72:05:a3:d7:52:d8:
                    44:0b:47:c5:e1:9b:a2:4d:91:e3:c9:33:4a:76:a3:
                    29:43:56:57:1b:3e:39:60:ed:0f:cd:0b:b6:d5:17:
                    9e:7a:ad:8e:91:85:5e:9c:3d:d8:69:8d:d5:ad:6e:
                    17:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0C:DD:8A:2D:25:DB:AF:C2:DF:9E:BF:70:69:00:42:D6:D1:1E:8E
            X509v3 Authority Key Identifier:
                keyid:ED:6F:9C:79:06:94:0E:3D:44:37:C6:BD:CD:E1:64:D0:65:A8:0E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W-ceQaUDj1EN8a9zeFk0GWoDqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:4f:30:25:39:24:dc:21:5d:40:3f:73:56:8b:dd:c9:ef:0c:
         e4:d1:11:a4:73:80:07:80:13:0e:a2:d1:7c:98:4b:9b:ec:15:
         ce:f0:26:65:cf:e5:ef:d0:85:2e:51:c7:d1:62:91:e3:2d:98:
         72:13:31:63:96:c3:35:ae:56:54:ab:63:63:72:fe:1e:a7:16:
         14:a3:b9:f4:13:68:ab:e8:d5:6a:8e:9e:72:56:00:32:fc:90:
         45:3a:41:fc:60:84:a7:d5:36:87:20:0c:1f:ab:ce:82:c1:dd:
         23:0d:11:8b:a7:58:46:f1:ee:3e:a7:22:85:79:d6:bb:12:d7:
         f3:a4:58:6c:17:4d:85:e5:6e:cf:ad:d2:6b:9e:5d:ad:37:10:
         8f:0c:c6:fa:fb:a8:68:5a:d5:60:11:94:0b:21:85:28:60:8d:
         1f:a8:05:b5:59:e2:4c:bf:7f:34:58:1a:ea:71:dc:d0:38:0a:
         3e:09:e6:9c:1f:4d:62:ff:cd:6e:42:a9:88:38:b7:c3:18:93:
         46:15:6b:de:bc:31:81:e6:11:98:b3:1c:ec:a8:b5:7d:64:77:
         3d:0a:1b:fb:81:b1:63:2e:8c:6c:ae:0c:df:e7:e8:53:bf:32:
         b1:5b:75:7a:59:29:cf:b8:d5:68:05:7a:06:2d:8e:98:9a:b2:
         63:72:b6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:36:18 2026 by rpki-client