Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
File:                     7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft (raw, json)
Hash identifier:          qU3Rp4tbo0QZ8qpLkk9S6I5rJ5fexKcNxJA9tUbcjAw=
Subject key identifier:   60:AA:12:4F:8F:B4:67:E5:32:7F:2B:65:42:3E:BF:F3:68:14:C8:50
Authority key identifier: EC:F5:D5:12:F9:10:44:B7:86:A1:55:89:A6:24:A8:D8:CB:92:9E:48
Certificate issuer:       /CN=ecf5d512f91044b786a15589a624a8d8cb929e48
Certificate serial:       01A1C6D65D14E89FA37C72F7E81D7D6E9494
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
Manifest number:          179D
Signing time:             Tue 10 Nov 2026 19:01:39 +0000
Manifest this update:     Tue 10 Nov 2026 19:01:39 +0000
Manifest next update:     Wed 11 Nov 2026 19:01:39 +0000
Files and hashes:         1: 7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl (hash: ZxnivjRafWeOLOL68R78ShPoRSCOZaCD9mbMyeGKah4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Nov 2026 16:12:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:c6:d6:5d:14:e8:9f:a3:7c:72:f7:e8:1d:7d:6e:94:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecf5d512f91044b786a15589a624a8d8cb929e48
        Validity
            Not Before: Nov 10 19:01:39 2026 GMT
            Not After : Nov 11 19:01:39 2026 GMT
        Subject: CN=60aa124f8fb467e5327f2b65423ebff36814c850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:14:1a:b4:35:74:84:e3:23:0a:93:0d:bc:c3:
                    85:15:dd:26:c6:5b:3d:9a:0e:67:96:23:48:68:57:
                    e2:6a:17:59:cc:ac:24:03:5e:80:f6:72:a9:63:cc:
                    90:57:dd:ee:c8:3f:c3:66:39:b6:7e:87:8d:bb:06:
                    05:00:a3:b3:96:bb:ae:21:82:4d:7e:e1:d5:3a:97:
                    46:d4:ea:6f:c2:ba:39:8f:ee:1f:4a:b1:fd:0e:54:
                    7c:85:c3:b2:54:57:ee:2f:9a:53:b7:b9:c5:4b:2c:
                    79:c8:f7:54:43:55:bb:21:fb:90:18:63:9e:b6:bc:
                    c6:fc:49:54:91:f1:4e:85:b1:f7:73:17:f0:9c:dd:
                    af:7a:28:57:8f:88:bf:cd:5b:6a:0b:8a:e1:91:9b:
                    e5:1b:c6:8a:f1:2e:55:60:c4:b1:cf:2e:76:e3:03:
                    d4:1e:8e:e7:ef:32:83:8a:9e:17:65:5b:48:66:e1:
                    ad:68:8a:57:1e:2c:87:7a:67:b0:be:0b:b7:48:df:
                    2b:c5:86:84:55:7e:9f:31:df:aa:9b:0d:c4:e5:4b:
                    3c:54:16:8d:fb:8f:ed:e8:8f:ac:01:8c:8f:17:02:
                    f3:dd:0e:f9:9b:b9:5b:97:88:56:02:aa:db:3f:8c:
                    20:6c:a0:ee:2e:42:d6:c7:1c:1b:7e:cf:e0:15:e4:
                    5f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:AA:12:4F:8F:B4:67:E5:32:7F:2B:65:42:3E:BF:F3:68:14:C8:50
            X509v3 Authority Key Identifier:
                keyid:EC:F5:D5:12:F9:10:44:B7:86:A1:55:89:A6:24:A8:D8:CB:92:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:09:34:f0:42:61:07:39:bf:56:08:b8:07:ed:69:7b:19:9e:
         c7:d3:2c:fa:50:0d:5d:d4:49:28:25:c2:34:4d:60:69:23:21:
         d0:1a:c2:53:b7:6a:13:df:22:22:e4:7b:29:bb:e5:d4:81:ed:
         b7:ed:c9:c3:91:8b:0f:b2:ce:aa:79:02:27:2b:09:95:bc:12:
         fd:33:67:82:3e:a6:29:60:f6:16:db:ba:51:8e:9d:26:c4:c5:
         92:b3:dc:64:1a:ba:b7:95:28:20:37:77:9b:b5:c5:17:e0:0e:
         2f:61:a5:af:f4:8c:dc:b0:8b:3a:83:29:3e:dc:52:4c:48:4c:
         7b:7c:3b:e9:55:4f:fb:89:e0:1e:65:75:65:1f:ef:53:c8:c9:
         39:03:8c:81:e2:a0:d7:9f:7e:02:3a:14:cd:a3:7b:cc:a1:c4:
         06:ea:67:ee:69:c9:e0:4c:78:51:43:c4:67:1c:92:5a:4e:ed:
         67:a3:f6:77:0c:3a:11:ef:b8:f0:b1:ec:27:21:fe:4d:1b:15:
         61:05:d4:a2:1a:25:8d:59:11:0c:97:7f:31:7c:66:d2:c8:db:
         96:18:15:d0:f1:83:0e:e0:f7:e2:20:c6:92:f7:7d:d2:af:7a:
         13:1c:37:cc:02:76:1d:c3:88:a4:b0:7c:ac:52:42:b0:23:65:
         e9:fe:d8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----