Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
File:                     C7M4e-bSDUos4TzAkuh_d3uLmVY.mft (raw, json)
Hash identifier:          LPXeEvA9asRf9if/uCoktN/HsZ7108N3/9UgJzf6KYA=
Subject key identifier:   76:9A:64:F4:57:B2:5F:B5:C6:D9:F5:B7:F1:CD:72:ED:64:93:08:A4
Authority key identifier: 0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56
Certificate issuer:       /CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956
Certificate serial:       019FAB62EC417D547852D6FA9D88AB6A727C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
Manifest number:          14A8
Signing time:             Wed 29 Jul 2026 01:00:14 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:14 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:14 +0000
Files and hashes:         1: C7M4e-bSDUos4TzAkuh_d3uLmVY.crl (hash: 6s71v7wynfITLHTmo/fkwtHU4Bp7WlLmw8B/0g+4y3o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:62:ec:41:7d:54:78:52:d6:fa:9d:88:ab:6a:72:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956
        Validity
            Not Before: Jul 29 01:00:14 2026 GMT
            Not After : Jul 30 01:00:14 2026 GMT
        Subject: CN=769a64f457b25fb5c6d9f5b7f1cd72ed649308a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:75:d0:98:f4:f5:8b:02:21:34:d0:3d:90:8c:
                    84:36:6e:47:34:32:75:30:d8:09:7c:30:ac:e9:91:
                    46:fa:0a:9c:0d:e1:a2:6e:73:a9:8d:33:77:54:93:
                    60:82:b0:41:22:b5:96:af:c3:5a:b8:8f:04:81:f2:
                    24:4c:2f:a5:17:8f:ef:68:8d:d4:eb:61:8c:af:62:
                    62:49:e9:b2:d3:8a:64:e3:4b:66:bb:b5:38:4d:d8:
                    fa:e8:4e:3a:ca:8f:dc:29:88:ad:c2:54:13:ca:f3:
                    09:5c:41:03:78:6a:35:9e:7e:b4:ac:72:61:2e:83:
                    6d:53:6d:8f:df:f7:c7:65:98:1e:cb:09:e4:55:41:
                    4c:87:01:d4:b8:99:c1:f2:78:42:cb:bd:20:c1:9e:
                    a5:76:8b:49:5a:65:48:a5:ea:de:5b:f6:ef:24:b9:
                    c8:7e:b1:ff:31:d5:62:2a:3e:45:2e:af:62:ab:86:
                    5e:63:16:cf:ff:47:32:79:27:a4:56:8d:04:f7:40:
                    d3:45:58:1e:fa:79:be:2e:62:aa:84:4b:c5:5b:5c:
                    7c:05:a6:ad:a4:b7:cf:af:e1:ca:4b:ef:16:d8:35:
                    9b:a6:3a:13:66:f7:34:0c:cf:43:c2:11:a5:04:30:
                    50:69:c5:d1:f9:0f:a5:75:5a:04:4e:23:0a:f8:ac:
                    86:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:9A:64:F4:57:B2:5F:B5:C6:D9:F5:B7:F1:CD:72:ED:64:93:08:A4
            X509v3 Authority Key Identifier:
                keyid:0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:35:65:4c:e7:4a:6f:e1:31:bb:76:b7:69:0c:dc:57:35:0a:
         8a:73:b3:f5:ae:ac:3a:43:15:bb:98:1b:63:ee:89:75:a0:5c:
         38:33:c3:4e:2c:b3:6c:8c:69:79:49:a2:f7:57:1c:32:63:23:
         f9:9a:d1:b4:f9:8e:29:5e:ac:4e:37:9e:83:a9:81:14:69:98:
         97:19:47:19:fb:16:cb:bc:2a:bd:c0:90:7a:d1:bb:fa:15:ae:
         be:02:83:9f:a8:79:20:e3:17:f6:7b:bd:f9:2a:82:06:a7:a2:
         04:2a:62:ef:68:31:2d:1e:ef:42:b2:e9:90:14:45:b3:02:c9:
         d8:ad:e8:75:81:5b:cc:ba:51:b6:21:c6:6c:0d:bd:7d:e1:e7:
         45:3b:b9:0d:c8:84:fe:a5:97:30:8f:12:a4:84:23:22:ca:0a:
         0d:7f:ae:99:02:d0:f7:48:5a:59:6a:61:4b:9a:35:63:c5:57:
         5a:c3:7c:82:62:6c:65:a6:80:1f:ca:49:d5:72:b4:f2:75:24:
         23:3c:51:25:df:8d:9b:56:f2:f8:6c:fc:bd:9e:22:e9:79:1b:
         dd:c8:8b:23:ee:fd:cb:d3:80:00:83:6a:83:79:e8:db:97:a4:
         26:73:ab:7b:b6:17:80:48:a9:4b:cb:78:92:d1:4b:e2:dc:95:
         88:a8:dd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:47:59 2026 by rpki-client