Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
File:                     7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft (raw, json)
Hash identifier:          dYNPoonpW4LFXlyTPjhoYxk0RI1sVk+iVYZ3+rBwvXI=
Subject key identifier:   D7:44:F4:C2:95:17:F5:84:3E:AD:88:AE:35:80:5F:F3:10:F6:3F:E2
Authority key identifier: EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1
Certificate issuer:       /CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
Certificate serial:       01A0C2C45017C52DFE76D38AD067FB105795
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
Manifest number:          07E8
Signing time:             Mon 21 Sep 2026 07:00:40 +0000
Manifest this update:     Mon 21 Sep 2026 07:00:40 +0000
Manifest next update:     Tue 22 Sep 2026 07:00:40 +0000
Files and hashes:         1: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl (hash: ol7uh6Q2E9ysy0obNrE1T1CdVCaYZTl/hdZt2MB62yQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 07:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:c4:50:17:c5:2d:fe:76:d3:8a:d0:67:fb:10:57:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
        Validity
            Not Before: Sep 21 07:00:40 2026 GMT
            Not After : Sep 22 07:00:40 2026 GMT
        Subject: CN=d744f4c29517f5843ead88ae35805ff310f63fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0b:ea:17:87:64:75:b2:f5:f5:a5:fe:e7:89:
                    66:35:dd:4c:b8:d5:68:23:25:a3:19:0a:e9:d3:81:
                    76:fa:f6:e2:f6:ed:1c:4a:f1:1f:db:db:f9:8b:6b:
                    88:01:06:ba:32:80:e2:fe:50:44:58:a6:8f:ec:e1:
                    39:16:70:5a:01:e2:a3:84:27:db:56:78:38:87:dc:
                    9e:b6:a0:54:16:be:a7:26:5b:3d:03:1f:0b:77:f7:
                    05:45:61:8f:d5:6b:f4:4c:5f:bd:b9:b5:16:c3:83:
                    fc:75:69:32:e3:75:f4:0c:bc:d8:e4:50:6f:e8:56:
                    a5:2d:98:49:c1:9e:a6:36:50:61:78:3d:12:64:36:
                    b3:77:38:38:22:6a:39:4b:3f:53:31:83:88:b6:e4:
                    df:02:99:1a:b0:17:dc:2b:a5:b1:65:7f:7b:5f:9c:
                    85:8a:0d:3a:ac:3b:fe:d1:b1:bc:bc:73:13:e5:5e:
                    29:23:91:45:17:67:d3:59:84:42:6c:b0:2a:2c:ef:
                    ec:21:9e:27:d1:e7:65:fa:80:24:a2:bd:33:5a:86:
                    4a:08:f8:94:ad:fb:61:d1:c2:f2:00:c4:3a:69:2e:
                    33:92:e2:52:44:d0:e8:ac:9b:34:dd:2d:30:81:39:
                    dc:af:b0:cf:74:f8:8a:46:4a:a0:3a:66:18:4e:30:
                    64:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:44:F4:C2:95:17:F5:84:3E:AD:88:AE:35:80:5F:F3:10:F6:3F:E2
            X509v3 Authority Key Identifier:
                keyid:EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:86:4c:06:64:a1:fc:a3:de:e0:4e:02:1d:4a:80:42:95:10:
         01:93:60:8a:e6:a1:98:b0:a6:29:a0:84:35:5f:21:9b:6c:04:
         d6:52:bc:8e:23:d2:44:64:f2:af:97:2d:b8:48:22:b3:98:f5:
         7b:1f:b1:06:c1:10:c7:4b:2b:f0:fd:1c:f1:3e:cd:17:27:aa:
         e3:77:9c:ad:99:04:46:9d:d6:25:d5:97:92:c2:0d:ed:cc:66:
         51:ae:d5:2f:ca:36:22:7e:ff:d3:f3:51:22:c0:ca:ca:d1:69:
         bd:61:21:32:11:eb:1b:17:03:43:49:c5:d5:b8:e1:ea:8e:c2:
         1e:ae:76:d0:bb:73:75:b2:6c:03:47:ce:a9:83:25:62:ad:90:
         17:f0:93:07:c4:75:19:47:29:26:ed:f9:3c:0f:ac:22:63:6d:
         7d:e7:8e:c1:8a:00:1d:45:33:15:2e:c0:f6:52:84:fb:d7:2c:
         56:55:b5:2b:97:8a:03:92:34:11:c0:cb:b0:b5:78:89:c6:6c:
         40:84:d1:b9:57:75:a4:5f:d8:01:f0:69:c7:3c:a0:4d:e1:b7:
         b5:49:93:c0:3c:be:b4:c5:ca:93:85:db:b5:80:d7:a7:e1:62:
         4b:0c:a2:a6:3d:36:47:75:f1:b6:59:08:2c:cf:4f:c3:69:ce:
         87:d2:d3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:59:22 2026 by rpki-client