Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
File:                     7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft (raw, json)
Hash identifier:          5ylj4NRzEW48dTAvjp8CWH65NZj04vJ7GvRyqlJ7t3k=
Subject key identifier:   4D:1E:EE:06:3C:0C:EF:18:13:15:4A:38:E5:26:7E:EC:64:15:0B:F9
Authority key identifier: EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1
Certificate issuer:       /CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
Certificate serial:       019EBF23C8D287C347DD54B1469651311C1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
Manifest number:          06DD
Signing time:             Sat 13 Jun 2026 04:00:53 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:53 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:53 +0000
Files and hashes:         1: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl (hash: 9QIa1m8QAFip2OjtLSpmCFXWZcj3y+1Vc/6glfgrH08=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:c8:d2:87:c3:47:dd:54:b1:46:96:51:31:1c:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
        Validity
            Not Before: Jun 13 04:00:53 2026 GMT
            Not After : Jun 14 04:00:53 2026 GMT
        Subject: CN=4d1eee063c0cef1813154a38e5267eec64150bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4a:df:df:3b:96:a4:4a:4b:c1:c1:db:d1:a7:
                    9e:ee:78:05:92:31:6e:bb:a4:9d:18:99:3e:67:bb:
                    d9:7e:73:9b:04:56:e0:1f:70:bb:1d:c3:b1:11:b7:
                    b1:0d:5f:3d:5d:0e:8f:a8:09:c1:75:54:4c:d6:d4:
                    2c:d1:1e:15:31:f5:de:80:5e:b1:75:23:57:7b:d3:
                    56:27:e4:29:04:aa:df:af:75:68:1a:46:c1:27:fe:
                    ac:fc:06:5e:62:47:c6:31:7e:60:80:2c:3e:a6:27:
                    4a:8d:57:39:c3:31:1b:cb:3c:f2:7c:5a:bf:4e:7b:
                    35:96:63:a4:a0:4f:c2:59:da:8e:e5:e9:12:b1:ee:
                    3e:95:1b:dc:b9:b0:ca:66:a0:64:0e:5d:ac:67:af:
                    ae:ba:4c:18:a6:d3:88:97:b6:68:ec:bc:20:1e:e7:
                    68:8c:96:36:e1:59:d8:6d:17:5a:34:7d:7a:b9:68:
                    67:2f:df:b5:71:af:75:d6:67:00:bf:87:fb:7a:54:
                    70:0a:8b:1d:64:73:7f:ae:d0:d5:60:28:78:01:a6:
                    b1:dc:c8:fc:67:f7:81:3e:69:f5:0a:db:bc:37:5b:
                    25:80:6d:08:0c:d7:51:b9:53:38:df:de:66:29:27:
                    82:d7:33:05:55:ad:db:1f:c9:23:e8:c3:0e:a7:8d:
                    ea:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:1E:EE:06:3C:0C:EF:18:13:15:4A:38:E5:26:7E:EC:64:15:0B:F9
            X509v3 Authority Key Identifier:
                keyid:EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:1e:e6:1c:c0:ce:52:c8:9d:47:51:bc:97:c7:db:d5:a2:54:
         e3:aa:ca:be:48:ee:5b:57:8e:53:c9:ae:76:3b:eb:08:ea:74:
         d2:0d:68:f0:53:02:73:6f:b6:3d:86:95:86:7b:88:cd:e6:ac:
         64:60:aa:f7:33:29:fd:59:ad:6e:1a:f3:ea:48:5d:ed:09:0d:
         11:4b:83:2f:41:e0:76:6a:83:62:50:9f:96:d8:c1:50:14:5e:
         01:17:56:2d:4c:35:8b:71:9a:a5:a0:68:e1:43:57:2c:d4:ca:
         05:41:79:e4:3a:aa:c0:89:d4:42:f4:1f:64:7c:cd:2c:1d:30:
         3f:1e:52:91:c4:00:83:d2:58:f4:c4:cf:ee:e8:dd:6b:ec:2c:
         7a:48:cb:32:17:24:37:50:fd:9a:6e:9c:3e:aa:0c:de:13:e0:
         b9:cc:0e:90:82:fa:67:72:78:5c:dc:49:92:66:e3:4f:82:99:
         68:f0:9f:32:1c:2f:b7:45:92:a0:fc:fe:b1:3c:4d:a3:50:09:
         82:e8:3a:1a:27:1d:2e:7b:92:8c:2c:10:df:9d:2e:1f:35:99:
         a8:57:75:41:0c:f7:2c:15:0a:99:36:f5:c2:c6:4b:b6:c5:07:
         90:88:11:30:c4:73:a7:94:43:11:a6:4d:81:04:36:de:31:99:
         28:7b:b7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:25:08 2026 by rpki-client