Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
File:                     7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft (raw, json)
Hash identifier:          Ep1b9sWJlciapDmVUMPsMwYtDVD3yw2a5mJexmQDSKA=
Subject key identifier:   6C:85:F0:96:96:48:0D:69:24:8A:92:6F:64:72:F7:BC:AE:56:51:2D
Authority key identifier: EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1
Certificate issuer:       /CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
Certificate serial:       019FAABEC1901C50D91A14510C3FEC4605DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
Manifest number:          0757
Signing time:             Tue 28 Jul 2026 22:00:55 +0000
Manifest this update:     Tue 28 Jul 2026 22:00:55 +0000
Manifest next update:     Wed 29 Jul 2026 22:00:55 +0000
Files and hashes:         1: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl (hash: DHLR9rHgXEcEG/p8t3yqrElTbWJVWs89nnht5rISvEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:be:c1:90:1c:50:d9:1a:14:51:0c:3f:ec:46:05:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
        Validity
            Not Before: Jul 28 22:00:55 2026 GMT
            Not After : Jul 29 22:00:55 2026 GMT
        Subject: CN=6c85f09696480d69248a926f6472f7bcae56512d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8e:a9:b1:e4:c4:b5:ca:64:55:6e:1a:60:c7:
                    82:87:01:7c:df:8a:fc:61:71:c3:15:86:8e:13:04:
                    03:d6:b4:6d:83:6d:88:1d:07:08:97:be:cd:9f:56:
                    14:ba:ac:d0:6c:f0:4b:82:64:f7:3e:fa:f0:9d:b8:
                    94:b4:ba:bd:65:50:8b:5d:5b:9b:a1:64:ff:98:6e:
                    fb:ce:f6:fd:3e:78:04:85:f9:c1:dd:79:28:05:e5:
                    fd:53:1d:2c:8d:ad:2c:55:42:92:4e:6c:90:07:dd:
                    c7:84:88:95:ac:5c:55:d5:67:a7:4d:ea:94:45:d4:
                    ae:aa:97:32:8d:db:bf:32:81:2e:14:1a:1f:44:8a:
                    7f:43:3a:64:9c:60:da:5e:d2:15:9f:74:5c:04:1e:
                    3b:72:e5:94:4c:d3:7e:f2:13:7a:9d:f0:ff:22:53:
                    25:9a:ba:93:b8:8e:2a:ec:e3:94:be:1a:cf:0a:9b:
                    b1:f9:bb:5a:cd:82:c2:fd:c7:14:fb:08:f5:19:fe:
                    d8:ac:62:13:3b:22:4a:b5:75:ab:d0:eb:c2:78:4b:
                    55:10:32:c0:d2:94:b0:4a:d0:a3:23:70:97:3e:d2:
                    ea:0f:c9:9f:ec:9a:d1:bc:60:25:41:08:08:7d:0a:
                    71:77:8b:c4:b3:84:b4:a9:60:57:6b:91:f5:9a:3d:
                    58:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:85:F0:96:96:48:0D:69:24:8A:92:6F:64:72:F7:BC:AE:56:51:2D
            X509v3 Authority Key Identifier:
                keyid:EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:4b:49:12:1a:cb:89:5e:d1:f2:c6:11:22:f0:71:c9:04:34:
         10:75:d0:d8:36:39:b0:2c:5c:7e:ef:34:9f:62:fe:82:70:12:
         e2:a3:57:c3:51:92:f9:29:9d:b9:59:27:f1:c8:f9:e7:e3:cb:
         0d:18:42:64:43:94:ce:37:b5:99:14:e8:76:54:60:4e:ee:a4:
         14:3a:3b:bb:23:28:af:b9:17:f5:10:a9:b8:a1:fc:70:e4:a8:
         a9:bb:7f:7a:42:34:d3:5f:98:5c:53:36:cb:95:25:4f:a3:a3:
         69:9b:4b:32:3a:7c:77:67:28:82:60:f6:67:b9:50:12:4b:cd:
         5d:0d:0f:cc:13:35:15:78:85:88:56:66:16:81:f8:42:c1:3b:
         f1:90:3c:6c:0c:4c:9a:b3:7b:90:45:6c:10:53:b4:13:6c:e6:
         b6:e0:53:90:ba:27:9c:f0:c2:d9:37:4d:b0:8b:8e:b2:d2:8b:
         1e:d7:fb:4e:08:14:2a:77:c6:57:b9:00:84:9c:e7:0f:ea:46:
         6d:5e:7a:6f:2e:7a:d1:40:71:b2:ab:87:00:5e:d1:98:c4:26:
         69:76:95:d1:64:bc:60:2b:a9:ee:eb:2e:94:b8:ea:97:13:65:
         34:5c:c4:ca:2b:1e:71:b5:e4:74:84:0e:a3:fc:9e:03:ed:0a:
         7e:67:49:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:17:38 2026 by rpki-client