Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft
File:                     x7996xihKSBrrXc8-CId5UTj_YE.mft (raw, json)
Hash identifier:          y04N4Q2Idn68Eaa3LLwmVSpwe7QXtpf8xNowymlUqH4=
Subject key identifier:   A1:B4:19:95:1B:6F:30:AE:C8:A5:40:0B:68:4D:A0:CC:C9:EA:33:5F
Authority key identifier: C7:BF:7D:EB:18:A1:29:20:6B:AD:77:3C:F8:22:1D:E5:44:E3:FD:81
Certificate issuer:       /CN=c7bf7deb18a129206bad773cf8221de544e3fd81
Certificate serial:       019CABD9E3A2777CA59A38CD062394D6FD39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x7996xihKSBrrXc8-CId5UTj_YE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft
Manifest number:          0B14
Signing time:             Mon 02 Mar 2026 00:01:49 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:49 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:49 +0000
Files and hashes:         1: x7996xihKSBrrXc8-CId5UTj_YE.crl (hash: bmuqZYNgvLTk6klh4fvy+oKS282SNw62VlyPDjnf28U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x7996xihKSBrrXc8-CId5UTj_YE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:e3:a2:77:7c:a5:9a:38:cd:06:23:94:d6:fd:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7bf7deb18a129206bad773cf8221de544e3fd81
        Validity
            Not Before: Mar  2 00:01:49 2026 GMT
            Not After : Mar  3 00:01:49 2026 GMT
        Subject: CN=a1b419951b6f30aec8a5400b684da0ccc9ea335f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:09:cc:b7:f0:19:95:da:8b:55:b3:e4:5d:97:
                    cf:20:41:bf:35:cf:de:75:43:d6:57:b2:ec:42:3f:
                    37:24:6e:8e:90:66:58:d5:63:1a:0e:1a:ea:06:e4:
                    e5:e6:8d:92:c1:c9:57:e4:7b:54:dd:43:11:99:4d:
                    aa:ae:fe:9a:f8:67:a4:b4:1d:aa:28:45:da:06:f2:
                    61:a8:f7:75:d6:7d:53:96:2e:53:97:57:44:02:93:
                    a0:e3:bc:c0:97:6c:ad:45:13:fa:39:6a:ae:2e:3f:
                    fe:9b:77:b7:b9:a1:8a:f4:8e:df:41:31:38:e0:b5:
                    a2:4d:6c:e6:10:94:9d:06:ab:8a:86:64:21:16:9a:
                    97:e9:4d:40:a0:52:23:78:02:9d:51:f3:5e:30:fc:
                    65:46:9a:3a:c7:45:03:7b:19:c2:c0:e1:51:6a:cc:
                    68:2d:8e:35:42:03:a9:e1:41:dc:fd:a6:aa:04:59:
                    0f:44:58:d4:3f:df:9a:92:4c:57:59:84:db:df:a4:
                    44:98:e1:da:d6:90:cd:66:e7:62:8b:c2:6e:02:73:
                    89:81:fe:5c:8e:7d:bc:12:e8:39:a0:0a:11:78:c5:
                    de:37:97:96:d8:f3:a5:91:5d:62:12:60:e2:e1:96:
                    4a:9c:93:ea:2d:63:d3:9c:66:80:03:03:47:8e:52:
                    77:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B4:19:95:1B:6F:30:AE:C8:A5:40:0B:68:4D:A0:CC:C9:EA:33:5F
            X509v3 Authority Key Identifier:
                keyid:C7:BF:7D:EB:18:A1:29:20:6B:AD:77:3C:F8:22:1D:E5:44:E3:FD:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7996xihKSBrrXc8-CId5UTj_YE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:bb:79:1e:d3:6e:c2:e5:d4:30:e3:a7:41:4e:34:87:48:1b:
         4d:6f:e1:c2:f2:68:a4:03:61:7e:82:a4:f3:d8:98:b5:c9:b6:
         8f:5d:ad:96:d5:42:96:12:97:95:88:14:7f:14:9c:c4:7a:ba:
         a2:81:d5:fd:3a:ec:19:65:de:ef:4b:e9:88:cd:fc:5e:ce:bf:
         03:22:50:0f:05:a8:17:e5:63:47:86:4e:0a:f1:00:fb:41:3a:
         06:ec:4b:fc:a2:de:33:6c:3a:78:9b:51:dc:59:95:cf:c6:4d:
         f7:62:a9:04:1e:90:a1:1a:5a:38:fc:b5:03:b0:10:a7:8b:ee:
         ae:4f:d4:cc:01:8d:38:79:44:e3:e0:b3:00:96:61:dd:35:b8:
         39:08:31:bf:cf:86:8e:3b:5f:58:20:31:f0:c1:c2:40:e8:e1:
         9e:7d:97:4c:f1:3a:54:50:39:9b:5f:03:91:d2:cd:9b:6e:22:
         cd:c7:03:95:3b:c9:98:cc:e3:99:69:06:21:57:ea:e0:6d:0f:
         75:ec:a4:0b:ed:c0:a4:d1:c8:b1:e2:d5:f1:46:8d:c2:6a:d5:
         34:92:fb:55:7f:f4:fa:cb:c7:f5:a3:81:bc:dd:c0:f3:9b:40:
         88:d5:e3:84:8f:ff:3c:b6:6e:10:e6:7f:62:21:b0:2d:7e:20:
         7d:95:d3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:57 2026 by rpki-client