Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft
File:                     7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft (raw, json)
Hash identifier:          La9D8vU+HJkWUDA0Thtl5rOOmefK6/c1ExfPGXSdoRk=
Subject key identifier:   D0:8B:EC:BF:CE:8B:C5:8C:F3:68:A6:6D:27:A3:54:29:9C:71:9F:F9
Authority key identifier: ED:24:15:01:3F:2E:9C:4E:E5:8D:7C:2D:FE:EE:AB:28:16:92:D8:57
Certificate issuer:       /CN=ed2415013f2e9c4ee58d7c2dfeeeab281692d857
Certificate serial:       019FA899A34C3F7AC472FD362B981A57635A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7SQVAT8unE7ljXwt_u6rKBaS2Fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft
Manifest number:          1962
Signing time:             Tue 28 Jul 2026 12:01:08 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:08 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:08 +0000
Files and hashes:         1: 7SQVAT8unE7ljXwt_u6rKBaS2Fc.crl (hash: scudgCV9kOZbh/P9G/+VAuh96r7h0C9SV81ilqAcb2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7SQVAT8unE7ljXwt_u6rKBaS2Fc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:a3:4c:3f:7a:c4:72:fd:36:2b:98:1a:57:63:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed2415013f2e9c4ee58d7c2dfeeeab281692d857
        Validity
            Not Before: Jul 28 12:01:08 2026 GMT
            Not After : Jul 29 12:01:08 2026 GMT
        Subject: CN=d08becbfce8bc58cf368a66d27a354299c719ff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:51:73:5d:24:d3:81:81:db:68:80:19:df:1b:
                    30:f2:5c:26:dc:e7:6e:44:f7:13:b9:87:3f:cd:9d:
                    40:fc:08:b8:73:a9:3a:af:d5:c9:31:1f:6e:09:32:
                    15:93:63:53:c8:4d:04:88:29:28:80:22:67:13:85:
                    ff:0e:55:b5:d0:2f:97:bc:96:46:32:8d:70:33:c4:
                    57:93:74:bf:f1:33:71:9d:41:a2:37:49:06:a2:d4:
                    49:43:59:12:22:9b:70:10:71:1c:b8:7a:8a:73:04:
                    c9:fc:00:05:69:3b:54:83:b8:f0:0a:5f:db:fb:48:
                    ea:e4:0d:ff:44:8f:f5:b6:34:3c:56:b3:07:f5:bd:
                    59:14:c5:40:85:bd:5f:96:cb:14:4d:ec:22:3e:34:
                    07:53:17:62:a3:09:ee:59:12:d3:23:18:09:bf:2b:
                    d2:21:92:10:cb:9a:31:e2:03:76:8c:57:90:71:7a:
                    91:b7:0c:28:ed:1f:c4:66:bd:9f:04:69:7f:cc:b6:
                    be:7b:27:5c:c1:69:17:d2:43:39:c6:13:66:37:8c:
                    a5:c3:d3:f7:ee:24:11:2e:fb:87:34:e5:17:69:8a:
                    ea:85:9a:12:63:2b:61:94:e1:04:48:21:1c:92:a4:
                    44:7e:2d:0a:20:af:77:cf:02:4a:03:a5:13:76:cc:
                    a8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:8B:EC:BF:CE:8B:C5:8C:F3:68:A6:6D:27:A3:54:29:9C:71:9F:F9
            X509v3 Authority Key Identifier:
                keyid:ED:24:15:01:3F:2E:9C:4E:E5:8D:7C:2D:FE:EE:AB:28:16:92:D8:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7SQVAT8unE7ljXwt_u6rKBaS2Fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:10:d5:0e:7c:b8:42:94:ca:f5:83:56:09:3a:97:7c:44:de:
         02:49:42:7f:9e:2c:79:c0:0a:ad:ce:3d:fd:8d:68:ab:a1:b7:
         e7:6f:b8:f6:4d:cb:e9:fd:b6:25:7e:a1:65:b8:fc:7f:a9:c8:
         0d:71:4a:52:e4:2d:e1:42:be:f3:8d:21:c9:82:e6:0e:f6:db:
         0d:9e:30:3b:a7:ce:fe:bb:11:73:49:f3:09:a6:eb:64:38:12:
         37:fe:0e:9e:c2:a4:93:6d:17:8b:d2:63:7b:41:66:a5:63:dc:
         33:c1:1d:7f:11:c4:aa:34:16:06:4c:c4:04:08:d5:57:74:df:
         06:0c:17:7c:70:44:80:e2:10:f7:ff:31:2d:10:96:29:9e:d1:
         61:aa:6e:64:c0:27:d5:c5:83:02:75:f4:2c:9f:b7:17:34:40:
         89:2d:55:0a:ac:9f:4b:cc:35:27:eb:3a:f3:59:05:22:c6:b7:
         8d:f5:86:05:6b:8d:a1:33:f6:60:9f:7e:9b:fe:d6:3f:30:b1:
         c6:e0:c9:e5:15:f2:78:a6:4f:90:0e:75:ec:c6:67:09:d3:dc:
         99:b0:29:73:9b:9a:3f:d1:99:ae:02:10:f7:e6:1c:ed:04:bd:
         7c:1e:6e:3b:d2:47:52:27:c4:1f:a9:14:23:54:5f:b6:70:b6:
         47:5d:a3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:30:49 2026 by rpki-client