Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft
File:                     7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft (raw, json)
Hash identifier:          Lb8j66yQpXkR3axN7aQ1AHRrVMaZKi8j/hVHARzeYIc=
Subject key identifier:   95:6B:27:6B:55:79:2F:03:2D:C9:F8:AA:45:53:21:2D:4C:BC:1F:48
Authority key identifier: ED:24:15:01:3F:2E:9C:4E:E5:8D:7C:2D:FE:EE:AB:28:16:92:D8:57
Certificate issuer:       /CN=ed2415013f2e9c4ee58d7c2dfeeeab281692d857
Certificate serial:       019CA9EB43975F4F048C53B055C784A3840B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7SQVAT8unE7ljXwt_u6rKBaS2Fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft
Manifest number:          17D5
Signing time:             Sun 01 Mar 2026 15:01:33 +0000
Manifest this update:     Sun 01 Mar 2026 15:01:33 +0000
Manifest next update:     Mon 02 Mar 2026 15:01:33 +0000
Files and hashes:         1: 7SQVAT8unE7ljXwt_u6rKBaS2Fc.crl (hash: I4PM3u9vJzWVM6yXIR12E6JBaZW0TSDP33CFIBUZ+ac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7SQVAT8unE7ljXwt_u6rKBaS2Fc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:eb:43:97:5f:4f:04:8c:53:b0:55:c7:84:a3:84:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed2415013f2e9c4ee58d7c2dfeeeab281692d857
        Validity
            Not Before: Mar  1 15:01:33 2026 GMT
            Not After : Mar  2 15:01:33 2026 GMT
        Subject: CN=956b276b55792f032dc9f8aa4553212d4cbc1f48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bc:74:f3:61:9b:c9:2e:fc:63:75:68:fe:a0:
                    fb:40:70:c0:b9:ca:9a:00:f6:1a:db:59:42:30:85:
                    9a:05:ae:a8:cc:04:c7:22:24:3b:81:7c:94:cb:20:
                    2a:68:dc:76:da:9b:82:87:80:97:85:72:b2:fa:f9:
                    5b:4c:67:d3:51:46:8b:e6:64:e5:eb:c6:85:98:93:
                    5f:f4:d7:98:33:61:1a:8e:b0:d8:fb:e1:71:65:fe:
                    25:b8:eb:67:39:bd:e7:c4:f7:d2:6b:33:37:d5:5a:
                    e4:4d:bc:07:a6:5a:dc:f7:1a:01:06:a5:af:23:ee:
                    e7:36:8f:33:cd:ef:de:b4:17:12:2d:0f:fd:49:83:
                    b5:ee:63:a0:12:ac:9d:0f:63:00:ee:3f:95:61:35:
                    78:97:3f:32:bc:ca:68:f1:9e:d8:b8:0a:d6:8c:7f:
                    d2:5f:64:7b:d8:8f:f5:60:81:04:10:3d:28:fb:89:
                    06:df:c6:db:8d:8d:56:8c:56:11:7d:9a:04:d1:2a:
                    1b:1b:19:cd:32:9f:1d:8b:30:38:0c:ec:80:00:c7:
                    60:75:0b:73:78:0c:56:9f:1b:98:3f:07:9d:cd:1f:
                    bb:68:e3:e9:0f:ee:a3:be:82:79:8f:23:46:62:13:
                    6f:64:e2:24:00:e1:f2:af:a3:c7:1c:20:9f:75:9e:
                    63:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:6B:27:6B:55:79:2F:03:2D:C9:F8:AA:45:53:21:2D:4C:BC:1F:48
            X509v3 Authority Key Identifier:
                keyid:ED:24:15:01:3F:2E:9C:4E:E5:8D:7C:2D:FE:EE:AB:28:16:92:D8:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7SQVAT8unE7ljXwt_u6rKBaS2Fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:ee:c9:55:7d:c8:87:f7:2a:7a:bb:fd:bc:89:df:a5:9e:24:
         94:3a:c3:cb:cd:ff:6f:5e:f0:ba:8a:58:17:04:a5:9e:3b:44:
         15:7e:65:3d:3b:45:82:6c:aa:74:e5:5c:67:fc:fb:5d:83:56:
         65:42:1e:ec:74:8f:a0:18:6c:c1:d1:8e:78:f7:dc:76:9c:87:
         16:b7:a3:d4:6b:68:4c:fe:17:49:98:ac:1b:0e:14:2f:28:84:
         67:19:f0:23:10:77:88:6f:93:17:4e:36:ba:f9:71:59:6c:84:
         20:14:c7:38:37:b2:8e:e3:1a:f6:93:55:69:c2:ad:68:bb:56:
         b8:b2:21:f0:c7:a0:86:f3:8a:30:cc:c1:52:8c:a1:f3:c8:e7:
         78:15:91:27:16:3c:f9:dd:17:f6:4f:2b:00:ab:5a:45:97:d6:
         11:5f:38:98:65:fb:e9:b5:05:8a:ab:67:9a:77:6c:78:65:d1:
         66:0c:bf:6f:61:6c:6a:49:ac:be:51:56:ff:37:48:04:01:a8:
         e5:9a:58:17:ff:79:a1:3e:87:39:7a:8c:48:17:ba:6f:06:f7:
         c0:8a:e9:f3:3e:a4:04:29:d0:2e:06:c7:d5:10:3b:65:1b:4f:
         0f:2f:4b:48:d9:d1:8d:7c:53:6a:50:22:3b:94:3d:cd:ec:a1:
         12:95:cd:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyp60OXX08EjFOwVceEo4QLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkMjQxNTAxM2YyZTljNGVlNThkN2MyZGZlZWVhYjI4MTY5
MmQ4NTcwHhcNMjYwMzAxMTUwMTMzWhcNMjYwMzAyMTUwMTMzWjAzMTEwLwYDVQQD
Eyg5NTZiMjc2YjU1NzkyZjAzMmRjOWY4YWE0NTUzMjEyZDRjYmMxZjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbx082GbyS78Y3Vo/qD7QHDAucqa
APYa21lCMIWaBa6ozATHIiQ7gXyUyyAqaNx22puCh4CXhXKy+vlbTGfTUUaL5mTl
68aFmJNf9NeYM2EajrDY++FxZf4luOtnOb3nxPfSazM31VrkTbwHplrc9xoBBqWv
I+7nNo8zze/etBcSLQ/9SYO17mOgEqydD2MA7j+VYTV4lz8yvMpo8Z7YuArWjH/S
X2R72I/1YIEEED0o+4kG38bbjY1WjFYRfZoE0SobGxnNMp8dizA4DOyAAMdgdQtz
eAxWnxuYPwedzR+7aOPpD+6jvoJ5jyNGYhNvZOIkAOHyr6PHHCCfdZ5jfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVrJ2tVeS8DLcn4qkVTIS1MvB9IMB8GA1UdIwQY
MBaAFO0kFQE/LpxO5Y18Lf7uqygWkthXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1NRVkFUOHVuRTdsalh3dF91NnJLQmFTMkZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi83ZGFiZTctZGZmMS00NjZjLWE2MDAt
MDMxMWQwZDVkZGJiLzEvN1NRVkFUOHVuRTdsalh3dF91NnJLQmFTMkZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi83ZGFiZTctZGZmMS00NjZjLWE2MDAtMDMxMWQwZDVkZGJi
LzEvN1NRVkFUOHVuRTdsalh3dF91NnJLQmFTMkZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd+7JVX3I
h/cqerv9vInfpZ4klDrDy83/b17wuopYFwSlnjtEFX5lPTtFgmyqdOVcZ/z7XYNW
ZUIe7HSPoBhswdGOePfcdpyHFrej1GtoTP4XSZisGw4ULyiEZxnwIxB3iG+TF042
uvlxWWyEIBTHODeyjuMa9pNVacKtaLtWuLIh8MeghvOKMMzBUoyh88jneBWRJxY8
+d0X9k8rAKtaRZfWEV84mGX76bUFiqtnmndseGXRZgy/b2FsakmsvlFW/zdIBAGo
5ZpYF/95oT6HOXqMSBe6bwb3wIrp8z6kBCnQLgbH1RA7ZRtPDy9LSNnRjXxTalAi
O5Q9zeyhEpXNBA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:48:08 2026 by rpki-client