Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft
File:                     7zxxAAZFDN50pBmnFDKY5VBm8mw.mft (raw, json)
Hash identifier:          dQhE9bezcqmfZn9JCBp62mIUlR2IqfWKJ2/ou4fWdv4=
Subject key identifier:   BB:78:B1:40:1B:48:A2:B5:DF:C4:88:25:7A:CB:5B:4E:EB:15:00:BC
Authority key identifier: EF:3C:71:00:06:45:0C:DE:74:A4:19:A7:14:32:98:E5:50:66:F2:6C
Certificate issuer:       /CN=ef3c710006450cde74a419a7143298e55066f26c
Certificate serial:       019EBFC808D79B9F4D85770E93D3FE1D875C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft
Manifest number:          0854
Signing time:             Sat 13 Jun 2026 07:00:18 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:18 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:18 +0000
Files and hashes:         1: 7zxxAAZFDN50pBmnFDKY5VBm8mw.crl (hash: q54RLa+vLIhapH4JHUaEqMLwgrheP80ZbIY/XruWWEE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:08:d7:9b:9f:4d:85:77:0e:93:d3:fe:1d:87:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef3c710006450cde74a419a7143298e55066f26c
        Validity
            Not Before: Jun 13 07:00:18 2026 GMT
            Not After : Jun 14 07:00:18 2026 GMT
        Subject: CN=bb78b1401b48a2b5dfc488257acb5b4eeb1500bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:08:a3:30:50:51:e4:14:f8:a1:b8:ed:39:18:
                    74:74:7f:4c:8c:b7:6e:83:31:a5:f7:f8:fa:19:5e:
                    4f:fa:6e:5c:d2:a9:7f:1f:fd:38:ed:3c:6d:7e:42:
                    1f:c6:55:27:ac:d5:b4:4f:c6:4d:a5:e8:32:2c:aa:
                    37:b9:bf:0b:00:e3:74:7e:59:d7:7e:f4:13:3c:42:
                    08:a0:3c:73:2a:d0:02:28:c4:dc:fe:c6:1e:40:e0:
                    a1:c9:5a:c4:69:7b:b9:e7:09:6a:9f:d7:4c:9e:0b:
                    2a:e8:8b:1c:36:ec:24:ef:07:1c:8e:f5:d8:7f:eb:
                    15:7c:f5:39:58:4a:86:77:6c:8c:62:cf:3f:b7:8d:
                    46:93:16:22:2b:92:a0:9d:1c:5a:b8:ce:f6:e3:42:
                    90:3a:b4:44:df:1a:94:5d:4f:a0:21:32:a0:c5:c9:
                    38:54:df:1a:f5:c8:e8:74:43:80:f9:9c:89:6d:e3:
                    83:9c:96:9c:25:dd:92:0b:2e:3d:75:9a:70:f0:45:
                    c4:e9:4a:48:ce:c3:ba:33:d3:de:a1:b2:56:38:09:
                    3d:44:f8:b7:a6:54:fe:6f:18:1f:1a:f8:6c:dc:df:
                    59:51:99:ac:22:13:23:3a:a7:19:36:84:07:df:ff:
                    40:71:0e:e3:5d:19:97:e7:9e:93:b0:90:61:eb:cf:
                    d5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:78:B1:40:1B:48:A2:B5:DF:C4:88:25:7A:CB:5B:4E:EB:15:00:BC
            X509v3 Authority Key Identifier:
                keyid:EF:3C:71:00:06:45:0C:DE:74:A4:19:A7:14:32:98:E5:50:66:F2:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:4a:98:e5:c8:2d:14:b6:83:bf:da:5e:6f:2a:9e:2d:12:8b:
         cf:2c:a2:d2:6e:45:e2:6d:aa:e0:cd:ef:32:58:97:47:d9:7b:
         ce:ec:88:2c:67:c4:fb:c1:34:58:4c:21:9a:08:df:71:72:c5:
         d4:6b:02:f3:34:dd:ab:fb:b1:2c:32:1b:26:f0:bb:ba:7c:de:
         37:49:d7:90:93:3c:29:e0:14:fc:8f:23:a5:06:44:2f:91:3a:
         d3:1d:7e:05:7f:72:8a:9a:2f:b6:45:67:9d:c1:83:69:60:a6:
         77:b8:97:c3:0a:ef:9d:04:4a:76:cf:11:12:4b:31:ca:fd:6a:
         80:69:97:c4:dc:c0:27:2d:9f:33:7a:04:ac:bf:70:8a:89:39:
         24:ce:8c:59:c0:5f:b4:53:3c:97:2c:8c:95:45:c6:39:a6:8c:
         3d:4f:79:20:21:10:77:54:d5:c1:17:86:b8:37:94:94:c2:31:
         5a:70:6e:fc:4d:4d:6d:2f:74:22:3d:bc:b8:20:ec:9b:d3:bc:
         8e:c0:0b:81:ca:87:33:6d:2f:f2:87:91:a6:b3:47:a9:8b:f3:
         c5:ba:f9:d1:4e:cf:74:d3:cb:59:9f:8b:63:2a:1b:6f:04:a6:
         64:8b:f0:d6:2b:95:2e:d7:1c:68:43:f6:25:0b:d9:9c:25:fe:
         4e:57:5f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:28:18 2026 by rpki-client