Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
File:                     7dnow7XdvumM1_7qDf-MdiW4Wp0.mft (raw, json)
Hash identifier:          o9JXyG9OXvOnM90VDqWgLZqRKLsilGaLsj5qtN8ZLHg=
Subject key identifier:   4F:A9:5B:75:26:80:86:DB:60:64:71:26:A0:96:21:A9:D6:09:21:90
Authority key identifier: ED:D9:E8:C3:B5:DD:BE:E9:8C:D7:FE:EA:0D:FF:8C:76:25:B8:5A:9D
Certificate issuer:       /CN=edd9e8c3b5ddbee98cd7feea0dff8c7625b85a9d
Certificate serial:       01A0C2FB707D9450B393DDA05B61D701A8E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7dnow7XdvumM1_7qDf-MdiW4Wp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
Manifest number:          0FD4
Signing time:             Mon 21 Sep 2026 08:00:53 +0000
Manifest this update:     Mon 21 Sep 2026 08:00:53 +0000
Manifest next update:     Tue 22 Sep 2026 08:00:53 +0000
Files and hashes:         1: 7dnow7XdvumM1_7qDf-MdiW4Wp0.crl (hash: qkwwdxsaAG0qqhDhIcre/48bA5Cu9HiCMTfGBF7P7JQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7dnow7XdvumM1_7qDf-MdiW4Wp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:fb:70:7d:94:50:b3:93:dd:a0:5b:61:d7:01:a8:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edd9e8c3b5ddbee98cd7feea0dff8c7625b85a9d
        Validity
            Not Before: Sep 21 08:00:53 2026 GMT
            Not After : Sep 22 08:00:53 2026 GMT
        Subject: CN=4fa95b75268086db60647126a09621a9d6092190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:db:44:e4:61:16:af:66:52:c1:10:40:ba:bb:
                    fa:0c:5b:a9:06:26:97:59:12:57:41:11:6f:13:89:
                    87:0f:e6:16:6b:b6:db:b2:da:dd:17:37:ad:52:34:
                    49:ab:7f:07:51:4f:22:08:5e:81:e1:8c:81:9d:74:
                    bc:1e:7e:10:6d:17:7f:bd:ae:ff:a9:ac:ed:6b:38:
                    99:cb:9f:44:63:33:95:00:0a:a5:eb:93:92:f1:57:
                    27:b1:7b:9e:29:b5:83:9d:1f:81:de:48:1c:6c:ed:
                    12:5d:71:db:60:e3:a1:73:d1:6c:67:e0:96:d8:b4:
                    4e:36:07:59:50:db:3a:75:82:66:f0:9b:c8:51:1e:
                    43:dd:90:ed:3d:84:ec:76:d5:7b:04:e2:cf:f7:98:
                    9c:e6:66:d7:93:43:82:ec:03:b4:66:5d:81:65:3f:
                    c2:74:33:76:8b:b1:be:c7:5f:c4:d5:81:ea:39:3f:
                    34:6f:a2:a4:49:ae:28:52:51:8e:af:fa:0c:dd:9c:
                    3b:fc:7e:81:ec:c2:3b:47:bc:de:25:c8:bb:9c:2a:
                    76:7b:2e:73:d8:fe:17:4b:63:99:97:d5:95:e0:ae:
                    e5:3d:3a:02:e3:21:19:60:09:5c:27:d1:21:1d:19:
                    c0:6c:6e:96:30:2a:62:76:5e:b7:4e:5c:6b:ec:00:
                    7f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A9:5B:75:26:80:86:DB:60:64:71:26:A0:96:21:A9:D6:09:21:90
            X509v3 Authority Key Identifier:
                keyid:ED:D9:E8:C3:B5:DD:BE:E9:8C:D7:FE:EA:0D:FF:8C:76:25:B8:5A:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dnow7XdvumM1_7qDf-MdiW4Wp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:68:26:dc:1a:cb:8b:6d:d6:97:f3:28:fe:06:dc:82:ee:dd:
         8e:81:3e:cd:85:d3:e6:59:ad:86:d5:e1:46:36:29:cf:9e:c4:
         31:72:fa:dc:df:12:2a:b9:a6:c0:3b:79:f3:fd:08:bf:73:cf:
         47:1f:f5:a3:2b:7b:aa:06:51:4c:cb:34:c2:c5:93:dd:ab:51:
         67:df:87:fa:75:08:f1:fc:35:f9:a6:67:81:e9:e8:26:cb:a8:
         40:96:97:52:17:43:e5:19:81:f8:b2:f2:8c:33:7d:62:07:6b:
         9a:5e:f7:97:64:b6:4a:4d:53:c0:bf:a2:32:9d:ef:9d:4b:fa:
         c9:9a:70:9e:4e:3c:72:58:4b:96:9f:96:83:9f:6a:24:ba:cf:
         b1:8b:68:a1:89:10:a8:c5:00:82:f0:0e:0e:88:20:b4:c7:14:
         b9:63:43:f1:39:eb:cd:95:cc:71:a7:8d:ec:99:18:42:0b:c5:
         6d:c2:1b:ff:0c:37:04:62:e8:e7:ea:b3:24:ac:f3:6a:96:ca:
         16:18:2b:d1:6e:c6:01:d7:ba:04:3f:fe:f9:ed:4a:2c:19:5b:
         b6:f1:97:ab:d9:93:e3:8c:9b:04:26:bc:93:a4:c0:45:d0:14:
         9e:6f:0a:ff:ea:0e:00:3d:30:5f:31:03:e5:1e:77:3f:3b:bc:
         ae:88:d3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:53:55 2026 by rpki-client