Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
File:                     7W3VjHMPSQxsZTC3ULUY55Okh6U.mft (raw, json)
Hash identifier:          7wTy8BLVOzP8/FL3lh92f9FheFN2/oODXq0RQ4YITfE=
Subject key identifier:   E1:C7:C7:E2:A1:20:74:DF:9C:4E:33:BA:91:98:F1:7B:2E:F2:1A:19
Authority key identifier: ED:6D:D5:8C:73:0F:49:0C:6C:65:30:B7:50:B5:18:E7:93:A4:87:A5
Certificate issuer:       /CN=ed6dd58c730f490c6c6530b750b518e793a487a5
Certificate serial:       019D2AE0F8609CED0C5D62F593C05BC32BFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
Manifest number:          0F6D
Signing time:             Thu 26 Mar 2026 16:01:19 +0000
Manifest this update:     Thu 26 Mar 2026 16:01:19 +0000
Manifest next update:     Fri 27 Mar 2026 16:01:19 +0000
Files and hashes:         1: 7W3VjHMPSQxsZTC3ULUY55Okh6U.crl (hash: PVAZjK5wSl3+R3E23wItteVENg7KK8lGH0WZWJhzZlc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:e0:f8:60:9c:ed:0c:5d:62:f5:93:c0:5b:c3:2b:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6dd58c730f490c6c6530b750b518e793a487a5
        Validity
            Not Before: Mar 26 16:01:19 2026 GMT
            Not After : Mar 27 16:01:19 2026 GMT
        Subject: CN=e1c7c7e2a12074df9c4e33ba9198f17b2ef21a19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2d:ab:17:f4:a7:b3:23:65:cd:50:ba:18:56:
                    90:52:5c:c7:b7:bf:d1:16:3c:57:3d:90:9f:28:e3:
                    f4:40:33:8d:4b:de:3d:b9:d2:7a:d9:b8:42:ed:60:
                    b5:32:6c:09:65:c6:9f:06:6f:b8:12:fc:6f:10:2e:
                    f3:d5:4a:77:d4:6a:7f:63:1e:4b:ce:48:75:ff:91:
                    b5:1b:7d:9a:0e:8b:1c:7b:1c:3a:ce:25:98:fb:fb:
                    67:aa:ae:82:90:23:05:f7:42:d4:22:bf:2f:7d:e9:
                    f5:33:07:e9:ae:85:a6:d2:4c:8e:5c:48:47:ec:d0:
                    07:30:c9:ce:23:f8:04:ae:e5:15:a5:05:50:ab:de:
                    a1:ae:db:dc:93:4d:e6:84:d0:fd:3b:de:67:2c:63:
                    a4:4d:f8:95:99:e7:37:4e:09:10:da:09:d8:1b:a2:
                    b5:de:de:29:b8:35:74:49:ed:90:91:fa:5a:11:96:
                    4c:da:5b:ba:6d:29:fc:44:30:d2:0a:96:1d:93:b5:
                    25:b2:0e:d9:d0:62:d6:0e:e7:39:d1:7b:6e:61:4d:
                    ee:ec:fc:1b:96:d3:00:da:09:0c:e7:45:53:05:41:
                    be:f0:09:ba:ce:dd:e3:6b:7a:e4:f8:48:28:ec:df:
                    cc:f9:39:e8:0e:8e:52:b0:c2:02:7d:52:a1:c9:9d:
                    4f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C7:C7:E2:A1:20:74:DF:9C:4E:33:BA:91:98:F1:7B:2E:F2:1A:19
            X509v3 Authority Key Identifier:
                keyid:ED:6D:D5:8C:73:0F:49:0C:6C:65:30:B7:50:B5:18:E7:93:A4:87:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:e3:a2:cb:e8:21:1e:b9:c3:10:ff:b4:2e:19:b7:4c:45:fe:
         62:98:d8:39:05:97:63:9f:db:14:e6:64:bc:74:af:12:98:79:
         40:c9:40:2b:90:62:55:8b:21:25:50:eb:7d:88:95:e0:f0:3f:
         17:ab:52:28:c2:77:d0:34:43:50:a7:a7:1d:2e:79:60:f4:01:
         e3:87:88:0d:b9:cd:4e:b4:00:0a:cf:8c:16:6d:43:42:4b:14:
         ef:71:ca:e8:80:7b:f8:1f:7e:b8:b6:a1:52:9b:a7:6b:75:52:
         93:3e:4a:29:da:5f:3a:62:08:63:3d:d2:c0:3e:80:01:65:b4:
         fe:1e:20:13:98:42:33:1c:3c:68:19:99:b6:c7:13:d6:0d:43:
         54:27:68:0f:e0:83:28:28:29:42:6e:a6:21:ec:dc:bf:1e:44:
         db:97:a9:e3:4b:ab:3c:7d:4b:54:ba:57:1f:05:99:d4:3e:bc:
         35:b1:75:63:c0:6b:86:52:87:de:fb:3f:53:32:0a:c7:63:6e:
         80:66:5f:c8:5f:d4:30:c2:f8:77:54:70:9b:36:e2:b8:ac:46:
         fe:3e:b3:60:68:46:eb:7f:15:67:7d:28:5d:58:f2:cf:98:c1:
         4e:4c:59:b7:31:c0:26:aa:90:cf:3f:34:d9:d9:e6:81:81:8a:
         f8:24:ec:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:27:44 2026 by rpki-client