Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
File:                     7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft (raw, json)
Hash identifier:          oQTdh5UXoFdptE/6eLe/LXLcclUnMP3a/5K3H92vaWc=
Subject key identifier:   4E:94:D9:52:55:B5:42:D4:90:14:50:15:3C:D4:D5:BD:44:E0:04:2B
Authority key identifier: ED:1B:6A:DC:99:49:7F:D1:B3:0A:0A:48:2E:DC:40:2B:0C:4F:0C:F8
Certificate issuer:       /CN=ed1b6adc99497fd1b30a0a482edc402b0c4f0cf8
Certificate serial:       019F90FE70EA57894EC07E7A9FC8B5A09F17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
Manifest number:          0665
Signing time:             Thu 23 Jul 2026 22:00:21 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:21 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:21 +0000
Files and hashes:         1: 7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl (hash: ZVIjutbyAJOqNPFYgsMB2NG2gihE1w4J8SBLdkd8q5k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:70:ea:57:89:4e:c0:7e:7a:9f:c8:b5:a0:9f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed1b6adc99497fd1b30a0a482edc402b0c4f0cf8
        Validity
            Not Before: Jul 23 22:00:21 2026 GMT
            Not After : Jul 24 22:00:21 2026 GMT
        Subject: CN=4e94d95255b542d4901450153cd4d5bd44e0042b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c9:dd:dc:ae:b4:19:95:f9:ab:de:3d:ee:9f:
                    6d:ad:1a:9f:40:d0:80:ba:1e:a0:8a:43:29:23:5d:
                    b9:50:8c:25:2d:c1:7c:ea:65:3b:b2:34:06:d1:a5:
                    82:91:8f:22:30:0e:f5:b2:30:82:7c:ad:d9:73:c6:
                    cd:22:7f:f9:14:f6:fd:c2:71:b3:18:1f:d0:7f:1f:
                    e6:01:07:c2:2f:ac:ce:18:67:3c:40:26:4a:e6:98:
                    0f:1d:94:88:36:c3:d1:aa:10:0f:d5:c1:db:ba:06:
                    b2:cf:b7:7f:ab:8b:b6:ef:d7:1e:bc:22:22:e3:23:
                    36:f4:6b:1a:88:51:f1:74:59:6a:01:db:9a:6b:e1:
                    7e:35:ee:db:ce:4c:7b:af:3f:67:f1:72:f7:f8:25:
                    d5:a5:32:15:b1:30:d0:ee:b3:24:98:39:09:2a:b1:
                    d4:a1:82:e2:b4:d1:e6:18:16:cd:79:77:15:14:b8:
                    c5:a0:2c:b3:75:56:63:52:9c:7a:66:c8:fb:eb:bd:
                    9f:3a:19:99:5a:2c:9b:56:c8:57:b5:63:5c:b1:69:
                    4e:fa:0a:4b:a5:e3:83:e9:fc:bb:15:95:41:73:84:
                    14:66:69:1b:c5:68:cc:13:2f:48:42:26:dd:22:cc:
                    25:89:e6:f1:2b:9f:8a:b7:53:d0:3a:c7:01:52:ee:
                    db:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:94:D9:52:55:B5:42:D4:90:14:50:15:3C:D4:D5:BD:44:E0:04:2B
            X509v3 Authority Key Identifier:
                keyid:ED:1B:6A:DC:99:49:7F:D1:B3:0A:0A:48:2E:DC:40:2B:0C:4F:0C:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:b8:b8:3e:c8:dc:05:94:63:3f:4c:be:a9:e0:19:61:8c:b6:
         6b:f5:35:d8:80:a9:70:27:86:90:d6:6a:e3:fd:31:7c:b0:b9:
         86:cd:c5:d7:7f:72:36:a1:74:aa:04:30:a9:54:84:d6:f0:5f:
         23:18:4f:1c:ce:50:e3:e8:eb:e9:5f:51:f7:cf:50:67:b2:6f:
         a4:f7:7f:33:55:57:45:76:4a:1f:e0:5f:bb:a9:4e:b4:5c:d4:
         0d:3e:1b:2e:cc:4b:83:53:2a:db:09:02:ff:1e:fe:14:ab:5c:
         aa:55:07:ff:34:3a:48:2a:a3:f4:78:2c:dc:c5:53:8b:09:e6:
         86:0a:8a:4d:8d:1a:83:9b:80:9f:9c:f3:a5:15:dd:62:73:de:
         01:08:69:74:a8:11:26:ad:03:85:20:f3:0f:b6:35:6e:7b:57:
         1d:db:fb:bf:d4:b9:6f:e7:db:ea:31:58:73:a6:a8:73:25:56:
         ff:59:94:49:ab:a0:13:a1:5b:44:d9:c1:4d:32:37:3c:b4:2e:
         9c:ac:c1:6d:0c:ba:23:31:b8:1f:44:11:e5:e9:d1:b4:de:53:
         e2:54:47:00:59:2c:62:72:be:18:3e:d3:9d:54:b0:3f:bb:e1:
         95:0a:22:54:fe:28:e4:2e:e9:a2:7c:5a:39:d9:76:d5:31:16:
         03:38:f0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:19:15 2026 by rpki-client