Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
File:                     7_vi0INCz7z3p9dOiOvQMeEgItk.mft (raw, json)
Hash identifier:          sgrEG8pcrOVUYNHg5619ig1B49QVfSQVB4ZpB87b08g=
Subject key identifier:   A8:8B:C0:62:49:E4:7E:F7:19:0B:30:02:51:FA:25:D6:E7:FA:27:05
Authority key identifier: EF:FB:E2:D0:83:42:CF:BC:F7:A7:D7:4E:88:EB:D0:31:E1:20:22:D9
Certificate issuer:       /CN=effbe2d08342cfbcf7a7d74e88ebd031e12022d9
Certificate serial:       019F8FB52ADA563DC6558E448D92726097A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
Manifest number:          07BA
Signing time:             Thu 23 Jul 2026 16:00:42 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:42 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:42 +0000
Files and hashes:         1: 7_vi0INCz7z3p9dOiOvQMeEgItk.crl (hash: Musn0afSvlQ2ntEwLRpeqj/w/u/BCLnc2yyK3iHnh+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:2a:da:56:3d:c6:55:8e:44:8d:92:72:60:97:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=effbe2d08342cfbcf7a7d74e88ebd031e12022d9
        Validity
            Not Before: Jul 23 16:00:42 2026 GMT
            Not After : Jul 24 16:00:42 2026 GMT
        Subject: CN=a88bc06249e47ef7190b300251fa25d6e7fa2705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ba:d5:2e:ce:93:35:f6:79:6d:ad:a6:86:b8:
                    a2:b1:7f:05:39:92:44:0d:b7:19:65:7c:a7:5c:2a:
                    f6:92:04:f5:f5:06:6a:e5:18:8a:42:ab:ef:10:0a:
                    38:22:6d:9c:29:25:b2:04:5e:2c:eb:b9:d2:56:5c:
                    52:43:22:c5:70:99:f5:f0:96:e3:45:d1:48:42:49:
                    e2:f8:9f:65:d8:f5:f0:cc:2c:6c:76:c5:d5:d0:c3:
                    1b:60:71:3c:37:71:55:04:c5:7e:a3:00:b4:0b:7c:
                    56:e8:17:9a:9d:22:0b:2d:12:f4:81:06:c8:4b:10:
                    1f:1d:c7:39:06:e6:d2:d9:14:4e:ab:6a:69:5c:61:
                    68:b0:a4:39:28:29:f1:0b:78:5c:41:e1:e6:dd:79:
                    30:96:78:4b:80:c7:8d:b3:a8:9f:58:e8:d2:e4:38:
                    2c:d0:f5:c4:62:f1:85:e8:ba:e3:47:d7:10:a7:e0:
                    77:f9:54:a3:18:71:58:4f:e0:5e:22:e6:57:5f:6e:
                    be:d2:b4:5d:03:21:89:cb:25:dd:28:dc:a2:66:07:
                    1d:50:1e:dc:02:dd:42:98:2f:1b:3a:ce:65:84:47:
                    0d:4d:0a:b3:ca:20:f2:c5:d6:58:e1:9d:e9:c1:2b:
                    37:e6:9b:b2:d0:2b:d7:77:a4:42:7e:fe:06:70:fa:
                    87:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:8B:C0:62:49:E4:7E:F7:19:0B:30:02:51:FA:25:D6:E7:FA:27:05
            X509v3 Authority Key Identifier:
                keyid:EF:FB:E2:D0:83:42:CF:BC:F7:A7:D7:4E:88:EB:D0:31:E1:20:22:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:57:9d:fb:a3:ec:a4:8d:92:b7:91:8e:cf:ba:de:f3:11:9f:
         fc:b8:62:13:0e:df:46:d1:da:90:62:16:67:36:ce:4f:71:5c:
         af:20:ad:20:fc:97:71:1a:e9:45:02:f2:43:71:81:b0:09:c6:
         c9:cd:9b:09:4e:eb:f9:71:46:ee:e6:30:7d:91:09:e0:1e:f6:
         e6:08:c6:ff:8f:f0:31:14:9e:a6:83:62:80:67:b9:ea:aa:77:
         8f:a1:ad:fc:95:5b:3a:55:26:99:93:3e:cc:4b:a9:a9:7b:7a:
         f5:40:bb:9b:18:29:bd:5a:9d:6b:c8:d8:9f:28:99:18:8d:55:
         d4:be:9d:f9:12:19:ab:49:1f:fe:0a:67:4f:0f:52:6a:74:d9:
         f6:34:c7:b0:57:cf:8b:c2:f9:54:02:b8:fb:71:df:21:7a:1e:
         3d:b4:0c:0e:7b:b2:32:a6:d5:46:45:08:f2:24:4b:46:d1:37:
         50:07:9a:14:a8:05:91:0b:12:3f:43:f1:86:3c:4c:27:5d:83:
         a3:c6:27:30:07:f6:23:57:5e:30:14:dc:82:41:1d:8d:17:24:
         05:03:88:d6:c0:0a:fe:28:32:12:35:ce:fd:6c:89:23:d6:9c:
         fb:0a:59:89:ff:12:8d:fd:ef:eb:a9:c2:44:b0:a4:9a:a1:74:
         07:63:09:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:28:14 2026 by rpki-client