Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
File:                     7MzCuQnHyBXKzLX85THDJSb63Vo.mft (raw, json)
Hash identifier:          7a2S7fho7pTbvTCdnCCT9QeSK7dIELnMcoiqs+T5T+Y=
Subject key identifier:   11:44:95:2F:23:68:CA:C6:E7:2A:DF:0E:BF:FA:8A:37:A5:C0:9C:8E
Authority key identifier: EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A
Certificate issuer:       /CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
Certificate serial:       019F9090ED13343AC529DD91A528E95C7E0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
Manifest number:          16C3
Signing time:             Thu 23 Jul 2026 20:00:44 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:44 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:44 +0000
Files and hashes:         1: 7MzCuQnHyBXKzLX85THDJSb63Vo.crl (hash: b7GduDwStMXg5NKkDpMnLk6nxp4BaXPYq+546Pf6N2I=)
                          2: 80dI9feXzE2T2t1bf2lPrI9UTCM.roa (hash: Q8e0O49tibA3BkTmL30HyVvrm1M+ka9VvoTMNCf2EJE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:ed:13:34:3a:c5:29:dd:91:a5:28:e9:5c:7e:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
        Validity
            Not Before: Jul 23 20:00:44 2026 GMT
            Not After : Jul 24 20:00:44 2026 GMT
        Subject: CN=1144952f2368cac6e72adf0ebffa8a37a5c09c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7a:7e:9e:a1:b6:34:e1:57:bc:04:41:be:b2:
                    6a:90:7c:5d:31:34:23:59:c7:27:41:0c:e0:eb:b3:
                    8a:e9:e4:3e:e8:a9:90:e1:cc:62:9e:9b:e3:51:6d:
                    35:41:d2:35:5f:c5:90:8a:a9:f9:83:83:fd:09:de:
                    0f:2e:e5:49:bf:48:89:b7:a8:43:6c:9a:fe:6b:73:
                    b9:f0:39:9d:2f:43:ff:b7:f7:91:38:8f:8b:aa:4f:
                    af:47:50:c7:fe:f2:69:cd:3c:0a:a1:cd:7c:04:b7:
                    56:da:4e:d8:14:b0:66:81:8f:eb:ae:dd:c1:cc:4f:
                    0c:7a:6d:48:ce:04:c4:28:8d:bb:1e:8f:cd:87:58:
                    8a:ed:36:ae:5c:2f:df:ac:66:e6:1e:9f:a4:97:fc:
                    8d:83:a7:ca:90:77:7f:30:8a:82:c3:44:24:e6:e0:
                    e7:28:31:62:10:c7:99:09:1e:0d:ca:d4:d4:e0:c7:
                    33:a5:a9:37:b3:01:72:d7:5f:38:b5:e1:75:01:ef:
                    2f:3e:b0:f9:23:33:8c:21:d8:bf:53:4e:b0:21:0e:
                    8d:b2:be:bf:6b:76:1f:0c:d7:c5:ce:a7:6d:83:e1:
                    83:b4:82:2f:67:28:59:95:da:95:00:e7:03:3d:7f:
                    19:b5:38:8d:ae:de:20:34:44:5c:c3:95:85:87:84:
                    a6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:44:95:2F:23:68:CA:C6:E7:2A:DF:0E:BF:FA:8A:37:A5:C0:9C:8E
            X509v3 Authority Key Identifier:
                keyid:EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:29:aa:3e:57:35:de:af:f4:0e:54:56:71:66:a9:05:27:61:
         49:b4:47:b9:d7:7c:7a:2e:2d:c4:19:60:9a:e1:fd:0e:35:27:
         ed:a3:c8:30:ae:1a:83:09:5d:23:f7:6f:bf:0e:07:ed:fd:81:
         71:f9:cf:72:be:d9:71:88:99:6f:e8:08:3b:54:91:ec:17:63:
         c8:6d:3f:0e:64:d5:2e:7f:23:7b:d9:6d:d6:c4:70:13:a0:cf:
         9c:80:cc:8b:28:3d:cf:cf:5e:a5:bf:3d:f6:b5:95:82:16:ee:
         e2:ef:69:d2:c0:fb:d9:a0:4e:e9:7a:d0:b7:36:36:55:3a:ac:
         8c:f4:8a:d3:ae:a5:1a:a6:fe:4c:14:8e:e6:8a:54:6a:aa:d1:
         08:2e:bc:a1:36:98:87:31:9b:03:d8:ae:90:9c:3e:f6:d1:17:
         4b:55:b8:8a:f8:d4:a3:b7:7b:13:8d:f2:73:d5:a9:0f:50:52:
         41:ea:47:ed:fd:76:d2:f5:06:01:a8:2c:62:91:f3:9c:cc:98:
         d5:2f:59:39:44:85:83:7e:40:90:13:09:0c:d9:39:1d:04:40:
         9b:6e:87:e6:c0:8d:2e:30:13:4a:87:08:9d:87:36:56:5b:08:
         d8:c0:b9:f2:aa:ef:20:21:63:21:1f:d5:c9:4e:09:d5:24:7b:
         07:8c:5d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:18:12 2026 by rpki-client