Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
File:                     7MzCuQnHyBXKzLX85THDJSb63Vo.mft (raw, json)
Hash identifier:          Zl7tOYKC825IAc/EKIX77H7tQEIiiHvMVUMmfpQrND8=
Subject key identifier:   A5:2B:CE:C1:F0:C8:4D:F9:94:22:10:E1:6C:88:A8:51:F8:77:44:A5
Authority key identifier: EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A
Certificate issuer:       /CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
Certificate serial:       01A0CCDA4EB272F528142CDCDF9C4D20849F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
Manifest number:          1767
Signing time:             Wed 23 Sep 2026 06:00:54 +0000
Manifest this update:     Wed 23 Sep 2026 06:00:54 +0000
Manifest next update:     Thu 24 Sep 2026 06:00:54 +0000
Files and hashes:         1: 7MzCuQnHyBXKzLX85THDJSb63Vo.crl (hash: dsakgnJujD0+zSG9JclWWIL/Nhl38LGMRYWkvTtqMtQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:da:4e:b2:72:f5:28:14:2c:dc:df:9c:4d:20:84:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
        Validity
            Not Before: Sep 23 06:00:54 2026 GMT
            Not After : Sep 24 06:00:54 2026 GMT
        Subject: CN=a52bcec1f0c84df9942210e16c88a851f87744a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8b:39:d2:80:7e:a6:c8:11:a9:a7:08:06:e2:
                    2e:77:87:8e:0a:53:aa:27:38:be:ae:6b:40:df:cd:
                    c1:17:30:7a:48:24:6d:71:64:a7:bc:39:ec:1c:73:
                    70:fb:57:95:b6:3b:d3:53:c6:29:47:0f:37:0d:76:
                    7b:4c:39:92:0e:7a:75:b7:9a:ee:de:5e:76:99:78:
                    5f:f1:ca:72:d8:a0:d8:59:a1:21:2c:25:16:f5:8a:
                    7f:d0:8e:5e:97:f3:5c:52:19:65:4f:e8:77:37:51:
                    94:26:71:f2:aa:f5:82:a3:dd:b4:e5:43:05:b6:49:
                    d6:e6:4d:1f:28:20:92:75:6b:91:31:ca:47:95:ee:
                    ef:e2:41:2c:21:a4:f8:dd:67:57:3b:27:3b:c0:fc:
                    4b:49:57:af:0b:21:db:74:d5:2b:e8:64:3f:fd:3e:
                    2e:a4:ea:db:70:8c:aa:c3:09:6c:66:62:16:bc:15:
                    de:3c:a4:11:a1:c4:23:d7:10:1b:1f:68:dc:69:79:
                    00:22:81:5c:e7:3d:76:4c:58:4a:e3:7b:06:af:47:
                    e1:8d:f2:f0:40:bd:e3:29:d9:3c:2d:87:5c:f5:b9:
                    09:2a:9e:fd:30:80:ed:22:c0:e2:fe:ed:11:96:50:
                    bf:52:6c:82:c7:71:92:60:b6:f4:ff:7c:8a:31:f6:
                    e6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:2B:CE:C1:F0:C8:4D:F9:94:22:10:E1:6C:88:A8:51:F8:77:44:A5
            X509v3 Authority Key Identifier:
                keyid:EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ac:7f:24:99:ca:6e:df:47:21:32:2e:85:58:24:f6:26:81:
         34:e3:28:52:5f:44:09:cc:4c:64:b4:b6:dc:58:12:5f:2b:ef:
         a0:07:fa:09:56:b9:43:da:42:06:d7:f1:38:0d:89:57:ed:7b:
         39:8d:ad:75:15:eb:ab:a5:47:9b:6c:65:4e:fe:eb:c1:ff:7b:
         2b:8f:f1:80:fa:76:f4:8c:4a:c7:dd:66:8c:4f:08:9c:a2:15:
         e8:a0:4e:75:a9:50:58:87:37:5c:53:c0:d6:13:b5:6b:ae:05:
         3f:b0:48:2f:d3:0f:12:53:88:88:fa:99:f5:32:9e:e5:cb:15:
         5a:0e:da:b6:03:4a:9b:de:df:94:f6:21:9b:0f:34:f8:34:3f:
         c1:93:d5:8e:93:f3:2e:95:96:b5:b7:69:be:cf:85:5e:b2:e9:
         52:56:d0:0a:e6:c8:2b:e8:2e:17:42:12:09:61:b9:4b:7e:e1:
         a5:17:a7:1f:f0:24:ff:5e:db:cf:af:52:b2:21:7d:27:59:93:
         c6:60:b4:73:29:b8:45:d8:cb:72:4e:2e:cc:80:1e:8f:c8:55:
         f6:14:58:e1:64:d2:d1:4e:d8:cb:9a:7b:43:bd:c6:0b:c8:69:
         4d:40:95:c3:69:b6:69:e3:e2:83:a1:0b:ab:64:b2:57:16:e9:
         e5:fd:3d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:52:01 2026 by rpki-client