Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
File:                     7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft (raw, json)
Hash identifier:          7F857A4XTdb+9Q5zpUpSOMxY/6HYjMQT+AwpUpF9kmA=
Subject key identifier:   46:24:63:D2:1D:7D:8B:38:31:BB:E2:29:04:FD:DC:36:76:BD:64:C6
Authority key identifier: EE:EF:A9:C2:95:06:B4:FC:F1:72:92:11:A4:FA:77:C1:F2:11:46:8D
Certificate issuer:       /CN=eeefa9c29506b4fcf1729211a4fa77c1f211468d
Certificate serial:       019F90FF370381B8ADF42E1146E9A07E18E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
Manifest number:          0A23
Signing time:             Thu 23 Jul 2026 22:01:12 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:12 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:12 +0000
Files and hashes:         1: 7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl (hash: xVhp2u+hVStYvvOx5f1JFbnPd/9oGxCqzGj2ylbxOSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:37:03:81:b8:ad:f4:2e:11:46:e9:a0:7e:18:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeefa9c29506b4fcf1729211a4fa77c1f211468d
        Validity
            Not Before: Jul 23 22:01:12 2026 GMT
            Not After : Jul 24 22:01:12 2026 GMT
        Subject: CN=462463d21d7d8b3831bbe22904fddc3676bd64c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b9:4f:0f:21:ec:0f:14:11:b0:41:27:61:0b:
                    8c:4f:8b:8e:e8:1e:58:ee:2e:03:f5:cd:98:3f:6d:
                    c7:11:87:2e:8b:c6:80:8a:ff:00:83:77:93:24:f9:
                    7c:db:5c:61:96:88:33:ff:b6:79:3e:35:9f:13:39:
                    ca:f2:cf:fa:aa:22:1c:3c:a1:63:86:9a:b4:a8:ea:
                    d3:36:4f:44:2b:c7:81:88:32:eb:02:62:e6:04:a2:
                    9d:6a:00:93:01:0b:34:f5:56:a0:68:f8:be:39:67:
                    3c:46:84:ad:d2:55:f9:fa:cc:81:54:39:73:80:b6:
                    33:ff:ab:7c:c5:6e:22:8b:d1:96:d4:ac:fd:a4:3f:
                    7d:52:d6:10:fa:27:4c:c3:95:7c:bd:3e:63:a7:98:
                    cf:f9:93:43:6a:c4:0d:9d:79:f0:97:0e:31:0c:70:
                    de:a7:63:ff:48:9c:27:cb:f0:1e:3c:c1:4a:da:60:
                    84:e9:96:61:13:1c:36:30:b4:51:e5:8f:20:93:86:
                    72:7b:6c:4c:d1:ad:85:be:4a:0a:fd:57:12:b6:f9:
                    76:59:92:86:1f:e6:3d:8d:0e:f7:49:dc:94:c9:b9:
                    7a:fb:c3:98:e1:ae:b8:7f:28:f6:85:2f:36:d2:52:
                    87:52:4d:81:3b:f1:51:75:5c:14:ca:07:d1:c7:fd:
                    77:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:24:63:D2:1D:7D:8B:38:31:BB:E2:29:04:FD:DC:36:76:BD:64:C6
            X509v3 Authority Key Identifier:
                keyid:EE:EF:A9:C2:95:06:B4:FC:F1:72:92:11:A4:FA:77:C1:F2:11:46:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:ac:a4:7c:af:a0:3d:50:44:35:1a:17:ee:80:e5:c7:eb:50:
         5a:ca:a9:6a:4d:bd:62:41:09:48:85:a2:33:47:8f:1f:15:78:
         d0:21:b5:cc:3f:a5:5d:1f:01:44:e2:68:78:14:31:d7:dc:d0:
         d1:b5:59:8c:b5:30:8d:2c:19:4b:bc:37:ed:de:eb:32:3f:dd:
         ee:3b:84:6d:5e:67:7f:89:94:e7:37:bd:f4:9e:7b:30:a1:d3:
         d7:6c:ea:c1:52:cf:cd:67:21:a0:d0:ae:1c:68:5b:37:2c:69:
         58:2b:8b:67:7e:15:59:82:8e:b4:3d:48:5b:d5:cb:43:6b:0c:
         3f:cb:b1:24:60:e7:c7:ac:14:eb:53:d0:b7:13:4b:6f:fd:d7:
         d5:86:ae:d9:73:01:8a:9e:6b:9c:67:1c:27:47:7d:e3:65:97:
         65:38:9c:54:89:25:eb:75:cb:e8:41:b0:77:2d:41:06:a7:34:
         8d:28:da:86:61:99:e6:6d:5d:df:58:42:e3:7e:f3:42:64:a4:
         c2:20:04:b8:d8:ff:43:c0:55:b7:85:4f:e1:5d:bd:c8:62:cd:
         12:76:0a:11:22:c6:73:5b:36:31:32:9e:cc:71:a7:f2:5e:a6:
         d4:df:8b:e9:a4:4b:4c:6b:86:e0:f1:d1:6f:ef:be:c6:2f:38:
         f2:0f:a7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:19:08 2026 by rpki-client