Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft
File:                     7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft (raw, json)
Hash identifier:          jaipXkc4CoiIlL662K/ULc8LAB5XVCEuZZ6R3jYvz54=
Subject key identifier:   54:9E:9A:A9:22:D0:62:F3:22:04:1F:FA:06:5B:3E:D4:FF:48:5E:50
Authority key identifier: EC:B2:F0:95:30:06:10:45:F4:2F:7B:D5:1F:1C:3B:62:59:EB:AE:1B
Certificate issuer:       /CN=ecb2f09530061045f42f7bd51f1c3b6259ebae1b
Certificate serial:       01A0CE23E7D6DCB033CDB811FAE9BE27F63A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft
Manifest number:          1A68
Signing time:             Wed 23 Sep 2026 12:00:54 +0000
Manifest this update:     Wed 23 Sep 2026 12:00:54 +0000
Manifest next update:     Thu 24 Sep 2026 12:00:54 +0000
Files and hashes:         1: 7LLwlTAGEEX0L3vVHxw7Ylnrrhs.crl (hash: NlN0X0lGC3uqDK1f5CSrjZGZnZ6VTMZUP0kBlQcwv3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 12:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:23:e7:d6:dc:b0:33:cd:b8:11:fa:e9:be:27:f6:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb2f09530061045f42f7bd51f1c3b6259ebae1b
        Validity
            Not Before: Sep 23 12:00:54 2026 GMT
            Not After : Sep 24 12:00:54 2026 GMT
        Subject: CN=549e9aa922d062f322041ffa065b3ed4ff485e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:da:dd:99:93:cd:9c:f7:0b:f7:12:a5:48:41:
                    59:f5:39:3b:7e:95:c5:69:f4:18:91:fa:97:82:09:
                    1b:1a:2a:98:7c:15:49:fc:27:50:cd:07:ea:a3:c7:
                    f7:06:29:d6:d7:09:46:3d:f2:83:48:64:29:f7:df:
                    7d:f8:36:7e:fe:2b:db:ac:c0:84:b9:b6:f8:bb:e0:
                    de:58:83:72:72:07:cd:cb:b8:d1:93:f0:ec:8b:e8:
                    e5:a9:12:6b:cd:07:40:af:e2:89:82:4b:00:64:d7:
                    8c:1b:c2:da:69:14:c3:00:c9:ca:09:9d:87:88:c2:
                    14:ef:52:a4:44:d9:56:b6:fe:91:fc:30:fc:54:48:
                    75:81:cb:ac:36:d6:07:86:9f:b1:05:0d:d9:40:47:
                    67:53:30:92:fa:17:a1:cc:32:37:f3:0a:73:d3:4d:
                    bc:5c:aa:15:15:4f:78:44:04:cd:4d:40:bb:4e:70:
                    23:73:bd:0a:5e:21:b1:5e:14:91:89:1f:7c:c5:7d:
                    68:89:13:59:46:d6:84:fc:32:60:ca:25:55:06:91:
                    b9:cc:e2:b8:41:7a:ea:f7:49:36:20:77:17:bb:be:
                    f8:00:37:05:d9:00:7d:44:0d:a8:54:84:76:74:d3:
                    b7:2f:ed:e3:bc:fe:76:74:03:8e:ba:88:34:66:61:
                    c5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9E:9A:A9:22:D0:62:F3:22:04:1F:FA:06:5B:3E:D4:FF:48:5E:50
            X509v3 Authority Key Identifier:
                keyid:EC:B2:F0:95:30:06:10:45:F4:2F:7B:D5:1F:1C:3B:62:59:EB:AE:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:de:58:37:b2:83:d5:51:42:fe:86:67:ef:5e:ca:72:cf:80:
         1e:51:f4:8d:3c:46:2a:4a:08:5f:8d:f6:de:1e:3e:41:fe:68:
         6a:3e:dc:5b:3a:11:a5:82:3d:e3:59:86:dd:d7:9b:9f:17:d2:
         34:96:80:00:3f:ad:60:79:26:96:fa:60:c6:8e:e6:26:c5:97:
         8e:61:80:95:6e:53:17:36:7d:75:70:50:76:21:06:74:1f:16:
         cc:dd:0b:e0:25:c9:55:a9:c5:f6:52:dd:01:cb:28:44:bd:43:
         38:d7:06:f0:80:bc:77:29:8e:12:21:72:d8:8f:bc:64:bf:6c:
         d0:df:00:42:94:40:d9:25:27:b1:55:d3:25:26:f1:ca:79:77:
         5d:50:ab:56:5a:b2:d2:06:2d:cd:73:94:f3:51:c0:4b:06:6e:
         18:0b:3a:fc:0a:9b:4d:da:41:2a:63:ca:6f:b5:85:d5:44:af:
         27:18:9f:ae:f0:36:f5:67:e7:47:b7:20:a0:b0:44:ef:f0:0e:
         71:49:1d:4c:00:1c:d8:43:57:dc:a5:32:bf:d6:39:9e:e0:c2:
         db:61:e1:fe:a7:d0:03:6a:a7:68:f4:80:ce:ff:c8:36:c3:8b:
         3b:1a:5e:0b:e3:c4:02:f0:9b:82:9b:b4:59:8c:cd:30:6c:a5:
         56:72:2a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:55:45 2026 by rpki-client