Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
File:                     7wC6UdY7F3WDfocvvehOLdCHT2M.mft (raw, json)
Hash identifier:          kO+lxjCj/749tg3p5BGL0eWLlGiaZYlc+qyR2IUygJA=
Subject key identifier:   69:60:5A:A6:13:C8:1A:A8:82:55:C9:A7:C8:39:C2:1C:07:D7:B7:F7
Authority key identifier: EF:00:BA:51:D6:3B:17:75:83:7E:87:2F:BD:E8:4E:2D:D0:87:4F:63
Certificate issuer:       /CN=ef00ba51d63b1775837e872fbde84e2dd0874f63
Certificate serial:       01A0D0ED6DA523D2D0D8EA66AE633119276E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
Manifest number:          1713
Signing time:             Thu 24 Sep 2026 01:00:15 +0000
Manifest this update:     Thu 24 Sep 2026 01:00:15 +0000
Manifest next update:     Fri 25 Sep 2026 01:00:15 +0000
Files and hashes:         1: 7wC6UdY7F3WDfocvvehOLdCHT2M.crl (hash: Fzw6zuSLzHNp7ZyoMzTgmWJ4TJfdX0pNbAjfHHp2ZM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:ed:6d:a5:23:d2:d0:d8:ea:66:ae:63:31:19:27:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef00ba51d63b1775837e872fbde84e2dd0874f63
        Validity
            Not Before: Sep 24 01:00:15 2026 GMT
            Not After : Sep 25 01:00:15 2026 GMT
        Subject: CN=69605aa613c81aa88255c9a7c839c21c07d7b7f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:02:ec:cb:90:c7:8f:2a:e0:ae:3a:a1:43:1c:
                    36:89:01:16:ed:dd:d6:dd:25:e9:c2:4a:9b:cc:e7:
                    57:67:f9:56:4e:6e:36:f6:51:81:0d:b6:0b:40:15:
                    69:ef:7c:90:98:0e:12:e2:08:93:62:8f:c5:bf:c0:
                    d8:9f:a2:41:2e:63:d4:11:3f:ed:5d:48:f5:83:ca:
                    1f:6c:92:0c:8e:3b:bc:e5:c4:37:46:fa:7a:fb:48:
                    9b:92:1a:64:b1:6b:9c:00:3a:5a:53:ca:39:65:72:
                    8d:f6:2e:56:31:84:75:28:9d:7d:9b:91:14:d2:22:
                    57:47:4d:16:28:3d:c6:84:3f:ea:d4:e7:5d:e1:b8:
                    15:ec:19:12:1b:9e:e8:11:e6:04:4a:c2:81:98:7a:
                    bf:01:8a:ac:76:6b:ec:2e:ab:75:c4:60:eb:2a:fb:
                    e2:6c:16:8e:ee:c5:2a:e5:42:8a:7f:dc:86:45:1b:
                    e9:a7:da:a6:4c:d7:9d:1f:bc:26:16:24:fb:f1:7c:
                    bf:d4:60:11:66:b0:16:38:14:66:39:cd:cd:19:c2:
                    3d:90:7e:b7:21:8d:60:bb:4c:e3:e6:ac:34:b6:1f:
                    5c:eb:b2:f3:1f:21:ba:bc:c7:85:36:11:cc:14:91:
                    78:7f:5b:7a:38:d3:92:f4:78:1c:bf:bd:12:6d:3a:
                    c2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:60:5A:A6:13:C8:1A:A8:82:55:C9:A7:C8:39:C2:1C:07:D7:B7:F7
            X509v3 Authority Key Identifier:
                keyid:EF:00:BA:51:D6:3B:17:75:83:7E:87:2F:BD:E8:4E:2D:D0:87:4F:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:74:fd:b7:2f:1a:6c:75:ce:ce:4b:44:be:c6:11:b1:e8:5b:
         52:42:29:1c:4b:e9:7f:bc:4d:b3:b0:31:c3:4c:cb:e4:c5:2f:
         ea:b9:44:4e:75:fc:7a:6a:94:1f:56:7d:11:5e:ce:b7:a1:30:
         15:15:f4:80:2d:25:6c:61:e6:ff:5f:c7:4b:ff:ab:27:79:05:
         f9:f4:94:68:22:a6:73:3b:5d:62:c0:4c:99:d9:f7:c5:6f:a9:
         17:2f:d8:8e:8a:9f:9d:63:c9:c1:87:bc:7f:18:7a:61:a2:68:
         a7:e9:fe:ea:cf:d1:00:18:f0:fc:0b:ce:92:d0:fd:b4:53:0a:
         60:3b:f2:e4:5f:73:de:da:63:c7:70:6a:ad:91:18:19:38:14:
         75:e6:f5:89:ae:4a:8d:83:c5:0d:62:1b:7f:e1:4b:0d:93:65:
         1b:7e:b3:e3:66:61:09:02:87:55:a6:12:a2:78:e2:d9:c9:40:
         13:38:7d:f4:45:34:3c:f7:c4:11:22:30:9f:c9:7c:d3:62:6a:
         83:48:3d:f7:34:f1:a0:c6:c8:f7:2b:46:cc:c7:b8:96:60:af:
         4d:f9:94:ff:a0:b6:c0:0c:c6:17:89:15:92:23:81:19:6c:77:
         d0:75:ba:9f:72:5a:ee:96:60:35:58:b9:dd:6c:84:49:9e:45:
         8a:27:f8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----