Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft
File:                     fvoucF0jP_80WpErLyObWs43K7k.mft (raw, json)
Hash identifier:          Q0YwizfpV/jFWe/hD0zoc9+Ut7/iZ0NXpaP0yYNoK9Y=
Subject key identifier:   E5:17:96:59:B3:85:38:A1:8D:B5:6E:83:B0:47:8C:57:D5:C8:82:09
Authority key identifier: 7E:FA:2E:70:5D:23:3F:FF:34:5A:91:2B:2F:23:9B:5A:CE:37:2B:B9
Certificate issuer:       /CN=7efa2e705d233fff345a912b2f239b5ace372bb9
Certificate serial:       019D25BA34E53416506B7DE1381F09FB1FE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fvoucF0jP_80WpErLyObWs43K7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft
Manifest number:          07C2
Signing time:             Wed 25 Mar 2026 16:00:53 +0000
Manifest this update:     Wed 25 Mar 2026 16:00:53 +0000
Manifest next update:     Thu 26 Mar 2026 16:00:53 +0000
Files and hashes:         1: fvoucF0jP_80WpErLyObWs43K7k.crl (hash: JRiG8XKYtuBZdyVFaSbdtSyyWovv+vNJKkAnsXGdgrk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fvoucF0jP_80WpErLyObWs43K7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:34:e5:34:16:50:6b:7d:e1:38:1f:09:fb:1f:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7efa2e705d233fff345a912b2f239b5ace372bb9
        Validity
            Not Before: Mar 25 16:00:53 2026 GMT
            Not After : Mar 26 16:00:53 2026 GMT
        Subject: CN=e5179659b38538a18db56e83b0478c57d5c88209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:66:4d:52:72:fa:2b:61:28:ea:49:fe:47:87:
                    8e:0e:79:db:9b:3a:95:02:21:47:d4:51:9c:ff:bf:
                    83:e9:9d:5f:dc:36:08:08:fb:ec:a4:58:0a:8a:06:
                    44:d8:fa:74:af:b7:e9:b1:46:36:8f:70:c0:3c:95:
                    3c:73:30:b3:55:be:c2:bb:b7:fc:6b:d1:78:b9:1a:
                    7f:a7:f3:a7:4e:f2:99:6c:1c:00:63:c4:bc:0b:b7:
                    90:ce:35:ca:29:6b:9b:35:7d:87:d8:a3:96:8b:57:
                    57:39:3d:5f:f3:34:96:a6:1c:58:58:14:f1:72:c3:
                    3d:bd:80:5a:ca:18:db:6c:93:e2:cc:3c:f7:f2:59:
                    8f:f5:8e:7b:47:20:30:02:a0:84:d1:25:26:56:93:
                    e4:23:79:46:fb:59:fe:d7:4b:cb:7a:b2:c3:c8:6f:
                    ba:e8:ee:e4:f3:58:10:cb:0a:4a:3e:12:ce:dc:ed:
                    5e:85:90:d3:17:ed:59:51:2c:42:7c:96:4c:c7:3e:
                    e7:d5:e0:dc:23:84:ad:5f:8d:bd:57:54:f9:f4:0f:
                    d8:3d:d9:52:f9:10:f8:87:38:ff:7c:2c:f8:c9:71:
                    48:a9:6d:31:68:37:9e:60:a9:42:34:1e:e1:3c:0c:
                    79:6b:f0:c8:28:e7:cf:68:47:d1:af:c9:67:85:3f:
                    79:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:17:96:59:B3:85:38:A1:8D:B5:6E:83:B0:47:8C:57:D5:C8:82:09
            X509v3 Authority Key Identifier:
                keyid:7E:FA:2E:70:5D:23:3F:FF:34:5A:91:2B:2F:23:9B:5A:CE:37:2B:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fvoucF0jP_80WpErLyObWs43K7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:ab:4e:f9:67:80:a6:5e:00:7d:80:09:48:3a:32:ff:4b:e8:
         d1:31:92:0b:3b:50:c7:da:e0:7d:8f:b6:99:ca:7a:44:e6:62:
         a1:e5:95:bf:a8:93:e0:b4:8d:65:04:14:f2:62:32:cc:12:ec:
         78:4e:d1:0f:64:42:c4:35:bc:e1:b1:b7:f9:ea:1c:44:e4:bd:
         3e:25:23:4e:43:64:5a:98:3b:2a:8f:fa:5e:c9:53:ca:a4:9a:
         77:98:54:e8:fd:3f:9e:69:e7:cd:82:90:4e:d4:33:d3:6f:41:
         7d:ac:86:ff:70:9a:0a:fb:dd:3e:1b:f2:db:da:7d:5a:d5:8d:
         c0:d0:a4:07:45:0d:7a:c5:57:d8:8c:ec:db:88:df:74:32:3d:
         30:e7:27:3b:77:3c:f0:5e:d5:86:15:97:4c:fc:e1:1d:cf:88:
         a4:6f:18:9f:32:39:42:5b:84:50:9e:57:52:98:e8:d7:62:2b:
         f3:b9:d0:bd:95:34:db:0a:a9:df:10:f6:9b:f6:ef:b2:c4:b2:
         7a:b7:8f:af:37:92:47:65:85:3a:9c:bd:dc:0c:97:c2:7f:7d:
         2c:3b:67:d4:b6:19:8e:6e:78:db:6a:b9:0f:56:23:d5:e9:5b:
         72:1b:fd:37:c9:1f:a0:fd:db:1b:bf:3b:25:36:4d:b9:fd:11:
         15:b9:e1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:55:40 2026 by rpki-client