Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/4089cd-5ba0-483c-883d-c8c0ff55f52d/1/7zAIudH6IIoVT1hcruy7UsGyXOQ.mft
File:                     7zAIudH6IIoVT1hcruy7UsGyXOQ.mft (raw, json)
Hash identifier:          rbjKOiryZoCTPyMVQ0ZPEKvXjyMQ4jY0sWkkXNsvoF0=
Subject key identifier:   88:7B:17:F5:2B:99:96:AF:77:FA:67:DE:C4:A8:C4:AF:CC:9B:07:A5
Authority key identifier: EF:30:08:B9:D1:FA:20:8A:15:4F:58:5C:AE:EC:BB:52:C1:B2:5C:E4
Certificate issuer:       /CN=ef3008b9d1fa208a154f585caeecbb52c1b25ce4
Certificate serial:       019F909144B0DD293DEF8BB0A2AD08365B83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7zAIudH6IIoVT1hcruy7UsGyXOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/4089cd-5ba0-483c-883d-c8c0ff55f52d/1/7zAIudH6IIoVT1hcruy7UsGyXOQ.mft
Manifest number:          0177
Signing time:             Thu 23 Jul 2026 20:01:07 +0000
Manifest this update:     Thu 23 Jul 2026 20:01:07 +0000
Manifest next update:     Fri 24 Jul 2026 20:01:07 +0000
Files and hashes:         1: 7zAIudH6IIoVT1hcruy7UsGyXOQ.crl (hash: oRKCqAtBo7b/xnqJY9QqvyNy+yR23W204SX0hSqUMLI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/4089cd-5ba0-483c-883d-c8c0ff55f52d/1/7zAIudH6IIoVT1hcruy7UsGyXOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/4089cd-5ba0-483c-883d-c8c0ff55f52d/1/7zAIudH6IIoVT1hcruy7UsGyXOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7zAIudH6IIoVT1hcruy7UsGyXOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:44:b0:dd:29:3d:ef:8b:b0:a2:ad:08:36:5b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef3008b9d1fa208a154f585caeecbb52c1b25ce4
        Validity
            Not Before: Jul 23 20:01:07 2026 GMT
            Not After : Jul 24 20:01:07 2026 GMT
        Subject: CN=887b17f52b9996af77fa67dec4a8c4afcc9b07a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fe:77:e9:ba:54:e7:8e:c4:a8:a3:7e:01:ef:
                    81:77:f6:69:40:29:82:d9:fc:15:28:01:90:ed:5f:
                    02:be:d9:17:8f:ba:50:16:a4:27:b4:ac:6a:3a:57:
                    94:b1:b6:f4:07:71:3a:b6:57:1b:67:f5:c0:32:42:
                    ad:97:77:2c:95:83:5e:3a:2a:52:15:a5:87:03:0c:
                    04:5d:bd:02:0b:1d:87:d8:3c:56:b8:cd:bf:86:a4:
                    34:32:67:84:51:08:be:cf:c7:dd:6c:98:98:27:64:
                    d2:93:98:44:54:9d:89:91:a2:33:90:8c:99:b3:cf:
                    08:e0:de:5a:b0:21:74:66:b8:7b:85:94:f0:c8:a5:
                    80:35:91:d6:96:7f:f5:ea:03:92:92:4d:c2:5d:2a:
                    83:8d:85:79:38:cf:30:e6:6c:cc:64:59:cb:44:8d:
                    78:f3:f2:5e:4c:4c:13:b1:7a:61:aa:dd:d4:7a:0c:
                    0d:9a:38:fa:82:dd:d5:14:e1:0b:29:8a:8c:23:57:
                    a2:8f:b5:4d:52:6a:81:3e:8b:70:20:b0:75:3e:5a:
                    bf:b0:3d:15:f2:01:5f:12:36:36:c8:56:83:63:17:
                    97:ef:7f:b0:b7:23:6f:34:14:41:18:bf:0c:b4:e8:
                    be:e4:d8:28:07:25:d6:40:42:44:df:2c:bf:64:d5:
                    88:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:7B:17:F5:2B:99:96:AF:77:FA:67:DE:C4:A8:C4:AF:CC:9B:07:A5
            X509v3 Authority Key Identifier:
                keyid:EF:30:08:B9:D1:FA:20:8A:15:4F:58:5C:AE:EC:BB:52:C1:B2:5C:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zAIudH6IIoVT1hcruy7UsGyXOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/4089cd-5ba0-483c-883d-c8c0ff55f52d/1/7zAIudH6IIoVT1hcruy7UsGyXOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/4089cd-5ba0-483c-883d-c8c0ff55f52d/1/7zAIudH6IIoVT1hcruy7UsGyXOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:ca:07:c6:ec:ef:cc:b3:16:c5:64:11:49:6a:bd:13:61:60:
         29:e0:f4:d7:a2:ff:6d:eb:79:73:e4:41:ef:e9:73:6b:e5:6a:
         95:27:4d:62:a6:b8:2f:7f:15:18:c6:1a:51:47:03:70:5d:ba:
         7e:9e:a1:c6:37:84:f2:67:80:64:45:22:a7:bd:83:22:57:83:
         33:7a:7a:57:f3:f1:17:7c:e6:1e:ea:a7:19:d7:bd:58:eb:d1:
         a5:75:0f:e7:c5:64:d6:a8:8d:98:a0:ec:35:5b:23:54:09:b2:
         8a:84:15:9a:1d:84:2c:f2:a9:30:ac:dd:0f:c6:ad:42:40:53:
         fc:e3:c0:62:ce:81:6b:1a:4e:be:88:74:82:37:dc:56:b0:93:
         e6:7f:1a:b9:69:fd:53:db:7e:9b:31:8f:71:7d:c2:55:0c:07:
         a2:27:88:1e:7d:78:5e:b0:41:38:ee:a6:7d:48:60:b8:87:36:
         93:27:95:a4:7a:25:72:3d:3a:d4:52:f6:2c:fe:25:09:c0:b6:
         32:fb:37:cd:56:35:e1:27:89:8a:ef:b1:49:06:02:e1:1d:b2:
         3a:0e:4b:18:5b:8d:4e:99:d6:5b:05:83:c3:75:62:c6:31:c7:
         b8:f9:5f:0a:0f:9d:d5:0f:26:e9:8f:ab:25:c0:73:31:f5:6c:
         ea:86:75:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:08:10 2026 by rpki-client