Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.mft
File:                     7cFfZVhGJAinV1N2WyxxplTxZ24.mft (raw, json)
Hash identifier:          gdKntclXZp3nGUspfhS1vttIur15KON3GhnewYCZ6l0=
Subject key identifier:   3E:C7:52:C1:85:6F:54:58:1C:94:98:A8:8A:73:25:1C:56:A7:EE:53
Authority key identifier: ED:C1:5F:65:58:46:24:08:A7:57:53:76:5B:2C:71:A6:54:F1:67:6E
Certificate issuer:       /CN=edc15f6558462408a75753765b2c71a654f1676e
Certificate serial:       019F9059B5806398D8E88C7729F3C20F8F62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7cFfZVhGJAinV1N2WyxxplTxZ24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.mft
Manifest number:          1704
Signing time:             Thu 23 Jul 2026 19:00:25 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:25 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:25 +0000
Files and hashes:         1: 7cFfZVhGJAinV1N2WyxxplTxZ24.crl (hash: wrx5B26ePWMT9tzHBAIU6+4Fh2+hyndIJgNVM3Qh+DI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7cFfZVhGJAinV1N2WyxxplTxZ24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 19:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:59:b5:80:63:98:d8:e8:8c:77:29:f3:c2:0f:8f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edc15f6558462408a75753765b2c71a654f1676e
        Validity
            Not Before: Jul 23 19:00:25 2026 GMT
            Not After : Jul 24 19:00:25 2026 GMT
        Subject: CN=3ec752c1856f54581c9498a88a73251c56a7ee53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a7:c0:3f:ce:66:e9:9a:89:a6:a3:24:0f:36:
                    4e:3a:dd:6b:0a:c5:1e:79:4c:94:60:09:41:f6:b1:
                    a9:5c:9f:93:5e:7a:87:aa:25:c1:76:e0:a4:f8:b8:
                    85:67:62:1c:97:7a:1d:93:1c:56:6b:d2:04:2a:0b:
                    9b:a8:2e:c5:fb:c4:40:74:57:67:74:df:5c:f3:99:
                    18:d8:20:aa:c4:10:4a:2f:53:0b:aa:59:b2:91:41:
                    8c:62:eb:55:96:a6:77:28:59:f2:b3:38:df:e2:fa:
                    cf:ab:a5:f4:23:75:ba:a7:03:ca:85:ff:58:76:a6:
                    23:86:64:2d:a6:63:17:34:e0:ae:15:ea:90:a7:21:
                    49:69:ee:e8:27:0b:4f:a5:91:21:55:5a:84:76:72:
                    06:e3:48:9b:82:64:22:ae:c9:e3:70:9e:32:6e:e8:
                    b8:49:07:2a:45:d7:77:70:a0:db:4e:54:78:64:f0:
                    77:e2:05:db:a7:43:9d:10:c0:33:d5:ce:28:07:2c:
                    bd:ab:dc:3f:19:79:12:d9:7b:d5:ba:36:38:92:3d:
                    70:c5:41:5e:40:e7:ed:0f:4c:59:77:15:3b:58:1f:
                    80:db:40:54:8d:c3:c4:2c:cf:4b:79:32:cf:bc:d7:
                    31:40:a9:fc:77:78:93:a9:12:1d:d2:00:b2:54:34:
                    aa:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C7:52:C1:85:6F:54:58:1C:94:98:A8:8A:73:25:1C:56:A7:EE:53
            X509v3 Authority Key Identifier:
                keyid:ED:C1:5F:65:58:46:24:08:A7:57:53:76:5B:2C:71:A6:54:F1:67:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cFfZVhGJAinV1N2WyxxplTxZ24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:6c:4e:99:cc:20:16:24:42:69:b3:77:1a:eb:79:d6:10:86:
         42:20:ec:81:4c:4c:97:14:48:a7:8e:06:19:37:13:6b:81:10:
         87:13:63:fa:3e:7f:ce:34:ac:30:10:d9:e4:06:f5:15:50:a6:
         e7:53:ba:2f:7c:72:b7:8f:32:7b:56:75:05:17:09:d1:96:21:
         4c:a5:74:cb:d9:c1:21:ee:45:50:3f:05:f5:2f:2d:ed:e4:2a:
         a3:d6:30:be:21:9e:61:5b:67:93:6a:c5:ea:0a:36:29:74:69:
         3d:49:21:6e:c0:00:13:8c:5d:fe:0c:e9:1a:a8:8f:1e:38:02:
         36:b4:46:52:16:c9:90:5d:b7:c6:19:9d:bf:74:3a:3a:c1:4c:
         1d:a5:df:27:b2:e8:ac:2a:9a:47:59:9b:71:be:e6:63:d5:b4:
         03:e9:78:80:51:a3:17:0c:8d:d6:a5:93:f8:82:2a:9d:62:fe:
         c8:1b:7e:33:a6:40:5e:56:e4:b4:e4:26:57:c0:84:c2:4e:69:
         6f:3f:ec:8b:68:ce:d6:ff:fa:8f:fc:38:d4:c0:9d:da:a3:21:
         b2:84:24:f1:19:e6:9d:2c:7a:74:b9:71:2a:8b:c5:06:03:00:
         47:e7:85:a4:5d:85:f9:2b:ff:63:a8:bb:84:aa:34:8c:ee:d0:
         83:d0:2e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:44:02 2026 by rpki-client