Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.mft
File:                     7w8gUz3MeZWijPZ3Z6BBaYZnxM0.mft (raw, json)
Hash identifier:          tn73CX6XA4hSC8XZOdcKxkbRw8DqJVhNjC44JQ9F6DY=
Subject key identifier:   7E:AC:F5:28:61:06:2F:57:F4:28:9C:34:3F:97:95:D2:B3:22:62:A8
Authority key identifier: EF:0F:20:53:3D:CC:79:95:A2:8C:F6:77:67:A0:41:69:86:67:C4:CD
Certificate issuer:       /CN=ef0f20533dcc7995a28cf67767a041698667c4cd
Certificate serial:       019D2704BADC9959CADCF6B802368618B51E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.mft
Manifest number:          0DCD
Signing time:             Wed 25 Mar 2026 22:01:54 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:54 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:54 +0000
Files and hashes:         1: 7w8gUz3MeZWijPZ3Z6BBaYZnxM0.crl (hash: 8yrTDGvLKx+mSHRU3KP8oHuQhE4Yx1hx1VG3mglwlYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:ba:dc:99:59:ca:dc:f6:b8:02:36:86:18:b5:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef0f20533dcc7995a28cf67767a041698667c4cd
        Validity
            Not Before: Mar 25 22:01:54 2026 GMT
            Not After : Mar 26 22:01:54 2026 GMT
        Subject: CN=7eacf52861062f57f4289c343f9795d2b32262a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f1:bd:4b:8c:a4:85:7b:7b:e9:26:32:b5:44:
                    c7:ab:9c:2d:93:ce:4e:d6:22:d3:a1:04:dd:29:00:
                    f1:c7:40:9e:2d:98:01:8c:2d:a2:13:b8:b3:92:39:
                    6d:f7:53:98:57:06:77:55:25:ca:e9:72:c9:5e:c7:
                    14:66:27:cd:4c:a7:01:6e:6b:4a:c0:df:b4:4f:08:
                    08:9f:0e:e4:a4:68:ba:95:c2:39:df:55:cd:2c:9a:
                    f5:9d:89:78:63:a6:9b:23:82:ff:5e:05:0e:9a:9c:
                    ea:24:53:6a:fd:85:55:a9:57:46:03:ac:be:4d:d4:
                    c7:95:d3:10:7b:b1:ae:d5:07:46:11:5c:ff:84:24:
                    39:75:18:ae:ca:73:63:0b:8e:fc:8f:da:15:fc:5d:
                    a0:ac:dc:25:aa:d8:f7:81:91:a5:10:fb:6c:49:6f:
                    21:90:39:8f:b7:89:41:ef:db:3c:a1:1e:5c:e2:e0:
                    77:5a:28:88:09:ad:02:84:9c:7f:c4:0e:8f:79:ec:
                    17:82:75:33:4a:e2:86:b0:54:80:1a:93:00:e0:ff:
                    03:a8:ce:4e:45:89:48:59:b5:7f:63:55:ee:47:88:
                    e0:be:ab:50:63:b4:52:47:bc:83:7f:2d:26:67:75:
                    5b:ba:03:b4:50:70:9a:4b:6b:23:63:f2:a9:7e:d1:
                    d5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AC:F5:28:61:06:2F:57:F4:28:9C:34:3F:97:95:D2:B3:22:62:A8
            X509v3 Authority Key Identifier:
                keyid:EF:0F:20:53:3D:CC:79:95:A2:8C:F6:77:67:A0:41:69:86:67:C4:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:1e:cf:79:01:f8:87:3a:b1:61:48:c7:cf:b2:39:9d:c9:c5:
         34:7c:23:b7:b6:13:1c:c5:d4:b9:d6:c7:06:a5:77:45:74:3c:
         d2:cc:98:56:24:6d:54:37:e4:c0:b0:f6:d5:0b:2e:2c:26:55:
         41:0d:ec:c8:94:51:7b:93:ba:3f:c2:c4:dc:f2:47:0c:51:1b:
         94:93:86:0a:8c:d9:f9:28:6b:e9:96:27:a4:10:05:fa:be:31:
         7f:d3:e6:c5:9a:67:04:1c:56:57:35:a6:3e:16:5e:9e:33:d8:
         be:aa:dd:da:ad:16:b5:06:9f:7b:88:8d:2f:c6:ff:c3:04:78:
         c0:57:a9:77:06:f9:fe:a6:ec:f8:20:bb:6e:17:c5:17:be:3b:
         12:bb:41:12:30:a4:23:5e:55:56:69:78:cc:51:75:41:8e:9f:
         1d:46:d7:0e:24:a8:d5:23:39:70:96:92:74:da:16:5f:41:66:
         c3:2a:4f:16:b2:dc:e1:ab:26:36:e7:3f:90:00:bc:0b:39:fb:
         57:ce:e2:6f:8d:a9:9a:b3:1f:89:9a:91:b3:7f:b8:8b:84:d3:
         a6:ea:7b:78:48:4b:e1:97:bb:d0:97:36:ec:c3:df:eb:2e:bf:
         7d:33:d0:c2:ce:53:3e:52:48:d4:1c:a6:ec:a6:7e:2c:5f:f9:
         f6:ee:0c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:54:25 2026 by rpki-client