Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.mft
File:                     7w8gUz3MeZWijPZ3Z6BBaYZnxM0.mft (raw, json)
Hash identifier:          hfQv+JTtR5hy6Ik29asY5P81BnkPF3Zp4MAQBkYFWuE=
Subject key identifier:   5C:B4:BC:ED:9A:92:DC:D5:55:E2:C6:86:B2:91:A1:E1:B8:D0:62:79
Authority key identifier: EF:0F:20:53:3D:CC:79:95:A2:8C:F6:77:67:A0:41:69:86:67:C4:CD
Certificate issuer:       /CN=ef0f20533dcc7995a28cf67767a041698667c4cd
Certificate serial:       019F90FF71BF6F90F0E9A1BA15E914D69053
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.mft
Manifest number:          0F0D
Signing time:             Thu 23 Jul 2026 22:01:27 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:27 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:27 +0000
Files and hashes:         1: 7w8gUz3MeZWijPZ3Z6BBaYZnxM0.crl (hash: Q0f7gnVTMfsRBbPO+Ml8Y8ljvS8pDpmBDorp8gIeg8w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:71:bf:6f:90:f0:e9:a1:ba:15:e9:14:d6:90:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef0f20533dcc7995a28cf67767a041698667c4cd
        Validity
            Not Before: Jul 23 22:01:27 2026 GMT
            Not After : Jul 24 22:01:27 2026 GMT
        Subject: CN=5cb4bced9a92dcd555e2c686b291a1e1b8d06279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f4:b5:fd:38:1b:eb:dd:f9:50:0d:85:75:94:
                    0a:a0:37:e7:74:c5:79:56:c3:2c:a8:1c:80:02:bf:
                    b5:a9:1c:2d:a8:b1:32:60:94:cc:66:19:d7:fc:d2:
                    a8:36:52:3d:d7:4b:80:60:28:a5:57:91:f3:86:7f:
                    7a:dc:6f:64:e4:26:fe:34:9e:da:0a:a7:6f:50:3f:
                    0b:36:00:6f:a6:d4:c5:ac:cb:42:48:ed:27:ec:f1:
                    5f:64:2b:b0:fb:05:76:4d:d2:5e:09:54:4a:50:cc:
                    6b:15:bd:b6:32:58:40:78:d6:0b:83:f4:13:c0:d0:
                    db:8f:d9:92:da:bd:cd:8a:c1:d9:a8:49:e3:5b:41:
                    82:03:a7:fb:e6:39:c4:e2:8f:f5:da:a5:cf:a8:50:
                    0e:bd:3b:48:2f:49:16:61:41:a0:c1:2d:da:3f:f0:
                    a9:0c:89:9a:23:c0:bb:6e:7b:57:ae:9d:c2:2d:b9:
                    0c:65:5f:00:17:e2:e9:c8:df:92:36:85:c4:4c:bc:
                    ae:3d:ae:66:04:a7:b6:f5:29:30:08:29:53:a4:5b:
                    65:2c:3f:c4:94:a1:28:9e:4f:35:e5:46:78:c2:b1:
                    e8:2b:fb:26:b7:03:d4:ea:d5:8a:87:96:1b:36:09:
                    81:a0:4c:ab:60:4b:28:cd:00:a7:4b:42:74:f1:1c:
                    f4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B4:BC:ED:9A:92:DC:D5:55:E2:C6:86:B2:91:A1:E1:B8:D0:62:79
            X509v3 Authority Key Identifier:
                keyid:EF:0F:20:53:3D:CC:79:95:A2:8C:F6:77:67:A0:41:69:86:67:C4:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:9f:bd:6b:89:f0:a2:81:83:de:ed:fe:c8:24:f7:b3:3a:57:
         ff:f9:8e:d5:fc:26:af:d9:86:2a:e5:ed:c4:6f:44:ee:c8:b7:
         b7:c4:ca:2d:1a:7a:ea:18:f5:51:bb:c1:4b:5e:34:69:14:b7:
         28:a8:e0:0d:0c:72:71:f2:d9:80:20:ea:7b:14:bc:ba:78:c8:
         21:21:35:bf:7b:53:26:6c:23:6d:5d:cb:22:6d:19:5b:f2:84:
         02:e0:37:32:0c:fb:9f:74:f4:22:e4:c9:10:b4:92:53:b3:e6:
         59:a8:16:d7:81:98:24:0f:4e:de:27:f6:16:8d:12:be:29:9b:
         84:dd:83:ce:28:a3:e8:3f:5b:c8:37:a9:5e:38:5b:f4:39:58:
         69:8b:32:ad:33:5e:0b:31:10:c3:06:8e:31:56:f4:93:19:0c:
         d5:81:b0:ef:a2:f1:e7:a9:45:23:87:c2:b2:85:1a:f3:33:16:
         2d:90:cb:ee:9f:74:c7:63:cc:1d:52:85:17:0e:ca:2e:c5:c8:
         d0:24:bd:32:fd:ab:f3:09:48:6b:96:ed:59:ed:4f:94:20:95:
         d9:88:b8:0a:6d:81:7d:40:6b:66:a7:72:bd:a4:db:31:0f:91:
         42:55:76:83:cf:23:c0:e8:1c:b5:d4:33:dc:2f:9f:b1:ea:c2:
         ed:73:84:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:32:36 2026 by rpki-client