Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft
File:                     7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft (raw, json)
Hash identifier:          MJAM3yy0YbAwAOilR1Bu8Ln7TfeOXOCttfbSd45xWMw=
Subject key identifier:   D8:C2:03:F1:E8:B9:95:61:CB:F4:0D:F2:E6:A9:54:77:E9:BB:12:8E
Authority key identifier: EC:B0:D2:68:75:66:5E:C2:6B:31:A5:C7:66:E0:90:FC:FE:90:AE:AC
Certificate issuer:       /CN=ecb0d26875665ec26b31a5c766e090fcfe90aeac
Certificate serial:       019F90598EC3F2DE83D6DA0EBFB84B236524
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft
Manifest number:          19C3
Signing time:             Thu 23 Jul 2026 19:00:16 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:16 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:16 +0000
Files and hashes:         1: 7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.crl (hash: uX5BcLndMyFbQx5f/QfGs2FX9Nh4KzMtXHdgBfQjo1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:59:8e:c3:f2:de:83:d6:da:0e:bf:b8:4b:23:65:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb0d26875665ec26b31a5c766e090fcfe90aeac
        Validity
            Not Before: Jul 23 19:00:16 2026 GMT
            Not After : Jul 24 19:00:16 2026 GMT
        Subject: CN=d8c203f1e8b99561cbf40df2e6a95477e9bb128e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5f:35:5c:56:65:8d:67:90:2d:90:bb:49:7b:
                    2a:a7:a8:55:d0:0f:98:76:48:aa:54:09:c2:ed:90:
                    14:2b:a7:05:2c:71:f7:39:6c:b3:ff:92:7f:18:9b:
                    c8:be:40:19:0e:75:cf:ec:3d:30:cd:36:6f:b0:62:
                    05:83:c6:8f:d8:3d:46:7e:9a:84:6f:9d:60:0d:0e:
                    71:42:fc:e7:4f:d8:f9:60:00:8d:a6:00:8a:95:19:
                    e3:ab:e3:17:ac:93:5a:86:37:ff:32:36:09:77:34:
                    e2:a8:08:c4:95:36:83:b6:4f:5a:d2:9a:59:bc:8c:
                    6d:57:99:e9:49:67:11:78:00:0a:5b:ca:da:9c:5b:
                    50:78:1b:c6:cb:70:6c:dc:fd:31:d2:f3:f4:17:fd:
                    a1:29:dc:43:00:f9:b3:ff:15:9d:c0:24:d9:cf:c8:
                    a4:a8:81:cc:c2:89:b7:52:a2:c8:4f:e1:dc:e2:ea:
                    fd:cd:fc:e9:27:66:b0:6b:88:dd:db:b2:d9:0a:ba:
                    64:d0:e5:22:1c:92:41:de:71:c7:e6:c1:92:7e:6a:
                    db:a1:e4:2d:ff:e2:42:30:b6:2e:27:6b:11:8a:63:
                    ba:d1:69:e7:c9:c9:f6:ca:18:8c:c5:7d:f9:32:01:
                    2f:5f:62:72:77:f3:d7:9a:d6:e0:0f:5f:fb:30:0d:
                    7b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C2:03:F1:E8:B9:95:61:CB:F4:0D:F2:E6:A9:54:77:E9:BB:12:8E
            X509v3 Authority Key Identifier:
                keyid:EC:B0:D2:68:75:66:5E:C2:6B:31:A5:C7:66:E0:90:FC:FE:90:AE:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:f9:51:95:a2:8a:58:00:44:cb:4c:fb:6a:60:c0:64:53:7a:
         b3:40:ef:85:d5:17:13:e2:dd:c5:95:69:5d:57:e5:f0:cc:c5:
         cd:87:68:35:3e:fb:d6:19:68:6c:4f:bc:ee:95:77:3e:7b:42:
         e7:c5:47:39:04:b2:f8:eb:5b:26:72:42:02:47:18:19:d9:6a:
         9b:6a:02:ea:c2:2c:c1:c2:34:e6:41:d3:9b:2e:b7:91:a3:1e:
         0e:0a:7a:49:56:56:b7:56:f2:42:f0:ef:8d:d4:2a:d1:56:c3:
         16:9a:13:c9:29:74:d2:52:cc:31:20:ba:47:86:ac:ec:0e:01:
         e8:75:cf:9f:a7:cc:e7:d9:4d:19:e7:53:33:b6:8b:91:e4:ac:
         fb:34:9d:6f:58:bd:61:67:47:a9:fa:03:26:1d:b9:83:96:2b:
         13:5f:6c:8e:6e:87:1f:18:ab:84:3c:19:72:5f:b5:5e:9f:76:
         dd:ec:12:4a:2f:e8:ea:78:e6:82:b8:98:91:6f:96:01:7f:1f:
         0d:08:23:1d:46:73:51:a2:3e:af:1d:41:d7:54:64:a8:66:b8:
         44:c5:9d:ed:4b:7f:6a:7d:d3:8c:40:26:cb:30:97:32:37:8d:
         33:32:f3:2c:a3:32:ac:87:00:83:a9:c4:1e:35:6f:75:34:24:
         73:e0:d8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:41:54 2026 by rpki-client