Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/e_7CSauE-BJlaciz2OP0PNgsYRU.mft
File:                     e_7CSauE-BJlaciz2OP0PNgsYRU.mft (raw, json)
Hash identifier:          X+oU799AQ6OJ0Zrjxs9deflA0UBKhd6VxR9ZoI5b/0c=
Subject key identifier:   38:26:4F:F4:6D:C5:E2:6F:3A:6A:F4:2D:A2:91:0B:F0:D9:BC:FC:24
Authority key identifier: 7B:FE:C2:49:AB:84:F8:12:65:69:C8:B3:D8:E3:F4:3C:D8:2C:61:15
Certificate issuer:       /CN=7bfec249ab84f8126569c8b3d8e3f43cd82c6115
Certificate serial:       019D25BAC7325840A01B26A730552F0CAF52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e_7CSauE-BJlaciz2OP0PNgsYRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/e_7CSauE-BJlaciz2OP0PNgsYRU.mft
Manifest number:          1881
Signing time:             Wed 25 Mar 2026 16:01:30 +0000
Manifest this update:     Wed 25 Mar 2026 16:01:30 +0000
Manifest next update:     Thu 26 Mar 2026 16:01:30 +0000
Files and hashes:         1: e_7CSauE-BJlaciz2OP0PNgsYRU.crl (hash: tLHMzl9r72/dWdG8OoDWWxZpzoHN5rBWvpGW3Bx5vm4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/e_7CSauE-BJlaciz2OP0PNgsYRU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/e_7CSauE-BJlaciz2OP0PNgsYRU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e_7CSauE-BJlaciz2OP0PNgsYRU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:c7:32:58:40:a0:1b:26:a7:30:55:2f:0c:af:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bfec249ab84f8126569c8b3d8e3f43cd82c6115
        Validity
            Not Before: Mar 25 16:01:30 2026 GMT
            Not After : Mar 26 16:01:30 2026 GMT
        Subject: CN=38264ff46dc5e26f3a6af42da2910bf0d9bcfc24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ea:cf:19:da:1a:c6:5e:ac:9f:da:44:55:e4:
                    ec:1c:d0:8d:8d:29:3d:9a:8c:54:0d:fd:70:3c:a6:
                    28:ee:94:24:ca:f7:ba:18:21:96:3f:0f:91:1d:82:
                    10:aa:4a:2e:54:4b:cf:83:cf:2f:1d:06:13:18:d6:
                    bf:01:51:4b:22:ad:88:9b:05:e7:73:87:1e:16:aa:
                    e7:4e:7d:0f:23:c1:e3:05:68:d1:3f:9c:f4:61:80:
                    48:9e:74:97:89:f9:15:2a:d6:27:4a:7a:23:16:81:
                    cf:58:f0:29:41:cc:66:9c:01:84:85:a6:b8:83:54:
                    24:53:89:0b:57:b1:c5:97:77:ab:fc:6d:0d:ea:d6:
                    a7:96:1c:d5:ee:dc:77:b8:5c:db:2b:b9:95:fd:43:
                    89:5b:6b:2a:02:4f:cf:96:5a:75:25:64:a5:a9:72:
                    43:2c:f1:66:3b:a3:9d:22:1d:a8:76:d7:c2:ed:37:
                    ba:f5:e0:63:1c:08:91:09:33:c8:d7:1c:05:13:ef:
                    3e:48:1e:b6:d2:9d:7f:f8:4a:7c:54:42:63:79:a1:
                    fc:03:5a:c7:8b:10:6c:21:1b:9d:ed:f1:e3:79:54:
                    0c:ea:2e:b6:38:02:07:d0:6c:ad:41:b6:d8:31:2f:
                    7d:e3:71:b8:47:58:2a:bc:2f:ba:f2:4d:93:87:ae:
                    68:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:26:4F:F4:6D:C5:E2:6F:3A:6A:F4:2D:A2:91:0B:F0:D9:BC:FC:24
            X509v3 Authority Key Identifier:
                keyid:7B:FE:C2:49:AB:84:F8:12:65:69:C8:B3:D8:E3:F4:3C:D8:2C:61:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_7CSauE-BJlaciz2OP0PNgsYRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/e_7CSauE-BJlaciz2OP0PNgsYRU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/e_7CSauE-BJlaciz2OP0PNgsYRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:e0:05:73:e7:c4:76:0b:0c:8c:f2:e4:27:0c:f1:ab:f1:fb:
         03:b7:aa:b4:7d:38:b7:88:25:6a:1e:5a:05:b5:69:b1:94:1e:
         57:7b:2f:a3:d3:14:f9:5d:de:09:9d:ee:16:d1:6c:24:b2:e2:
         29:ca:47:c3:97:8e:88:03:48:60:96:46:0c:33:aa:88:3e:1e:
         c1:09:41:2f:38:b8:fd:33:d3:17:64:a2:d0:53:ff:47:2b:12:
         6f:08:c4:c3:c3:a4:d4:9e:40:67:49:d4:c5:8b:3d:a0:8e:f9:
         e4:be:d9:55:f5:9b:71:b8:e3:37:2d:f5:88:1f:b4:6d:b9:f0:
         37:3b:78:83:98:23:92:55:4b:4b:c8:d3:89:f8:9f:19:15:18:
         9e:5e:bb:d3:51:3d:85:d0:6d:a9:40:86:dc:f3:b3:8b:89:cf:
         ef:3b:ca:71:4f:b1:64:d2:67:97:f2:6b:2a:43:20:34:50:29:
         4c:76:33:7e:0f:a8:fd:91:a0:e4:06:5d:f2:76:c9:2c:75:c4:
         dd:a5:aa:21:d0:ad:8c:25:a8:39:0e:4c:f7:46:5d:98:65:e7:
         6e:6f:30:c3:75:f6:df:76:d4:5d:c0:57:5b:2d:a2:7a:88:d5:
         7a:59:85:4e:40:ed:91:dc:91:2a:d3:3d:2f:99:46:2c:eb:e6:
         25:69:25:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:19 2026 by rpki-client