Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft
File:                     7GV-idqz-xXjuuDrGsf6yT32OF0.mft (raw, json)
Hash identifier:          M2A4oAU4ipAGT6pE2Mh3pRQj0JpxTnWDdTHePfs+5qI=
Subject key identifier:   74:0E:CE:71:4C:AC:BB:F7:45:19:F8:8E:66:F1:59:4D:D9:03:BE:57
Authority key identifier: EC:65:7E:89:DA:B3:FB:15:E3:BA:E0:EB:1A:C7:FA:C9:3D:F6:38:5D
Certificate issuer:       /CN=ec657e89dab3fb15e3bae0eb1ac7fac93df6385d
Certificate serial:       019F9211D708B7751736399B9C6EE355C22C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7GV-idqz-xXjuuDrGsf6yT32OF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft
Manifest number:          09B8
Signing time:             Fri 24 Jul 2026 03:01:10 +0000
Manifest this update:     Fri 24 Jul 2026 03:01:10 +0000
Manifest next update:     Sat 25 Jul 2026 03:01:10 +0000
Files and hashes:         1: 7GV-idqz-xXjuuDrGsf6yT32OF0.crl (hash: CyxIZNgVGR/ZoDKafxlgkKBBAvyK2+8HWh/idYegt5I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7GV-idqz-xXjuuDrGsf6yT32OF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 03:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:d7:08:b7:75:17:36:39:9b:9c:6e:e3:55:c2:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec657e89dab3fb15e3bae0eb1ac7fac93df6385d
        Validity
            Not Before: Jul 24 03:01:10 2026 GMT
            Not After : Jul 25 03:01:10 2026 GMT
        Subject: CN=740ece714cacbbf74519f88e66f1594dd903be57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:af:f6:99:29:2a:f6:bd:80:d0:95:4b:79:25:
                    58:01:78:b4:de:7b:37:95:6e:1c:42:a3:a9:18:da:
                    d3:cc:16:fb:e6:21:71:70:b9:f9:dc:a6:f1:91:50:
                    9a:23:19:e8:74:42:67:48:0b:93:15:df:30:ba:df:
                    c9:92:06:d7:6a:86:7c:41:05:f7:42:a3:fd:dd:16:
                    1c:5a:d6:67:08:6e:4b:11:31:95:1f:83:86:02:dd:
                    d3:a1:c8:eb:f0:82:e5:66:6e:b8:de:06:80:ed:7f:
                    e3:e5:36:74:10:f6:e5:0e:d0:03:a8:e5:60:26:a4:
                    71:bd:2f:b3:21:6a:7b:86:ea:40:a4:93:d3:ba:19:
                    33:54:38:48:28:84:31:4b:33:c1:b9:2b:8d:7e:27:
                    2d:f3:1c:95:67:0a:78:41:75:52:43:d4:51:75:3c:
                    33:8a:0a:e1:a2:5a:3d:7e:d3:97:4d:7f:ab:59:c4:
                    62:04:06:af:37:44:1a:5d:76:17:4d:58:3b:36:e8:
                    ef:4a:bf:f3:48:07:da:9f:b9:75:0b:b6:9c:3b:85:
                    ba:e9:e0:ce:dd:13:59:eb:8f:79:1a:75:21:8e:10:
                    70:90:81:a7:27:db:4b:8c:04:79:cc:c0:a6:c5:16:
                    58:c2:35:d2:30:07:9e:5d:0c:63:72:d2:13:a4:86:
                    59:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:0E:CE:71:4C:AC:BB:F7:45:19:F8:8E:66:F1:59:4D:D9:03:BE:57
            X509v3 Authority Key Identifier:
                keyid:EC:65:7E:89:DA:B3:FB:15:E3:BA:E0:EB:1A:C7:FA:C9:3D:F6:38:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GV-idqz-xXjuuDrGsf6yT32OF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:c0:6e:fc:10:4d:19:1d:52:04:ce:9e:35:2e:1a:6b:8a:d5:
         69:9b:b1:4b:6c:e8:f0:81:1c:47:5e:3f:df:fc:6d:6d:db:87:
         41:0f:77:69:3b:76:04:a0:e5:09:92:46:7b:ee:1c:c0:98:7e:
         a9:d8:66:8c:d5:94:d5:b1:24:a2:e5:13:5c:56:0a:55:ef:74:
         4f:f0:6f:9a:4b:24:14:1e:c1:6a:c0:cc:21:ec:f0:07:1e:51:
         23:66:2f:29:e7:6a:99:d7:cf:51:11:56:e4:3d:f0:0c:2c:27:
         29:bb:6d:52:df:d1:f4:fc:94:50:d3:18:62:47:62:e0:2b:ba:
         af:aa:60:d2:0f:ef:68:8f:1d:36:77:50:ac:f1:cd:70:51:9e:
         23:9d:aa:a8:49:de:ba:1d:4e:3a:3c:b6:65:3d:b3:54:4d:04:
         8d:91:1a:bd:58:03:d0:ec:3a:f1:bf:b8:45:06:2c:24:62:1b:
         5f:59:d0:d0:d5:94:8a:e0:e8:e3:48:7c:69:cf:09:79:ae:62:
         4c:6d:70:58:a1:06:74:c0:f1:bd:df:34:97:e3:70:3f:70:bf:
         05:d2:ac:3a:f6:56:7a:16:9a:9e:45:d2:91:6f:b5:4d:c0:ed:
         b6:6a:dd:d1:31:c7:8a:1f:e1:a9:ca:b0:4a:9b:0f:e0:39:bc:
         29:8b:a3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:29:15 2026 by rpki-client