Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d841d4-2d94-4917-930e-bb0ad10109f2/1/t7eCBzKSRCr-gLr7D7H3KGzzQFI.mft
File:                     t7eCBzKSRCr-gLr7D7H3KGzzQFI.mft (raw, json)
Hash identifier:          pzuBZyXmTUSpJCQc8oB0EEw+5KVhkvLBV4ytYKjb4N4=
Subject key identifier:   AB:B1:D5:EC:7A:03:14:EE:31:59:92:74:ED:C3:5D:DD:A6:5A:2E:31
Authority key identifier: B7:B7:82:07:32:92:44:2A:FE:80:BA:FB:0F:B1:F7:28:6C:F3:40:52
Certificate issuer:       /CN=b7b782073292442afe80bafb0fb1f7286cf34052
Certificate serial:       019D258394622FF388E17A2A880CC6BD054B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t7eCBzKSRCr-gLr7D7H3KGzzQFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/d841d4-2d94-4917-930e-bb0ad10109f2/1/t7eCBzKSRCr-gLr7D7H3KGzzQFI.mft
Manifest number:          51
Signing time:             Wed 25 Mar 2026 15:01:13 +0000
Manifest this update:     Wed 25 Mar 2026 15:01:13 +0000
Manifest next update:     Thu 26 Mar 2026 15:01:13 +0000
Files and hashes:         1: t7eCBzKSRCr-gLr7D7H3KGzzQFI.crl (hash: uUa0Wtk42lJIJiAbHdLCGyHdsxfLIIC1REngCI4/3wM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/d841d4-2d94-4917-930e-bb0ad10109f2/1/t7eCBzKSRCr-gLr7D7H3KGzzQFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/d841d4-2d94-4917-930e-bb0ad10109f2/1/t7eCBzKSRCr-gLr7D7H3KGzzQFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t7eCBzKSRCr-gLr7D7H3KGzzQFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:94:62:2f:f3:88:e1:7a:2a:88:0c:c6:bd:05:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7b782073292442afe80bafb0fb1f7286cf34052
        Validity
            Not Before: Mar 25 15:01:13 2026 GMT
            Not After : Mar 26 15:01:13 2026 GMT
        Subject: CN=abb1d5ec7a0314ee31599274edc35ddda65a2e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:4e:14:13:7c:1f:2b:72:1c:1c:d9:5d:cb:e0:
                    d1:5e:3e:9c:d0:89:d0:79:03:4c:96:66:3e:3a:9d:
                    3f:43:b1:11:95:cd:a1:fc:44:d2:37:52:17:5f:e2:
                    8c:d1:a9:21:3f:b3:1b:58:3b:2d:d0:c0:90:1b:84:
                    ae:20:7d:c0:7d:93:59:33:b3:83:a5:16:1b:bb:50:
                    7a:7e:55:ba:9b:82:60:4b:d6:b0:1b:1b:05:91:2d:
                    60:f1:51:7b:c3:37:d3:2a:7c:10:19:80:64:36:58:
                    f7:fc:1c:99:8a:16:79:5d:22:5b:dd:79:a5:a7:1d:
                    22:71:2e:63:a2:0d:bf:77:ad:a6:f1:82:71:3b:14:
                    d8:1a:ff:13:ac:10:dc:6f:e2:11:21:74:d0:a1:9b:
                    9d:df:18:5b:89:fd:b3:6c:2c:c4:ea:48:6e:06:d0:
                    8d:02:d3:48:c8:01:f0:33:89:0d:80:3f:96:97:a3:
                    d6:72:87:95:03:db:0a:7f:74:38:1b:4d:e4:99:44:
                    a3:b3:bb:5a:cc:ab:0f:52:3e:80:8c:e4:a1:f6:0d:
                    09:fa:0d:fb:73:1d:55:d6:a3:bb:8a:7d:7a:01:81:
                    2a:83:5b:2a:8c:5c:97:58:a3:a0:ad:6e:28:be:3a:
                    af:b8:71:dd:d5:7b:e0:6b:a3:9c:32:11:65:08:e5:
                    84:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B1:D5:EC:7A:03:14:EE:31:59:92:74:ED:C3:5D:DD:A6:5A:2E:31
            X509v3 Authority Key Identifier:
                keyid:B7:B7:82:07:32:92:44:2A:FE:80:BA:FB:0F:B1:F7:28:6C:F3:40:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7eCBzKSRCr-gLr7D7H3KGzzQFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d841d4-2d94-4917-930e-bb0ad10109f2/1/t7eCBzKSRCr-gLr7D7H3KGzzQFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d841d4-2d94-4917-930e-bb0ad10109f2/1/t7eCBzKSRCr-gLr7D7H3KGzzQFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:0d:1a:27:63:a0:bd:99:b0:d4:b9:a8:11:93:6d:ba:43:ac:
         8a:25:83:05:67:02:c0:78:64:93:74:4a:fa:b3:8c:ee:df:f6:
         cd:49:61:58:54:ae:bb:c5:56:69:e7:b1:69:4c:68:b4:e2:87:
         3d:27:33:59:02:47:a1:a6:b5:cd:85:cb:93:bb:8a:e8:3f:a9:
         ee:0b:8b:3b:52:e3:0b:d5:e8:d2:3f:ff:33:ee:8c:03:6c:bc:
         67:5f:b4:7c:81:65:4a:8e:50:6c:22:21:0f:05:ff:8b:b8:73:
         ed:2d:94:db:48:e2:07:9d:e0:c1:72:35:d8:b1:2c:0d:7c:c9:
         bf:90:6d:0e:33:e4:bf:4d:63:76:86:be:4c:6a:46:31:ec:a6:
         94:7e:35:e3:fe:db:00:dd:58:0a:f8:d3:c7:93:df:b7:b5:0b:
         39:32:6a:fd:9c:c3:20:d4:2c:25:1a:39:86:11:c8:68:f5:6b:
         ab:3e:62:75:db:9f:a1:96:cf:47:26:38:71:d3:e4:a6:25:b2:
         c8:24:5e:03:26:e1:3f:1d:31:51:75:f8:59:78:a6:53:16:ac:
         e2:2c:6c:63:8e:77:ae:4d:ea:83:af:b2:77:7d:f1:15:a0:e2:
         e9:84:19:cc:e8:72:a2:7c:1a:f7:c3:7c:79:4e:66:76:dc:37:
         be:03:e5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:58:27 2026 by rpki-client