Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
File:                     7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft (raw, json)
Hash identifier:          N6xOqkx9g5/zUMnoRC6IeW6aCtbxBp5n+5s2gNPjlI0=
Subject key identifier:   DA:7C:EA:A5:85:2D:4C:59:C4:DC:16:A3:A9:BA:66:31:14:AD:3F:B0
Authority key identifier: ED:D9:7F:60:78:D2:2E:82:FD:3D:04:AE:C5:D6:72:17:15:25:6F:16
Certificate issuer:       /CN=edd97f6078d22e82fd3d04aec5d6721715256f16
Certificate serial:       019E1C479B2C3D67AE3DC350BE806A344918
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
Manifest number:          0C8D
Signing time:             Tue 12 May 2026 13:01:55 +0000
Manifest this update:     Tue 12 May 2026 13:01:55 +0000
Manifest next update:     Wed 13 May 2026 13:01:55 +0000
Files and hashes:         1: 7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl (hash: W76rjz2hVulCtMmMjpR5CXBbgf9lnyDk3ubOgm/PeCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:47:9b:2c:3d:67:ae:3d:c3:50:be:80:6a:34:49:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edd97f6078d22e82fd3d04aec5d6721715256f16
        Validity
            Not Before: May 12 13:01:55 2026 GMT
            Not After : May 13 13:01:55 2026 GMT
        Subject: CN=da7ceaa5852d4c59c4dc16a3a9ba663114ad3fb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:82:b0:a8:e3:d7:03:dd:ca:cc:2f:ab:19:3a:
                    97:be:1f:dd:a3:1a:a9:df:79:74:40:e3:28:9e:10:
                    7a:b6:54:c7:e4:50:d4:5c:51:63:ff:48:94:90:9b:
                    ef:f6:e1:22:6b:49:c0:97:5c:dc:a8:2b:22:0e:03:
                    7f:44:80:2d:2f:f0:82:76:81:40:d3:8c:03:c5:72:
                    d7:14:12:34:b6:23:3c:4b:11:fc:4f:ec:f2:d0:32:
                    cc:94:4f:55:90:59:ae:cc:11:bf:11:9f:fe:bd:75:
                    6c:5a:1e:59:77:03:f4:7b:06:de:05:54:5d:df:60:
                    8a:64:38:09:bc:b0:e2:1e:6b:cd:12:8c:0c:bf:52:
                    7a:22:20:9f:9c:aa:31:08:7e:f4:79:c4:17:97:6d:
                    ce:79:1c:74:83:53:43:79:6d:c1:fb:e4:1a:35:55:
                    53:0b:01:f4:72:9f:fa:f1:31:11:82:99:f1:3e:78:
                    05:c9:48:6d:2d:70:d5:0a:98:34:0f:2d:b5:73:01:
                    c1:dd:47:ab:1d:53:2f:b4:0d:9b:b1:3a:6c:85:ef:
                    ee:72:b7:28:fa:44:e9:16:aa:47:b3:03:ee:a3:3a:
                    9e:8c:ba:81:db:8a:4e:65:b5:96:3d:f8:f5:8b:31:
                    5e:7a:43:36:f0:50:d1:2a:ac:7a:95:45:be:4e:e8:
                    ee:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7C:EA:A5:85:2D:4C:59:C4:DC:16:A3:A9:BA:66:31:14:AD:3F:B0
            X509v3 Authority Key Identifier:
                keyid:ED:D9:7F:60:78:D2:2E:82:FD:3D:04:AE:C5:D6:72:17:15:25:6F:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:72:40:a7:af:04:28:4e:d6:af:d8:64:6d:8f:8d:08:3e:a0:
         3c:85:6b:dd:2c:6b:18:e4:27:40:8d:09:b5:f4:30:61:51:5a:
         45:1d:d8:42:52:7d:8f:1b:db:49:41:85:d8:9d:0a:54:f8:bc:
         f1:c3:ac:de:57:a0:a7:1c:8f:e2:71:af:3d:0f:77:a9:5f:e5:
         1c:15:9a:1c:da:7a:d9:8f:81:15:c3:06:73:8e:2b:c8:2f:9e:
         76:20:a9:df:1f:fd:34:e4:57:79:87:0c:9b:3a:4e:f1:14:e7:
         09:49:8f:a2:f6:e5:3c:10:4f:95:b1:1d:e6:6d:90:ba:b5:85:
         02:e5:54:cb:c6:b3:6e:23:dd:06:45:62:6b:23:3c:cf:0e:c8:
         ef:62:2f:4d:4a:58:69:8a:82:f2:6b:04:8b:86:d6:d8:fc:3f:
         10:ff:7c:1a:e8:f7:db:45:e6:cd:ec:31:8b:28:d3:67:0f:0d:
         70:78:d1:13:d4:dc:a5:6c:6c:70:15:ed:29:e1:1b:ef:7c:3f:
         2d:32:28:57:29:b2:04:41:98:5e:9d:4c:f5:1f:e0:e6:14:71:
         19:98:22:88:57:26:cc:90:5e:9c:84:06:53:9f:4c:f2:6e:59:
         3a:bd:59:7a:68:4a:16:cc:45:0a:ac:dc:29:5a:e1:47:ae:2f:
         6a:f7:8c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:36:42 2026 by rpki-client