Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
File:                     7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft (raw, json)
Hash identifier:          IW7YxseJKlM4/ffDmH4NQoHCw3REwtpUPEJmQEq+pYE=
Subject key identifier:   99:68:6F:6D:7C:EE:24:A9:C2:1D:B0:02:07:84:FE:1F:CC:14:BA:3A
Authority key identifier: EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1
Certificate issuer:       /CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
Certificate serial:       019F8FB5722556FC4FD87EF8A55463FF801C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
Manifest number:          0749
Signing time:             Thu 23 Jul 2026 16:01:00 +0000
Manifest this update:     Thu 23 Jul 2026 16:01:00 +0000
Manifest next update:     Fri 24 Jul 2026 16:01:00 +0000
Files and hashes:         1: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl (hash: V3IEmY9QtfFuARwik3Vj96/v7F/WqsimN59RFhToxx4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:72:25:56:fc:4f:d8:7e:f8:a5:54:63:ff:80:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
        Validity
            Not Before: Jul 23 16:01:00 2026 GMT
            Not After : Jul 24 16:01:00 2026 GMT
        Subject: CN=99686f6d7cee24a9c21db0020784fe1fcc14ba3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:82:04:3b:9f:43:76:06:6a:23:7d:32:8f:35:
                    01:ea:44:6e:ad:ce:6c:9a:84:63:bc:88:aa:11:f5:
                    7a:8f:09:72:1c:5e:b7:d8:fb:fe:13:64:99:4e:c3:
                    f8:92:a1:44:fc:27:73:13:62:11:2f:d7:be:e9:ee:
                    8c:9e:ad:70:55:9d:69:77:c6:be:3f:4e:b6:5a:b4:
                    f6:25:23:d6:2c:56:f1:9c:7a:31:10:8d:24:37:29:
                    a8:2e:be:f7:a0:b0:a8:82:d8:2c:ea:63:0e:d4:24:
                    f9:83:52:2e:f7:ca:dc:56:8a:2d:ce:39:d2:bd:29:
                    dd:94:41:fe:ac:7e:e9:d6:c9:24:37:60:c8:fe:8e:
                    d1:d3:87:6f:4b:2c:67:93:18:3e:af:fa:eb:25:4d:
                    fa:e6:6d:a2:c7:c4:6c:5b:96:50:d1:90:06:ef:6e:
                    41:80:55:9d:b6:5b:b0:65:c1:48:03:82:df:15:47:
                    fa:cb:bc:59:6c:ea:23:f0:cc:58:e6:f5:59:7e:30:
                    10:cc:ff:28:28:a0:46:98:5c:df:f2:c9:f3:ff:36:
                    cb:f5:3d:56:01:c7:23:27:e6:12:38:fa:89:59:88:
                    d0:ac:d9:05:7c:14:b4:c1:54:34:69:8e:2c:e7:aa:
                    de:b4:67:53:26:c1:20:66:c7:bf:0f:9e:77:3e:58:
                    59:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:68:6F:6D:7C:EE:24:A9:C2:1D:B0:02:07:84:FE:1F:CC:14:BA:3A
            X509v3 Authority Key Identifier:
                keyid:EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:3e:ae:4e:0d:73:5c:9b:0e:a6:ab:37:78:35:dd:d2:d8:c0:
         ef:0a:68:eb:f3:0f:e7:15:2a:45:9e:1e:23:00:71:5a:83:c9:
         25:2f:ab:d5:d3:55:8b:4b:b4:ff:ec:15:eb:4a:12:31:32:b1:
         a6:73:e9:67:47:08:77:74:db:43:f6:47:d8:39:8e:47:fa:4f:
         37:2a:50:ab:04:92:84:c5:b1:85:c6:ae:7d:c4:bc:d2:d2:d4:
         d2:11:e8:15:0d:7d:ce:18:b0:d4:e6:92:47:2e:b2:75:d6:c6:
         f7:76:51:c0:5e:5d:85:56:e0:c7:c5:2f:2c:c1:de:93:1b:4c:
         67:af:1e:66:15:8c:b8:1a:02:9b:3c:90:8e:14:49:19:6d:7b:
         5b:1b:e7:a7:cd:2d:72:33:a6:33:7c:de:71:a7:52:d8:75:da:
         17:7a:16:03:7e:8a:7e:1b:04:66:4f:00:27:c7:45:94:f4:4f:
         cb:c6:55:65:44:f7:1e:46:c5:e8:4c:fc:4e:ce:dc:8a:0b:39:
         d2:5d:ec:97:99:4d:14:31:67:f4:4c:fd:04:5e:3d:49:f7:96:
         54:aa:fb:88:35:f1:01:dd:1b:2e:ac:eb:82:a1:a4:10:57:6c:
         75:32:79:80:21:2f:8a:e0:3e:6b:c2:4e:fd:91:c8:8b:72:a2:
         46:cd:9c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:57:48 2026 by rpki-client