Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
File:                     7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft (raw, json)
Hash identifier:          YX83UUa/QcEjJ/+wNMG27yhvNPqKhaOXgv2dUbiwaW0=
Subject key identifier:   C0:CC:C8:AD:E2:3C:C8:40:0F:FC:E6:5C:20:21:A1:55:E6:0B:15:DC
Authority key identifier: EF:F9:87:18:9D:A4:E3:83:85:B0:72:18:54:FE:CC:C3:EF:46:6A:96
Certificate issuer:       /CN=eff987189da4e38385b0721854feccc3ef466a96
Certificate serial:       019D2A3BDC5C2E333A8CB115106A4B87BC80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
Manifest number:          0F20
Signing time:             Thu 26 Mar 2026 13:00:59 +0000
Manifest this update:     Thu 26 Mar 2026 13:00:59 +0000
Manifest next update:     Fri 27 Mar 2026 13:00:59 +0000
Files and hashes:         1: 7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl (hash: rbcvjljXOtr85HtIAJ5Rpe2jX125OiYshq9P2xhaHgg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:3b:dc:5c:2e:33:3a:8c:b1:15:10:6a:4b:87:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eff987189da4e38385b0721854feccc3ef466a96
        Validity
            Not Before: Mar 26 13:00:59 2026 GMT
            Not After : Mar 27 13:00:59 2026 GMT
        Subject: CN=c0ccc8ade23cc8400ffce65c2021a155e60b15dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b5:f9:57:b1:7b:9f:85:d3:88:59:54:b7:26:
                    40:6f:fa:24:7c:ed:00:90:da:d6:8b:15:66:d3:cd:
                    79:7f:9c:c5:07:b5:ce:56:c8:f1:8c:72:10:e1:26:
                    73:ea:35:45:ad:f4:43:db:fd:9c:68:25:70:81:76:
                    d1:36:f3:2a:31:66:7c:bd:0c:2e:00:ea:6c:d3:a0:
                    4b:a1:05:a2:c3:63:db:e0:32:e9:ec:8e:d5:91:65:
                    75:40:da:61:c6:7e:99:82:33:83:81:30:75:e9:ef:
                    7d:be:83:f2:e9:2b:5e:89:b1:f9:63:c6:a8:68:b4:
                    95:39:7c:b2:69:25:9d:62:8d:21:38:5c:88:4f:ab:
                    14:2f:e7:0e:22:12:91:a2:4d:c4:4b:f6:c1:8a:0f:
                    b0:b9:45:e1:b0:f1:17:5e:13:1b:ce:a1:d3:29:98:
                    14:54:66:32:d1:49:3b:3e:af:2f:31:01:97:f4:63:
                    af:99:3f:b0:a5:4f:41:40:ee:91:8b:b1:7a:72:b0:
                    2a:f2:72:63:23:1f:ec:05:a5:0c:18:2b:01:97:44:
                    3d:ce:1c:98:e0:50:ff:7d:0b:8b:93:b7:c2:c0:73:
                    d8:78:bd:9c:3c:b7:09:53:4f:70:b0:47:a5:3f:1a:
                    b3:4f:26:a6:44:3e:7f:81:b6:54:46:84:99:da:8b:
                    e5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CC:C8:AD:E2:3C:C8:40:0F:FC:E6:5C:20:21:A1:55:E6:0B:15:DC
            X509v3 Authority Key Identifier:
                keyid:EF:F9:87:18:9D:A4:E3:83:85:B0:72:18:54:FE:CC:C3:EF:46:6A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:84:57:46:64:0c:7e:79:9e:82:6d:c7:9c:4b:95:91:c6:77:
         34:fd:73:59:02:b2:af:a2:f0:0b:53:69:9d:16:56:27:ca:3d:
         8e:56:ef:21:0a:9c:ce:e3:d3:36:9f:e1:c2:04:4a:29:cd:86:
         90:39:fb:60:1a:85:b9:59:9e:eb:43:8d:63:89:ca:86:3e:84:
         b9:82:7b:8f:33:5e:c0:c3:26:c4:12:2c:36:e3:d0:c3:09:e8:
         00:1b:0b:b2:f8:8f:f5:29:63:27:5d:cc:97:f4:14:84:29:b5:
         4b:79:c7:5e:bb:0b:5a:39:23:1a:fd:b2:41:3c:e7:5f:93:84:
         09:07:b7:e1:50:43:2c:7f:46:1e:92:2a:23:58:df:7f:85:84:
         b2:7a:6a:06:2c:d5:67:da:97:3b:d2:cb:8a:13:1b:eb:62:78:
         52:48:3e:2b:ff:d5:fb:6d:d9:21:c6:d6:98:21:b6:c6:fa:1a:
         6d:44:04:83:f5:30:ef:c6:61:01:a0:c7:34:82:3a:98:e6:d5:
         6d:e5:07:f7:c2:e8:c1:7e:9d:99:bb:4a:d6:98:51:49:74:d5:
         3d:b1:bb:35:51:1f:39:fd:05:2a:f2:92:af:a9:c4:b8:e5:a1:
         dc:7c:f2:9c:27:88:56:19:5e:03:9e:cc:f1:d0:ba:6a:50:0f:
         c0:a3:8b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:55:17 2026 by rpki-client