Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/62d9e4-1df7-4201-88b6-6dd74272c4c6/1/_u7-64gyDdP1gKaLWxzwpiQxBcw.mft
File:                     _u7-64gyDdP1gKaLWxzwpiQxBcw.mft (raw, json)
Hash identifier:          fTqCMQaC5LPft8hpb7CshinXEO5PfAFp2MNSO0R4OUc=
Subject key identifier:   A3:EF:56:64:CE:BA:08:E2:DB:09:AB:AA:39:07:0F:52:F2:2E:64:EC
Authority key identifier: FE:EE:FE:EB:88:32:0D:D3:F5:80:A6:8B:5B:1C:F0:A6:24:31:05:CC
Certificate issuer:       /CN=feeefeeb88320dd3f580a68b5b1cf0a6243105cc
Certificate serial:       019D2704A26B7B1DCAE24C7B8BC6EFFC6B0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_u7-64gyDdP1gKaLWxzwpiQxBcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/62d9e4-1df7-4201-88b6-6dd74272c4c6/1/_u7-64gyDdP1gKaLWxzwpiQxBcw.mft
Manifest number:          0C24
Signing time:             Wed 25 Mar 2026 22:01:48 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:48 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:48 +0000
Files and hashes:         1: _u7-64gyDdP1gKaLWxzwpiQxBcw.crl (hash: IaVZb5TZhaWmqQ8I/xSgu+ykJvXnfHm2HiSQsbtPn0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/62d9e4-1df7-4201-88b6-6dd74272c4c6/1/_u7-64gyDdP1gKaLWxzwpiQxBcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/62d9e4-1df7-4201-88b6-6dd74272c4c6/1/_u7-64gyDdP1gKaLWxzwpiQxBcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_u7-64gyDdP1gKaLWxzwpiQxBcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:a2:6b:7b:1d:ca:e2:4c:7b:8b:c6:ef:fc:6b:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feeefeeb88320dd3f580a68b5b1cf0a6243105cc
        Validity
            Not Before: Mar 25 22:01:48 2026 GMT
            Not After : Mar 26 22:01:48 2026 GMT
        Subject: CN=a3ef5664ceba08e2db09abaa39070f52f22e64ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a7:37:f2:9a:bd:c8:b6:39:38:a1:82:10:b6:
                    a2:ab:92:9e:61:82:e7:18:10:47:fc:e9:4f:d9:2b:
                    b9:79:9e:62:ea:db:f6:03:9e:54:a4:94:04:da:3a:
                    8d:0c:b3:9b:9b:d6:a2:61:f0:77:1e:bf:cf:d0:da:
                    04:fd:38:e5:1c:e9:63:ca:29:95:03:22:94:b7:29:
                    1d:13:0f:e4:23:a7:a7:0e:6b:b7:ec:b7:b6:25:29:
                    b0:c5:f2:d4:78:87:50:11:ae:bb:5f:dc:3b:49:a8:
                    c6:75:0a:38:ad:65:81:e7:aa:bd:1c:ef:eb:41:5c:
                    6f:37:cc:a1:39:3e:68:06:ba:9c:18:55:d6:f4:32:
                    0a:b8:8a:b5:2e:9d:0d:53:7f:f6:6a:15:7e:21:72:
                    85:0c:35:79:6f:45:60:ce:87:e2:75:b7:0c:52:24:
                    20:01:06:d9:b2:a3:03:64:a6:6b:50:e6:ef:66:75:
                    69:80:7b:45:27:ad:46:94:e9:e7:e3:15:b0:06:f6:
                    8b:48:5e:45:68:3f:d8:93:f9:ef:bf:0b:56:99:7e:
                    d3:c4:af:b0:c1:c7:f1:ca:e3:26:e4:19:27:bf:09:
                    c0:c6:66:b7:66:64:a7:00:dc:d6:20:61:98:1f:18:
                    dc:a9:03:d8:52:45:d4:86:c8:1d:a3:18:5d:e8:5a:
                    44:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:EF:56:64:CE:BA:08:E2:DB:09:AB:AA:39:07:0F:52:F2:2E:64:EC
            X509v3 Authority Key Identifier:
                keyid:FE:EE:FE:EB:88:32:0D:D3:F5:80:A6:8B:5B:1C:F0:A6:24:31:05:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u7-64gyDdP1gKaLWxzwpiQxBcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/62d9e4-1df7-4201-88b6-6dd74272c4c6/1/_u7-64gyDdP1gKaLWxzwpiQxBcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/62d9e4-1df7-4201-88b6-6dd74272c4c6/1/_u7-64gyDdP1gKaLWxzwpiQxBcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:5d:17:23:bf:ae:bb:fd:1d:71:25:63:f6:62:90:6d:ac:ea:
         a7:b1:5b:fa:3a:fa:2a:80:ca:e7:41:73:3b:c9:29:dc:9f:78:
         7a:f8:2c:ef:62:28:ef:cd:ae:32:ef:3f:1c:99:6c:d0:67:c2:
         15:b4:40:59:8e:ce:75:cf:35:95:f6:73:9d:02:2d:cc:97:32:
         57:37:30:d8:97:98:e9:bc:b9:8f:46:c1:76:e9:ef:df:74:55:
         eb:6e:56:d7:6b:7f:72:c2:2b:54:8f:8a:81:b9:dd:7d:7f:64:
         96:60:59:c3:11:64:d3:10:c4:21:d0:a8:d7:3b:98:d7:fa:0c:
         e0:44:ac:26:ec:c8:12:bd:07:e0:9b:7f:6f:51:e0:48:1a:bd:
         eb:16:e7:93:cb:22:ed:28:be:03:4e:6f:20:f0:8c:63:bd:e4:
         13:86:94:b4:df:5b:a4:b0:05:dc:e8:9a:86:14:07:f8:b6:d6:
         32:9c:9b:ea:44:5a:47:a3:0e:e1:77:b8:fb:ee:3f:e3:43:37:
         ce:78:01:2f:0d:3a:1e:b6:a7:15:df:48:73:7e:08:25:a7:17:
         d9:fd:9f:d1:7e:05:a1:87:a6:a6:d3:92:90:43:a8:8e:07:0c:
         f4:4c:1e:7f:b0:8b:58:59:89:5d:fe:40:7d:59:d4:40:6e:60:
         d5:18:58:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:44:18 2026 by rpki-client