Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft
File:                     7zxxAAZFDN50pBmnFDKY5VBm8mw.mft (raw, json)
Hash identifier:          ZlUat8IazXk/X5rXeyhM3NEL8yu9I8AQPyxVZR5lXqk=
Subject key identifier:   C7:00:0D:B0:1D:4D:5A:A1:81:84:F1:7F:F1:4A:CD:92:D7:0C:8F:53
Authority key identifier: EF:3C:71:00:06:45:0C:DE:74:A4:19:A7:14:32:98:E5:50:66:F2:6C
Certificate issuer:       /CN=ef3c710006450cde74a419a7143298e55066f26c
Certificate serial:       019D284DC98FA11E23533EE6A4B85266A466
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft
Manifest number:          0781
Signing time:             Thu 26 Mar 2026 04:01:19 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:19 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:19 +0000
Files and hashes:         1: 7zxxAAZFDN50pBmnFDKY5VBm8mw.crl (hash: 3WpNhkQE5O1brGOooynrT183UDR/muGi8Yhf5/6AC7g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:c9:8f:a1:1e:23:53:3e:e6:a4:b8:52:66:a4:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef3c710006450cde74a419a7143298e55066f26c
        Validity
            Not Before: Mar 26 04:01:19 2026 GMT
            Not After : Mar 27 04:01:19 2026 GMT
        Subject: CN=c7000db01d4d5aa18184f17ff14acd92d70c8f53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d2:a9:ef:f4:45:fd:8d:61:25:f8:9e:b4:4f:
                    50:66:91:c7:2b:86:b1:ce:13:5d:61:ea:6e:fc:60:
                    7f:e2:4c:6a:9b:34:73:ce:69:d8:d4:dc:a8:89:e2:
                    3f:42:db:78:e6:09:b5:fc:55:f7:37:38:db:1a:ec:
                    27:c1:32:6a:2f:33:90:17:10:39:5c:3d:bd:4b:0d:
                    a7:5a:c3:3a:b3:7d:4c:9f:c4:9f:36:6f:23:fe:67:
                    5d:49:6a:c4:fc:24:bb:d3:b3:e7:9c:bf:10:2d:bb:
                    3f:be:66:16:40:84:ef:20:09:45:65:1c:a4:70:cc:
                    19:cc:fc:89:7c:da:5a:25:f5:a4:a9:bf:b7:3f:60:
                    d8:12:42:a3:4d:d7:69:72:0d:aa:a6:15:c1:8e:62:
                    02:65:2a:ed:90:dc:dd:36:0b:5f:dc:68:1a:20:bc:
                    1c:91:80:e9:7b:9f:c6:13:cf:65:b5:5b:2c:99:68:
                    d0:27:20:47:fa:74:83:a6:22:e6:0e:14:78:3c:7c:
                    85:41:a1:bb:8f:bc:c2:b8:40:4c:3b:65:10:26:e4:
                    19:d0:fb:45:9d:ec:73:f2:3c:0d:28:55:05:47:40:
                    a6:4e:c7:a0:70:80:a9:1d:85:86:34:3b:11:17:94:
                    d9:f6:96:30:54:a3:7c:e2:b1:bf:d1:c8:06:58:29:
                    09:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:00:0D:B0:1D:4D:5A:A1:81:84:F1:7F:F1:4A:CD:92:D7:0C:8F:53
            X509v3 Authority Key Identifier:
                keyid:EF:3C:71:00:06:45:0C:DE:74:A4:19:A7:14:32:98:E5:50:66:F2:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:66:27:a7:86:00:83:7b:86:52:fe:87:aa:58:b1:54:a0:b8:
         53:86:37:6f:34:b9:ff:f8:c0:d6:70:1c:c9:b8:ee:9e:82:73:
         4f:3c:7f:e9:56:be:cc:12:71:11:57:4f:58:01:db:41:16:f6:
         a8:02:b7:7f:f5:ce:6c:39:8e:41:9e:60:58:1f:de:52:b6:77:
         dc:bd:5a:4c:2f:5e:21:59:bc:2e:ca:e2:10:bf:b9:6c:b0:93:
         4a:0e:6b:6b:e7:02:76:f9:e0:14:48:08:58:e4:61:63:f3:12:
         64:1c:ef:7c:be:06:ad:f0:6e:47:2d:c1:63:b7:4d:83:ea:dc:
         9e:62:d0:6b:78:c9:d6:44:ae:80:28:f0:cd:aa:44:69:b9:07:
         60:21:e9:b4:88:5b:ab:4a:05:bf:60:ba:02:c0:4a:56:d4:60:
         b3:60:4c:a2:f3:20:37:07:d8:11:a3:c5:49:2e:79:33:e0:08:
         ab:09:20:ed:ae:b9:ad:37:bb:54:08:ac:4c:84:66:cf:50:01:
         56:5a:8d:e2:0a:c5:26:f8:f2:1a:9e:7b:1e:5f:b4:f1:75:01:
         8c:da:9b:d4:3a:f7:0b:37:62:05:5e:53:9f:37:60:6f:56:7c:
         d0:d7:72:d2:0c:cc:e7:02:19:34:b0:8e:62:e6:ce:e2:2a:0d:
         f8:21:9e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:18 2026 by rpki-client