Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
File:                     7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft (raw, json)
Hash identifier:          tbcwTeT2Khep63qbipgxjPlKjExFvTKy1/a9WzN1z3o=
Subject key identifier:   DF:06:D2:D8:62:EF:5B:50:0A:E2:57:4E:FF:F7:1C:B1:DF:3B:58:3B
Authority key identifier: ED:9A:3E:C7:CB:3B:19:0E:72:13:09:9D:E1:67:1B:EA:2D:32:8A:95
Certificate issuer:       /CN=ed9a3ec7cb3b190e7213099de1671bea2d328a95
Certificate serial:       019D39AE53B5CBBE3236ADF8E550F635CCEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
Manifest number:          0766
Signing time:             Sun 29 Mar 2026 13:00:19 +0000
Manifest this update:     Sun 29 Mar 2026 13:00:19 +0000
Manifest next update:     Mon 30 Mar 2026 13:00:19 +0000
Files and hashes:         1: 7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl (hash: 4YLYFwS8U1RldT+0erdKTMOZ1dFE54bNm4Jm0NNpBKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:ae:53:b5:cb:be:32:36:ad:f8:e5:50:f6:35:cc:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed9a3ec7cb3b190e7213099de1671bea2d328a95
        Validity
            Not Before: Mar 29 13:00:19 2026 GMT
            Not After : Mar 30 13:00:19 2026 GMT
        Subject: CN=df06d2d862ef5b500ae2574efff71cb1df3b583b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a7:81:01:ae:7f:b2:63:35:54:f6:1f:7e:49:
                    7b:fc:65:5c:7b:e6:9c:71:65:47:db:01:7e:2b:f3:
                    28:e8:14:f6:ea:f5:f1:18:a1:36:1d:3a:bc:33:d8:
                    5f:81:ee:9d:ad:39:02:69:08:b8:7f:94:94:5d:04:
                    e0:14:8f:2b:77:3f:2f:e6:bc:e6:71:e2:6b:6d:f5:
                    42:8e:a6:c9:a8:f0:0c:c8:9c:1f:ea:49:cb:99:3e:
                    ea:68:17:97:d3:f8:3b:98:57:03:0c:7e:b3:ab:7a:
                    84:16:a4:db:c3:85:a8:44:26:7a:07:20:98:43:92:
                    79:ad:46:b0:fa:42:45:7d:91:bc:5f:d1:d6:32:fb:
                    b5:8e:cc:56:66:8a:7b:a7:e6:3e:19:44:6c:8d:47:
                    19:5e:c3:ba:e7:bd:97:7e:8a:3b:96:fb:dc:c0:ed:
                    b3:cf:eb:bf:50:60:80:82:9f:2e:ca:ec:a8:ab:c6:
                    dc:3c:f4:bd:67:38:e9:65:b0:3a:21:c6:65:91:25:
                    87:93:2e:b2:12:1e:42:a2:0a:1e:c9:bd:d1:c1:8a:
                    96:d4:91:41:c0:70:ee:2d:32:72:da:ad:f6:37:dd:
                    83:ac:78:fa:cd:c8:de:a1:7f:2c:cf:f0:7e:c4:03:
                    a7:a5:79:78:0c:43:60:88:2c:8a:c7:4a:54:d9:12:
                    3b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:06:D2:D8:62:EF:5B:50:0A:E2:57:4E:FF:F7:1C:B1:DF:3B:58:3B
            X509v3 Authority Key Identifier:
                keyid:ED:9A:3E:C7:CB:3B:19:0E:72:13:09:9D:E1:67:1B:EA:2D:32:8A:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:a5:cf:22:5e:5c:c6:f5:f4:19:35:c0:fa:3f:a9:f1:e0:2e:
         4c:da:03:e4:d3:c3:a6:33:0c:fb:53:77:bb:77:16:ae:25:60:
         60:9b:ca:dc:f4:77:26:ea:f8:d9:d3:b1:f3:e6:72:37:e7:00:
         33:76:b9:cd:10:18:37:eb:a2:f0:ee:62:ac:a9:5c:e9:c7:1b:
         7f:52:ac:79:66:4c:bc:f4:a5:86:a6:69:66:81:60:9e:61:58:
         42:8c:41:40:eb:de:9e:ce:82:ce:d2:0b:2b:0f:47:2f:f3:55:
         b8:9b:72:df:68:aa:da:26:b6:4a:9c:88:62:09:3a:27:ba:29:
         3f:af:04:12:73:6d:19:b0:90:5d:ba:bd:ba:1e:11:85:4f:ea:
         04:bb:68:28:d4:ad:9e:c1:15:0a:8f:31:99:bb:b3:35:83:cb:
         8d:3f:ba:d9:cd:9a:c9:5e:83:73:e5:40:a6:87:51:8d:79:b5:
         0d:9e:41:f5:33:07:40:34:e0:ea:49:54:3a:2f:ae:7b:81:28:
         43:90:61:c9:6a:90:29:24:73:6c:e8:e2:62:11:46:8b:8c:6d:
         4a:d8:f8:0c:85:91:bc:77:c8:8f:bd:32:b3:5a:b5:20:68:69:
         a8:8a:09:17:9c:a6:33:e7:ca:b3:87:0f:71:31:79:03:07:4a:
         b9:b1:e3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----