Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
File:                     7W3VjHMPSQxsZTC3ULUY55Okh6U.mft (raw, json)
Hash identifier:          P5N3iG4RpTz+Eq+okdNZFBOHNx00fctHxY1DUzjjihs=
Subject key identifier:   5D:73:9F:8F:C8:1F:E5:3A:D2:CB:8D:D4:DB:2B:37:CB:3A:BD:22:2A
Authority key identifier: ED:6D:D5:8C:73:0F:49:0C:6C:65:30:B7:50:B5:18:E7:93:A4:87:A5
Certificate issuer:       /CN=ed6dd58c730f490c6c6530b750b518e793a487a5
Certificate serial:       019F19435210FC6D0FFA584F3A6662C9E094
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
Manifest number:          106D
Signing time:             Tue 30 Jun 2026 16:01:10 +0000
Manifest this update:     Tue 30 Jun 2026 16:01:10 +0000
Manifest next update:     Wed 01 Jul 2026 16:01:10 +0000
Files and hashes:         1: 7W3VjHMPSQxsZTC3ULUY55Okh6U.crl (hash: Und1GKKuAiLJ4CxmwZesOrHYvRZtu8ms1+ZJkZ+ludw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:43:52:10:fc:6d:0f:fa:58:4f:3a:66:62:c9:e0:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6dd58c730f490c6c6530b750b518e793a487a5
        Validity
            Not Before: Jun 30 16:01:10 2026 GMT
            Not After : Jul  1 16:01:10 2026 GMT
        Subject: CN=5d739f8fc81fe53ad2cb8dd4db2b37cb3abd222a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ba:c8:41:97:fa:74:0f:42:ad:7d:a6:67:95:
                    85:af:23:3a:b0:07:b6:b5:f1:b6:7f:ac:38:41:59:
                    dd:2d:90:f3:de:ec:0f:89:3f:00:31:cb:6c:d5:62:
                    2b:3b:b7:09:af:d8:50:9e:75:7f:87:04:cc:0a:52:
                    c9:9b:71:99:ca:b7:a5:28:b6:d7:e9:b0:67:4f:44:
                    c9:90:c3:6f:e0:e6:7e:d2:31:52:2e:b9:77:37:c5:
                    48:a3:0c:8b:bb:42:2f:82:01:d4:ec:a5:45:81:e0:
                    77:29:34:77:70:33:26:f3:00:f3:d4:35:58:33:ef:
                    33:14:ea:86:a7:d8:49:5e:f9:67:4c:26:98:a2:d5:
                    95:fa:6c:1b:b4:5c:0d:2c:ee:30:e7:63:20:a1:36:
                    e9:0f:6e:f5:b6:26:0b:67:82:bd:5b:df:cb:90:39:
                    9d:06:cb:2b:8d:dc:f7:a1:a7:ce:1d:e1:aa:98:e9:
                    b2:99:26:b8:8e:a3:1a:6a:f0:15:52:51:7f:3e:bd:
                    ba:da:ea:aa:8f:26:bf:df:fb:dd:fd:32:6e:7f:aa:
                    bd:27:1f:06:ad:e9:dc:f2:4f:d2:cd:e0:77:6d:66:
                    94:ed:cb:0d:52:05:5b:97:1d:32:12:3c:b0:e5:04:
                    e2:34:d1:3e:19:1e:98:7f:bf:26:d7:0b:8f:cc:e4:
                    7e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:73:9F:8F:C8:1F:E5:3A:D2:CB:8D:D4:DB:2B:37:CB:3A:BD:22:2A
            X509v3 Authority Key Identifier:
                keyid:ED:6D:D5:8C:73:0F:49:0C:6C:65:30:B7:50:B5:18:E7:93:A4:87:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:8f:e3:3b:d9:e5:71:a2:b8:d4:b4:a4:b5:9a:be:c6:02:04:
         27:15:6e:d5:60:d9:79:9c:60:36:f7:8a:11:8d:cf:1f:41:3b:
         4d:9d:7f:0b:a4:9c:4f:3b:eb:72:6f:f7:f0:ab:9a:f2:54:6f:
         e2:6d:d2:89:19:7c:89:89:52:fc:29:39:44:13:4e:6a:b4:47:
         aa:a4:8a:cc:d1:eb:39:2d:2a:3d:3a:dc:5e:d4:6a:3c:38:cf:
         2f:3a:28:f2:fc:42:30:f7:87:bf:bd:10:e1:d3:d6:fa:3f:ee:
         fa:d2:ee:3e:86:61:ea:ad:b4:21:16:e3:13:96:b4:6d:b6:c4:
         ac:8d:83:6c:92:45:10:07:fe:c7:10:bb:c0:28:c7:9f:30:f0:
         f4:e5:20:9e:95:b8:41:b9:f9:ca:24:8e:5f:d0:26:da:03:2c:
         2f:b3:39:ab:b4:03:d5:e4:35:2d:b2:64:ef:77:c2:5d:37:e4:
         df:d7:30:32:28:2c:f8:a2:d2:e5:db:c7:97:e9:c8:fb:09:cb:
         65:3d:ea:81:bb:6a:02:ef:46:e8:de:8f:9e:04:df:eb:9e:26:
         c0:ae:e1:bb:c8:0e:25:aa:b3:55:11:0b:bb:79:6f:86:f7:21:
         18:ed:08:50:ac:37:f3:19:a4:cb:b2:a4:4c:38:d1:01:d7:26:
         28:5c:ae:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZQ1IQ/G0P+lhPOmZiyeCUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNmRkNThjNzMwZjQ5MGM2YzY1MzBiNzUwYjUxOGU3OTNh
NDg3YTUwHhcNMjYwNjMwMTYwMTEwWhcNMjYwNzAxMTYwMTEwWjAzMTEwLwYDVQQD
Eyg1ZDczOWY4ZmM4MWZlNTNhZDJjYjhkZDRkYjJiMzdjYjNhYmQyMjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07rIQZf6dA9CrX2mZ5WFryM6sAe2
tfG2f6w4QVndLZDz3uwPiT8AMcts1WIrO7cJr9hQnnV/hwTMClLJm3GZyrelKLbX
6bBnT0TJkMNv4OZ+0jFSLrl3N8VIowyLu0IvggHU7KVFgeB3KTR3cDMm8wDz1DVY
M+8zFOqGp9hJXvlnTCaYotWV+mwbtFwNLO4w52MgoTbpD271tiYLZ4K9W9/LkDmd
Bssrjdz3oafOHeGqmOmymSa4jqMaavAVUlF/Pr262uqqjya/3/vd/TJuf6q9Jx8G
renc8k/SzeB3bWaU7csNUgVblx0yEjyw5QTiNNE+GR6Yf78m1wuPzOR+AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1zn4/IH+U60suN1NsrN8s6vSIqMB8GA1UdIwQY
MBaAFO1t1YxzD0kMbGUwt1C1GOeTpIelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1czVmpITVBTUXhzWlRDM1VMVVk1NU9raDZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9lMWRhZDItMTc5Ni00NzY0LWFjZjkt
MGFhZWE2NjcwNjYzLzEvN1czVmpITVBTUXhzWlRDM1VMVVk1NU9raDZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9lMWRhZDItMTc5Ni00NzY0LWFjZjktMGFhZWE2NjcwNjYz
LzEvN1czVmpITVBTUXhzWlRDM1VMVVk1NU9raDZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxY/jO9nl
caK41LSktZq+xgIEJxVu1WDZeZxgNveKEY3PH0E7TZ1/C6ScTzvrcm/38Kua8lRv
4m3SiRl8iYlS/Ck5RBNOarRHqqSKzNHrOS0qPTrcXtRqPDjPLzoo8vxCMPeHv70Q
4dPW+j/u+tLuPoZh6q20IRbjE5a0bbbErI2DbJJFEAf+xxC7wCjHnzDw9OUgnpW4
Qbn5yiSOX9Am2gMsL7M5q7QD1eQ1LbJk73fCXTfk39cwMigs+KLS5dvHl+nI+wnL
ZT3qgbtqAu9G6N6PngTf654mwK7hu8gOJaqzVRELu3lvhvchGO0IUKw38xmky7Kk
TDjRAdcmKFyuWA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:24 2026 by rpki-client