Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
File:                     7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft (raw, json)
Hash identifier:          joKqWaVhr3/yEM7HmIs0sJrMAZ1Fs7RuU0L1PeXhXZw=
Subject key identifier:   2E:9E:1D:A5:95:9D:53:51:AA:1E:12:AE:BB:57:8E:DB:75:D5:9A:A8
Authority key identifier: ED:1B:6A:DC:99:49:7F:D1:B3:0A:0A:48:2E:DC:40:2B:0C:4F:0C:F8
Certificate issuer:       /CN=ed1b6adc99497fd1b30a0a482edc402b0c4f0cf8
Certificate serial:       01A00101BEF424B942394E9EB2F911B477D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
Manifest number:          069F
Signing time:             Fri 14 Aug 2026 16:01:26 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:26 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:26 +0000
Files and hashes:         1: 7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl (hash: QxWNJh8zsK31FWQt0Ze/YbD/UN3wRv0/t2t++EyaNeM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:be:f4:24:b9:42:39:4e:9e:b2:f9:11:b4:77:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed1b6adc99497fd1b30a0a482edc402b0c4f0cf8
        Validity
            Not Before: Aug 14 16:01:26 2026 GMT
            Not After : Aug 15 16:01:26 2026 GMT
        Subject: CN=2e9e1da5959d5351aa1e12aebb578edb75d59aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dc:eb:c6:e6:8e:2f:94:da:d9:9a:a5:95:14:
                    fb:9c:31:f0:60:ca:97:63:2c:18:54:c5:ac:d8:9c:
                    7d:48:42:29:76:ed:35:82:43:4c:9a:68:02:17:81:
                    b0:ff:b8:bf:1b:8c:c7:cf:cb:5d:46:6c:41:27:74:
                    b5:35:17:d9:ae:35:9b:f2:a0:d5:5d:b8:14:97:1b:
                    3c:4c:0b:e3:27:26:fc:a6:3b:de:1d:e1:44:d0:fd:
                    7c:c1:e1:83:7c:35:2b:2f:02:88:42:11:53:5d:12:
                    b7:92:c3:0b:6e:f8:b7:78:1b:8e:8a:46:bb:b3:71:
                    ba:e7:f2:cb:69:b3:c3:c0:16:b1:ab:a3:67:e7:28:
                    2d:8f:6a:c2:4c:c6:3c:2e:35:ff:70:5e:0c:26:97:
                    5d:c7:20:13:56:39:5b:b2:ee:ff:80:f8:5d:3b:59:
                    f6:29:08:5a:94:5f:a2:a0:53:25:bf:5b:6d:6d:7b:
                    09:a2:25:db:44:79:81:3f:37:59:75:fc:ee:5a:48:
                    fc:1a:8d:9c:d0:4b:3f:c5:08:db:ee:83:90:b7:bb:
                    07:3f:c7:cf:e1:ec:46:3c:98:60:e9:17:b0:c4:4c:
                    23:3e:94:1b:ca:41:41:84:22:d8:42:3d:1c:c9:17:
                    ba:ec:47:dc:d1:c9:a0:d8:fd:ef:88:7d:7a:63:f7:
                    bf:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:9E:1D:A5:95:9D:53:51:AA:1E:12:AE:BB:57:8E:DB:75:D5:9A:A8
            X509v3 Authority Key Identifier:
                keyid:ED:1B:6A:DC:99:49:7F:D1:B3:0A:0A:48:2E:DC:40:2B:0C:4F:0C:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:59:ef:56:25:b5:4d:01:52:ed:c1:28:79:bc:a2:ce:a7:68:
         32:3a:60:69:d8:2b:c5:2d:4a:aa:8b:d9:a7:b1:1c:a1:2e:8e:
         03:6d:32:ae:7d:d2:a1:86:be:cf:12:ed:8e:e1:52:ec:d5:14:
         f5:66:a2:30:25:ae:7e:e5:14:31:84:91:2e:47:09:41:b0:ac:
         6b:02:14:7a:16:68:1b:f9:4c:44:3c:44:ad:c3:c5:cc:87:7b:
         31:b0:1d:17:a5:5b:9f:5c:c3:5d:5b:34:92:69:af:bb:4a:44:
         6a:39:b6:9a:11:c8:d6:02:89:88:21:79:3f:49:ea:a8:83:23:
         6f:29:58:a3:22:b1:0e:b4:64:22:dc:86:fd:4e:af:8e:7e:aa:
         f6:d9:4b:87:d4:83:6c:ea:99:ee:10:93:21:f6:ee:50:77:11:
         2e:e9:7b:ea:4c:36:5b:07:50:68:4a:fe:57:43:0e:ce:75:48:
         72:2b:9b:4a:42:da:3c:ee:61:ee:be:7c:03:6c:3d:58:9b:08:
         55:44:79:fc:85:f0:0f:6c:2a:01:9c:35:38:e2:a4:f5:86:e9:
         a0:90:a9:d4:5e:fc:4e:99:1d:05:29:51:03:1d:b0:c3:36:6a:
         b6:a4:8a:f8:7a:eb:13:54:d2:f1:06:f0:9d:fe:64:ed:41:bd:
         b8:53:d2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:08 2026 by rpki-client