Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
File:                     7crL2itLMjHQi1HxbxsqfAgjetE.mft (raw, json)
Hash identifier:          pFRWz6dBfkDPjgXCs7xjPEl+U4AW03ZgcicnU5yJWgU=
Subject key identifier:   A0:CF:CC:B2:23:12:41:E1:4C:04:88:91:BA:88:92:B4:AF:47:C8:DD
Authority key identifier: ED:CA:CB:DA:2B:4B:32:31:D0:8B:51:F1:6F:1B:2A:7C:08:23:7A:D1
Certificate issuer:       /CN=edcacbda2b4b3231d08b51f16f1b2a7c08237ad1
Certificate serial:       01A13E265BAAF871867B74CCCD7D31F7777B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
Manifest number:          0710
Signing time:             Thu 15 Oct 2026 06:01:03 +0000
Manifest this update:     Thu 15 Oct 2026 06:01:03 +0000
Manifest next update:     Fri 16 Oct 2026 06:01:03 +0000
Files and hashes:         1: 7crL2itLMjHQi1HxbxsqfAgjetE.crl (hash: KfhiEH/d8n9x9IGsfP3Ofyc8bI2jdF2Jk7LW0kAM1og=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 06:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:26:5b:aa:f8:71:86:7b:74:cc:cd:7d:31:f7:77:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edcacbda2b4b3231d08b51f16f1b2a7c08237ad1
        Validity
            Not Before: Oct 15 06:01:03 2026 GMT
            Not After : Oct 16 06:01:03 2026 GMT
        Subject: CN=a0cfccb2231241e14c048891ba8892b4af47c8dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c4:96:1b:28:e4:0b:e2:bc:c2:41:89:5d:b0:
                    b9:65:08:67:c1:64:91:13:92:99:d5:5a:52:33:d0:
                    ec:a8:4e:79:ad:b1:d8:05:c4:33:73:80:5e:04:0f:
                    3b:d9:f4:75:ca:df:e3:f3:0a:27:0d:de:52:89:89:
                    ae:3f:6d:c2:02:29:5e:cb:b4:db:70:0d:72:3f:4c:
                    c9:6b:02:b5:dd:7a:79:2d:07:ca:48:83:13:2d:10:
                    b4:76:84:3a:94:dc:62:da:83:ae:ad:5e:db:1f:04:
                    72:47:c2:40:8d:df:de:21:39:fe:8a:a4:cc:7f:e4:
                    7f:9f:e6:10:70:8b:f2:37:00:11:fc:9a:65:1e:37:
                    8c:6b:dc:84:a6:15:0c:ab:16:32:0d:b6:1d:c7:44:
                    71:a5:95:6e:7a:96:de:3e:d3:dc:77:2d:1d:1b:5b:
                    e4:c7:52:83:ed:c8:74:e3:b9:e6:3c:d3:04:e7:dc:
                    b0:88:6e:0b:76:ad:a1:8d:82:d7:98:bb:5c:8f:a6:
                    eb:4f:af:99:d2:a2:51:5d:4c:2b:2a:c9:fa:26:84:
                    b4:48:db:e2:23:9c:72:eb:89:fc:1d:8a:ca:95:fc:
                    80:a6:9f:aa:f9:7f:35:9a:4a:b5:16:6d:8a:d4:5e:
                    f4:cf:6b:f1:f4:3c:a6:3b:80:f0:c5:c9:41:ec:13:
                    54:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:CF:CC:B2:23:12:41:E1:4C:04:88:91:BA:88:92:B4:AF:47:C8:DD
            X509v3 Authority Key Identifier:
                keyid:ED:CA:CB:DA:2B:4B:32:31:D0:8B:51:F1:6F:1B:2A:7C:08:23:7A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:c7:98:a5:60:96:54:fc:3d:72:6d:6e:3f:8c:25:28:76:8c:
         a8:cd:77:6e:f0:ff:19:e1:7d:ee:7c:22:7f:b4:c8:95:b1:03:
         3d:24:3f:1d:b7:64:48:94:83:46:cf:ab:a8:39:4f:4a:95:06:
         57:24:bc:0f:5e:a5:ad:84:78:9a:5f:49:62:12:11:89:1f:7d:
         25:f0:f2:0c:04:64:94:31:e8:76:72:b7:70:91:f6:15:ea:da:
         62:bb:75:15:28:d8:6a:4d:2c:76:7e:c3:f0:ba:59:7d:11:23:
         16:6f:11:12:47:08:a6:97:15:d5:9b:c7:c5:df:3a:cd:cf:47:
         ed:0a:86:7a:01:f5:33:ec:7b:5f:e2:28:c0:94:9c:f9:87:fd:
         ed:ed:8f:c4:96:05:87:00:eb:af:cd:61:88:89:8c:e6:52:ac:
         9b:19:6d:fd:74:09:86:56:f4:0b:10:38:34:de:07:47:6a:e0:
         5f:bf:3a:ff:96:92:80:c6:83:a4:70:e6:d3:d2:30:48:79:8e:
         0f:6d:6f:84:6d:cb:61:2a:d3:8a:eb:88:84:f9:72:d9:ec:b5:
         0c:47:75:fc:09:85:8f:bd:14:3b:70:df:0c:9c:87:42:cc:30:
         7e:1b:78:c1:16:db:b5:bd:d5:2e:7f:76:a0:76:4e:f2:a4:2b:
         bf:94:34:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:35:00 2026 by rpki-client