Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
File:                     7crL2itLMjHQi1HxbxsqfAgjetE.mft (raw, json)
Hash identifier:          QGpSRqvmxZJ+a3ahFmtDo8KWTWHOGk+5Sl6swuwLERg=
Subject key identifier:   79:24:FF:84:67:0C:0C:71:FA:9A:AD:D7:19:0B:99:BE:8F:DF:7B:4E
Authority key identifier: ED:CA:CB:DA:2B:4B:32:31:D0:8B:51:F1:6F:1B:2A:7C:08:23:7A:D1
Certificate issuer:       /CN=edcacbda2b4b3231d08b51f16f1b2a7c08237ad1
Certificate serial:       019F17C2C4F6A65E8208F4F7ED12BF68F1D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
Manifest number:          05F3
Signing time:             Tue 30 Jun 2026 09:01:08 +0000
Manifest this update:     Tue 30 Jun 2026 09:01:08 +0000
Manifest next update:     Wed 01 Jul 2026 09:01:08 +0000
Files and hashes:         1: 7crL2itLMjHQi1HxbxsqfAgjetE.crl (hash: ZcKRnP1ZEEY/6XUIOXOMh8nGw77BpRA/+4MiUXREs3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 09:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:c2:c4:f6:a6:5e:82:08:f4:f7:ed:12:bf:68:f1:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edcacbda2b4b3231d08b51f16f1b2a7c08237ad1
        Validity
            Not Before: Jun 30 09:01:08 2026 GMT
            Not After : Jul  1 09:01:08 2026 GMT
        Subject: CN=7924ff84670c0c71fa9aadd7190b99be8fdf7b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:27:da:50:a4:75:b0:80:01:9a:df:17:9a:c3:
                    26:57:09:56:05:74:dc:35:53:f0:5a:3b:73:c6:6f:
                    3b:6a:a6:d2:86:d2:ab:e0:ed:c1:c9:8c:c5:08:2e:
                    ee:f0:f7:a5:92:31:e5:cf:4b:45:56:eb:d3:92:6c:
                    ac:a0:06:95:09:25:7c:48:d7:8d:46:5b:d8:b7:da:
                    3c:b3:17:22:a5:c8:50:6f:f4:75:92:0b:3d:b1:1d:
                    9d:e0:0b:d8:29:4b:48:61:24:9f:01:64:56:7b:a0:
                    e9:58:2d:c1:61:99:85:c9:56:24:51:c1:d4:88:9a:
                    9d:c0:03:7c:4d:63:4a:80:35:4f:ae:b4:fb:1a:aa:
                    17:0d:b3:04:55:43:27:e1:f3:60:d4:e1:6c:37:4e:
                    5c:9c:4a:b2:4c:6e:77:3d:af:fc:c3:9a:33:97:2d:
                    01:e0:ef:3c:ce:78:9b:91:b6:ec:3c:b7:2e:a1:16:
                    e6:db:7a:6d:a7:f4:1a:ea:09:ad:1d:c2:e5:21:cb:
                    fc:3b:5c:01:e6:37:98:b1:55:ff:6a:a4:b1:26:60:
                    d1:9d:cf:ed:2b:6a:1b:78:8f:56:a9:71:db:2d:9f:
                    c6:ce:80:d2:63:f4:39:65:4c:9a:bf:cd:20:61:43:
                    45:5d:e3:09:74:d9:2d:bc:1f:04:a4:88:9d:ea:f9:
                    af:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:24:FF:84:67:0C:0C:71:FA:9A:AD:D7:19:0B:99:BE:8F:DF:7B:4E
            X509v3 Authority Key Identifier:
                keyid:ED:CA:CB:DA:2B:4B:32:31:D0:8B:51:F1:6F:1B:2A:7C:08:23:7A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:32:6e:26:f1:9d:2c:7c:24:89:27:95:44:bc:a7:41:13:2c:
         a2:46:8d:3b:0b:4b:ab:92:17:2d:ce:27:88:2a:59:bc:6b:e2:
         12:84:64:64:bc:84:a8:60:87:56:ad:7c:57:84:3e:28:eb:a0:
         c7:9a:04:37:22:ca:30:c5:ac:47:ec:1f:3d:c8:41:84:54:27:
         e6:3b:0e:48:4d:ef:8f:e5:86:4e:20:cf:8f:a8:26:34:1f:81:
         79:f9:32:fb:7b:19:c2:59:19:01:7a:7a:3c:e5:88:ab:f2:95:
         50:4e:6c:94:96:55:11:b8:64:74:9b:63:b3:9e:f6:64:ed:47:
         2c:10:40:ac:37:8d:45:4c:e5:f5:ef:bf:c7:c2:c1:1b:97:10:
         27:be:d4:fc:87:29:11:cb:c9:f1:80:59:31:a5:e2:1c:44:b4:
         af:4b:ce:72:9c:aa:dd:c9:81:7b:56:ca:7e:a1:b3:6f:c3:d4:
         31:d2:19:17:21:23:a2:38:72:fd:fe:23:8a:22:84:59:49:fa:
         73:4d:60:d8:81:1d:bc:d2:4d:0c:36:bf:26:74:3c:eb:1e:6e:
         a6:22:ca:31:2b:d4:cf:8a:7b:a1:8e:af:80:b9:29:d3:3b:f3:
         88:74:f6:05:08:3f:d9:d7:92:70:d1:82:6b:0b:7b:78:9c:45:
         38:90:f0:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8XwsT2pl6CCPT37RK/aPHQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkY2FjYmRhMmI0YjMyMzFkMDhiNTFmMTZmMWIyYTdjMDgy
MzdhZDEwHhcNMjYwNjMwMDkwMTA4WhcNMjYwNzAxMDkwMTA4WjAzMTEwLwYDVQQD
Eyg3OTI0ZmY4NDY3MGMwYzcxZmE5YWFkZDcxOTBiOTliZThmZGY3YjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCfaUKR1sIABmt8XmsMmVwlWBXTc
NVPwWjtzxm87aqbShtKr4O3ByYzFCC7u8PelkjHlz0tFVuvTkmysoAaVCSV8SNeN
RlvYt9o8sxcipchQb/R1kgs9sR2d4AvYKUtIYSSfAWRWe6DpWC3BYZmFyVYkUcHU
iJqdwAN8TWNKgDVPrrT7GqoXDbMEVUMn4fNg1OFsN05cnEqyTG53Pa/8w5ozly0B
4O88znibkbbsPLcuoRbm23ptp/Qa6gmtHcLlIcv8O1wB5jeYsVX/aqSxJmDRnc/t
K2obeI9WqXHbLZ/GzoDSY/Q5ZUyav80gYUNFXeMJdNktvB8EpIid6vmv6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkk/4RnDAxx+pqt1xkLmb6P33tOMB8GA1UdIwQY
MBaAFO3Ky9orSzIx0ItR8W8bKnwII3rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2NyTDJpdExNakhRaTFIeGJ4c3FmQWdqZXRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9hM2ViZjktNGYyZC00YWMxLWI5MjIt
MWJkYWExYTY5ODE1LzEvN2NyTDJpdExNakhRaTFIeGJ4c3FmQWdqZXRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9hM2ViZjktNGYyZC00YWMxLWI5MjItMWJkYWExYTY5ODE1
LzEvN2NyTDJpdExNakhRaTFIeGJ4c3FmQWdqZXRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTJuJvGd
LHwkiSeVRLynQRMsokaNOwtLq5IXLc4niCpZvGviEoRkZLyEqGCHVq18V4Q+KOug
x5oENyLKMMWsR+wfPchBhFQn5jsOSE3vj+WGTiDPj6gmNB+Befky+3sZwlkZAXp6
POWIq/KVUE5slJZVEbhkdJtjs572ZO1HLBBArDeNRUzl9e+/x8LBG5cQJ77U/Icp
EcvJ8YBZMaXiHES0r0vOcpyq3cmBe1bKfqGzb8PUMdIZFyEjojhy/f4jiiKEWUn6
c01g2IEdvNJNDDa/JnQ86x5upiLKMSvUz4p7oY6vgLkp0zvziHT2BQg/2deScNGC
awt7eJxFOJDw2w==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:47 2026 by rpki-client