Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft
File:                     7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft (raw, json)
Hash identifier:          Pgx9YoLh5IHUzzKyk//RHjV8ujk05alpY1Arh9jgZaE=
Subject key identifier:   E0:A8:52:30:C1:9D:1B:04:8D:CD:53:A3:5F:B7:34:07:4D:22:E2:E7
Authority key identifier: EE:68:B6:64:CC:D5:0C:A7:67:D4:6F:FB:34:F5:3A:06:D1:20:B5:23
Certificate issuer:       /CN=ee68b664ccd50ca767d46ffb34f53a06d120b523
Certificate serial:       01A14082B641E4B088D789F601FE6E7B2CB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft
Manifest number:          0ECC
Signing time:             Thu 15 Oct 2026 17:01:10 +0000
Manifest this update:     Thu 15 Oct 2026 17:01:10 +0000
Manifest next update:     Fri 16 Oct 2026 17:01:10 +0000
Files and hashes:         1: 7mi2ZMzVDKdn1G_7NPU6BtEgtSM.crl (hash: J1XsG3PIDAdTtaWV8cw8sicu82NSEtTjqT+llwq8Q1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 16:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:82:b6:41:e4:b0:88:d7:89:f6:01:fe:6e:7b:2c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee68b664ccd50ca767d46ffb34f53a06d120b523
        Validity
            Not Before: Oct 15 17:01:10 2026 GMT
            Not After : Oct 16 17:01:10 2026 GMT
        Subject: CN=e0a85230c19d1b048dcd53a35fb734074d22e2e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3b:4a:8f:e8:55:ff:8d:e6:de:7a:c1:a2:ee:
                    3f:3e:3a:78:c0:ce:01:14:f3:4b:c5:69:df:80:0b:
                    78:7f:89:9b:d0:be:f4:f6:53:e2:2c:57:61:13:ef:
                    ef:c2:ba:d3:0c:82:fd:bb:23:37:ee:62:54:42:55:
                    b1:74:f4:99:ff:dd:2f:09:c4:10:db:35:99:6c:49:
                    f7:05:8d:e3:62:df:ef:8a:6a:bb:3a:98:a1:cc:a7:
                    67:17:c1:af:97:12:f3:cf:c9:0b:db:5b:d9:ac:dd:
                    df:70:3d:22:2c:03:b1:69:77:2d:6b:27:6b:dc:b6:
                    a7:e9:d2:14:5c:82:cd:c4:c9:be:47:c2:21:35:56:
                    11:34:a4:3b:eb:dc:7d:8d:a8:b7:2b:b6:ee:de:9f:
                    b1:8c:40:6a:7b:3f:a1:7c:90:90:35:90:d9:77:f2:
                    6d:da:be:58:ed:9d:8e:63:68:72:e1:eb:c2:e0:a8:
                    71:de:f5:9a:44:c9:16:85:3b:6b:99:d9:66:da:3d:
                    d6:16:07:b1:e8:8e:d8:b6:47:46:50:5f:3e:31:79:
                    cd:cf:b0:c2:01:17:39:59:d4:d9:06:23:bd:45:45:
                    95:03:1b:2a:e8:3e:89:ab:96:62:e7:a5:e6:5b:29:
                    c1:8c:32:c8:bf:2b:08:aa:10:6d:9d:94:62:f9:5c:
                    de:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A8:52:30:C1:9D:1B:04:8D:CD:53:A3:5F:B7:34:07:4D:22:E2:E7
            X509v3 Authority Key Identifier:
                keyid:EE:68:B6:64:CC:D5:0C:A7:67:D4:6F:FB:34:F5:3A:06:D1:20:B5:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:ae:28:91:a6:67:c2:77:b5:66:b8:c9:9f:bc:ef:49:a2:87:
         56:63:00:b9:5c:bd:b3:49:3b:ce:33:6c:6c:f4:b3:72:0b:1b:
         71:39:98:64:ef:c3:2e:46:11:43:7a:7e:d3:2a:37:5b:20:b9:
         24:2e:9e:55:7a:b1:cf:4d:bf:3d:e1:1a:bd:76:f2:d0:c4:93:
         43:52:eb:a6:b1:69:e0:ef:ee:e6:83:ba:25:9e:13:36:4d:08:
         f7:ea:27:91:9d:60:09:19:83:2e:88:93:1a:e5:02:3e:cf:10:
         74:55:b6:27:38:d0:52:2f:f1:18:07:08:2d:12:9a:b9:54:a5:
         38:37:48:65:f8:57:82:d2:3f:88:b8:46:b4:ca:dd:54:6a:ab:
         0f:5e:74:f9:a5:c3:23:22:f8:f1:d5:44:c3:c6:0e:66:e8:47:
         95:80:aa:37:68:ec:a3:02:9c:0a:3d:f6:7f:7b:ae:92:52:ed:
         4f:b3:7c:5e:1d:ae:11:39:d1:13:57:51:96:bf:c1:4c:19:ca:
         70:77:7a:13:9f:77:af:21:61:2c:ad:83:6d:4d:0f:0e:d0:3a:
         aa:00:fb:b1:c0:84:65:2c:88:de:45:e1:83:8e:38:66:ac:0b:
         d4:e8:d5:43:e4:7e:bd:30:81:fd:05:77:5a:f6:64:09:0c:92:
         a8:d6:83:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:36:36 2026 by rpki-client