Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
File:                     7XlzzE58-_RHB0eBDEFuzH6YGIU.mft (raw, json)
Hash identifier:          8A+GCYvTPaGcLUWIlW34gyj2yCx0UGbkB7emu8vXSgE=
Subject key identifier:   37:46:B6:93:2A:75:8D:F3:79:BC:40:12:7B:81:66:83:3D:34:DD:0C
Authority key identifier: ED:79:73:CC:4E:7C:FB:F4:47:07:47:81:0C:41:6E:CC:7E:98:18:85
Certificate issuer:       /CN=ed7973cc4e7cfbf4470747810c416ecc7e981885
Certificate serial:       019F189EADB8F5CA86D19998814E84990C88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
Manifest number:          14FF
Signing time:             Tue 30 Jun 2026 13:01:19 +0000
Manifest this update:     Tue 30 Jun 2026 13:01:19 +0000
Manifest next update:     Wed 01 Jul 2026 13:01:19 +0000
Files and hashes:         1: 7XlzzE58-_RHB0eBDEFuzH6YGIU.crl (hash: 0siZZHYmDWCgF2/T4jyPP8HAzsEuMVxIJS5Hzfhtw6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:ad:b8:f5:ca:86:d1:99:98:81:4e:84:99:0c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed7973cc4e7cfbf4470747810c416ecc7e981885
        Validity
            Not Before: Jun 30 13:01:19 2026 GMT
            Not After : Jul  1 13:01:19 2026 GMT
        Subject: CN=3746b6932a758df379bc40127b8166833d34dd0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6d:74:3d:a6:52:6b:c3:8e:00:46:be:5f:c2:
                    c8:bc:ba:68:ff:b5:86:2c:f9:a4:ca:36:2a:84:93:
                    75:15:41:c3:e1:26:ed:80:8f:0b:48:17:33:cf:81:
                    b9:12:ac:a4:30:9d:1a:4f:d4:cf:00:d3:b6:20:40:
                    5a:13:4f:72:ef:db:ff:51:ba:d4:31:a1:94:f6:23:
                    be:c4:21:44:93:ff:88:2c:de:4f:73:cf:a2:f0:99:
                    fc:55:1f:06:2a:de:5d:a3:24:14:a1:a6:37:ac:2c:
                    da:0b:fe:59:c8:4b:f0:16:b9:07:a5:1d:48:42:86:
                    e7:3a:8c:28:b6:e0:ea:6d:44:92:4a:27:d0:b7:e4:
                    71:3a:11:20:85:30:c5:ee:98:ae:9d:46:f7:8c:d0:
                    21:fc:c1:90:70:37:cd:46:8a:ba:fe:33:2a:0e:b3:
                    ac:df:be:d4:99:73:93:49:65:22:93:80:49:ea:fb:
                    3f:50:be:41:80:c3:3d:aa:7b:3f:2f:e9:3e:b6:5b:
                    64:15:ec:1f:19:42:d6:6f:88:70:50:b1:13:53:5c:
                    44:e0:4b:c7:e1:a7:10:88:77:50:29:bc:f1:67:c6:
                    80:28:b0:3e:a3:cc:fb:f8:90:40:2b:f7:dc:ca:05:
                    69:f1:18:8e:23:29:fa:dd:76:1d:d8:4b:0d:bb:06:
                    af:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:46:B6:93:2A:75:8D:F3:79:BC:40:12:7B:81:66:83:3D:34:DD:0C
            X509v3 Authority Key Identifier:
                keyid:ED:79:73:CC:4E:7C:FB:F4:47:07:47:81:0C:41:6E:CC:7E:98:18:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:d8:93:a9:10:d9:de:b8:b2:50:35:59:f1:1e:fc:f0:c9:10:
         aa:f4:20:ae:bd:82:bb:8b:6a:74:8b:dd:f9:ba:94:b5:36:a1:
         8a:b0:a6:db:9e:91:ed:e6:94:b5:09:3c:62:ed:75:41:4f:fd:
         18:ed:2e:97:26:73:54:f3:75:66:ec:49:eb:eb:90:de:b7:c8:
         bb:99:00:c4:96:5a:92:11:04:e8:74:c3:58:ee:50:c5:1f:f8:
         d1:41:85:e2:9c:e8:9a:07:60:e9:3d:53:5a:5e:98:f5:59:3d:
         cb:58:f6:97:06:89:1b:d4:8a:9a:3f:78:36:c6:db:bf:31:61:
         17:4d:cb:28:0e:83:29:f3:ba:47:43:e8:1d:44:68:a9:a4:77:
         e0:5e:2c:9e:0d:62:3b:34:ba:b4:0a:98:df:f5:0b:63:d4:1b:
         79:bd:57:91:9c:b3:3f:f7:a2:f3:5c:d1:7a:16:2f:d6:13:81:
         d7:12:bf:0e:d3:c1:7b:47:82:da:a2:6c:fa:79:c6:71:0f:04:
         60:6c:eb:f6:04:84:9d:e8:06:d0:5a:d0:be:b9:e3:51:61:1c:
         50:6e:1c:05:c7:f0:aa:42:c9:31:7e:02:12:65:77:8c:76:fa:
         f6:44:31:42:66:a2:17:4a:f5:14:0a:c6:79:8a:a2:ac:9f:b6:
         4c:f7:68:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Ynq249cqG0ZmYgU6EmQyIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNzk3M2NjNGU3Y2ZiZjQ0NzA3NDc4MTBjNDE2ZWNjN2U5
ODE4ODUwHhcNMjYwNjMwMTMwMTE5WhcNMjYwNzAxMTMwMTE5WjAzMTEwLwYDVQQD
EygzNzQ2YjY5MzJhNzU4ZGYzNzliYzQwMTI3YjgxNjY4MzNkMzRkZDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW10PaZSa8OOAEa+X8LIvLpo/7WG
LPmkyjYqhJN1FUHD4SbtgI8LSBczz4G5EqykMJ0aT9TPANO2IEBaE09y79v/UbrU
MaGU9iO+xCFEk/+ILN5Pc8+i8Jn8VR8GKt5doyQUoaY3rCzaC/5ZyEvwFrkHpR1I
QobnOowotuDqbUSSSifQt+RxOhEghTDF7piunUb3jNAh/MGQcDfNRoq6/jMqDrOs
377UmXOTSWUik4BJ6vs/UL5BgMM9qns/L+k+tltkFewfGULWb4hwULETU1xE4EvH
4acQiHdQKbzxZ8aAKLA+o8z7+JBAK/fcygVp8RiOIyn63XYd2EsNuwavSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdGtpMqdY3zebxAEnuBZoM9NN0MMB8GA1UdIwQY
MBaAFO15c8xOfPv0RwdHgQxBbsx+mBiFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1hsenpFNTgtX1JIQjBlQkRFRnV6SDZZR0lVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82ZTM3NDQtOWRkOS00MjNlLWFiOTkt
NzhmOTgyZGZjMzJmLzEvN1hsenpFNTgtX1JIQjBlQkRFRnV6SDZZR0lVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82ZTM3NDQtOWRkOS00MjNlLWFiOTktNzhmOTgyZGZjMzJm
LzEvN1hsenpFNTgtX1JIQjBlQkRFRnV6SDZZR0lVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi9iTqRDZ
3riyUDVZ8R788MkQqvQgrr2Cu4tqdIvd+bqUtTahirCm256R7eaUtQk8Yu11QU/9
GO0ulyZzVPN1ZuxJ6+uQ3rfIu5kAxJZakhEE6HTDWO5QxR/40UGF4pzomgdg6T1T
Wl6Y9Vk9y1j2lwaJG9SKmj94NsbbvzFhF03LKA6DKfO6R0PoHURoqaR34F4sng1i
OzS6tAqY3/ULY9Qbeb1XkZyzP/ei81zRehYv1hOB1xK/DtPBe0eC2qJs+nnGcQ8E
YGzr9gSEnegG0FrQvrnjUWEcUG4cBcfwqkLJMX4CEmV3jHb69kQxQmaiF0r1FArG
eYqirJ+2TPdoqQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:10 2026 by rpki-client