Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
File:                     7XlzzE58-_RHB0eBDEFuzH6YGIU.mft (raw, json)
Hash identifier:          rwnZ/aqxfEqrXS6rPXWIIEnKxvd+4GsZV36fjmMlL1w=
Subject key identifier:   0E:A8:B3:A6:2B:2F:C0:CA:EC:B1:67:E5:C6:41:A0:95:FB:28:5E:48
Authority key identifier: ED:79:73:CC:4E:7C:FB:F4:47:07:47:81:0C:41:6E:CC:7E:98:18:85
Certificate issuer:       /CN=ed7973cc4e7cfbf4470747810c416ecc7e981885
Certificate serial:       019D39AEB3D49A97DB70574F50F89953424D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
Manifest number:          1407
Signing time:             Sun 29 Mar 2026 13:00:43 +0000
Manifest this update:     Sun 29 Mar 2026 13:00:43 +0000
Manifest next update:     Mon 30 Mar 2026 13:00:43 +0000
Files and hashes:         1: 7XlzzE58-_RHB0eBDEFuzH6YGIU.crl (hash: TvUBrnyCO5Up7nU3gNUkMP00lJUdyKqeSSTSdshuuhc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:ae:b3:d4:9a:97:db:70:57:4f:50:f8:99:53:42:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed7973cc4e7cfbf4470747810c416ecc7e981885
        Validity
            Not Before: Mar 29 13:00:43 2026 GMT
            Not After : Mar 30 13:00:43 2026 GMT
        Subject: CN=0ea8b3a62b2fc0caecb167e5c641a095fb285e48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:19:86:3d:be:94:df:4f:83:ba:ec:06:ef:51:
                    ed:68:27:c9:c5:c3:2b:f0:e2:18:87:9c:3b:db:51:
                    5f:40:17:0c:35:ea:22:09:a5:88:49:2a:26:dd:a8:
                    89:90:fa:49:81:48:36:51:7c:f3:52:d5:69:67:9b:
                    80:12:47:47:5f:5c:8d:40:7d:c8:22:f4:1b:89:ed:
                    7e:c6:f3:ad:b8:cf:bb:07:51:1b:90:6b:50:9d:1b:
                    b3:fb:06:ac:82:92:47:a0:2f:ce:4c:33:3a:5c:63:
                    9b:a3:33:15:32:da:74:85:c5:66:a5:5a:6c:08:d2:
                    bd:5f:af:47:70:85:ff:93:99:06:8c:17:f3:c1:f6:
                    bf:bb:a8:a4:18:38:33:25:f9:fa:95:3c:b2:aa:bd:
                    b3:72:97:35:09:e2:97:2b:e1:ec:54:93:ae:03:ef:
                    1d:99:a8:7c:28:67:db:fc:e1:89:b2:48:5c:1a:e9:
                    ca:30:04:54:42:75:05:5f:1a:79:eb:85:ed:1c:c0:
                    6a:a7:17:8d:cd:50:ad:4c:9e:bd:0b:54:48:46:20:
                    6c:4d:f8:5b:86:b2:ef:34:c6:6c:88:4c:11:a4:a3:
                    f4:41:8d:72:77:bc:58:eb:0a:f7:58:57:4d:bb:94:
                    1f:35:a2:32:bf:b8:c6:7c:eb:19:46:6f:25:5c:a7:
                    17:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A8:B3:A6:2B:2F:C0:CA:EC:B1:67:E5:C6:41:A0:95:FB:28:5E:48
            X509v3 Authority Key Identifier:
                keyid:ED:79:73:CC:4E:7C:FB:F4:47:07:47:81:0C:41:6E:CC:7E:98:18:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:42:3c:41:87:f0:3d:39:9c:5c:f4:6b:a0:b0:87:08:88:f8:
         f1:ff:24:2b:11:58:19:b3:a8:79:30:2e:a3:92:f7:22:0c:4a:
         f6:69:0b:da:1f:d3:14:29:b6:14:ed:f9:7c:0e:11:01:2b:b6:
         03:aa:04:27:71:bd:36:de:e6:df:e9:a5:e0:d5:a4:38:75:aa:
         ef:7e:17:86:1e:19:ac:f0:09:6b:80:6a:48:a1:ad:3f:22:1f:
         32:41:ed:c0:bb:c5:91:91:03:77:86:10:7a:e8:9c:ee:3c:e2:
         d8:dd:d4:94:39:34:87:f0:2a:7c:61:1f:8e:21:42:ec:3c:c7:
         80:aa:a8:98:be:ce:b7:a7:fe:b1:87:4a:57:ba:12:7d:cf:7a:
         ff:6f:91:d6:49:a6:3e:d5:80:7d:a8:00:23:e8:0d:dd:2a:a7:
         f3:73:95:55:00:19:55:30:89:0a:2b:07:7e:73:30:45:db:94:
         96:17:42:ec:6a:30:69:e9:bf:11:e1:6f:ad:8b:7d:b1:2b:3b:
         6e:3e:0b:ca:78:ee:8b:37:37:e2:a3:d7:25:58:d7:6d:bf:b2:
         5e:e6:2e:be:72:15:55:08:b6:67:67:a3:a4:7f:1a:28:52:b9:
         e8:11:62:a6:d5:54:93:9d:2d:98:27:6a:85:31:d1:02:d5:9a:
         81:4c:1c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:05 2026 by rpki-client