Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
File:                     7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft (raw, json)
Hash identifier:          BFkutQ2/AOS+KsuLIt2UIf0pmsWaT5nXsm4I/G8ptEI=
Subject key identifier:   8A:6F:0E:62:B6:B4:A9:29:03:0F:A0:DB:F6:4D:24:41:35:81:3E:2E
Authority key identifier: EF:FC:8A:6F:3C:44:B8:ED:D1:77:FE:51:A5:99:91:58:B8:DC:F8:19
Certificate issuer:       /CN=effc8a6f3c44b8edd177fe51a5999158b8dcf819
Certificate serial:       019D38D2FB9C49EF2072E2E4EA41F3262D2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
Manifest number:          10E6
Signing time:             Sun 29 Mar 2026 09:00:44 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:44 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:44 +0000
Files and hashes:         1: 7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl (hash: P9RANCZFOhU7601ope64cRUXuHpLfDgEjMPamINFxXQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d2:fb:9c:49:ef:20:72:e2:e4:ea:41:f3:26:2d:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=effc8a6f3c44b8edd177fe51a5999158b8dcf819
        Validity
            Not Before: Mar 29 09:00:44 2026 GMT
            Not After : Mar 30 09:00:44 2026 GMT
        Subject: CN=8a6f0e62b6b4a929030fa0dbf64d244135813e2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9e:65:8e:77:e5:70:91:0f:31:f0:99:e2:06:
                    06:72:af:4a:59:5b:96:60:85:d7:6d:b4:06:e7:b0:
                    34:6f:fd:ea:73:ce:bd:91:d7:39:32:61:19:5c:d4:
                    94:e2:b0:ea:3e:e5:93:74:ca:7a:f7:71:1a:17:17:
                    bb:6c:56:69:fb:05:2d:91:b2:0b:29:d5:34:d2:ed:
                    81:90:8c:94:c1:dc:b5:91:8c:91:a2:0b:4b:33:8b:
                    ae:db:ad:67:96:f5:06:0c:96:ec:3e:cd:53:de:81:
                    ee:0d:63:5f:63:bb:86:25:3a:ba:af:e3:0e:19:4e:
                    e8:d7:34:63:cf:7b:d6:2a:ec:bc:6e:18:75:9a:d4:
                    06:af:84:5c:25:3d:6f:01:62:1d:25:8b:fb:af:8d:
                    bd:0c:55:6e:d3:f3:bb:9c:6a:00:25:93:a5:29:77:
                    de:24:47:f9:ec:6b:25:89:be:02:09:10:70:aa:28:
                    d0:c7:d9:da:1f:ff:41:29:0b:01:91:95:4d:22:c2:
                    e1:30:a6:a5:9e:77:63:b7:00:b8:94:20:10:11:37:
                    3e:4d:3c:5e:11:9d:40:f9:82:d6:62:5f:f4:2e:2d:
                    56:7a:40:82:6f:89:12:b0:35:bf:af:f5:3b:5d:ea:
                    38:4a:5d:8b:59:f4:18:81:a3:06:86:31:2c:a0:1d:
                    a8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6F:0E:62:B6:B4:A9:29:03:0F:A0:DB:F6:4D:24:41:35:81:3E:2E
            X509v3 Authority Key Identifier:
                keyid:EF:FC:8A:6F:3C:44:B8:ED:D1:77:FE:51:A5:99:91:58:B8:DC:F8:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:4c:8b:65:4a:72:f1:7b:72:7b:17:76:7a:d8:39:5d:c4:d4:
         44:1a:ba:59:16:0a:d4:76:5b:31:c2:0e:a3:80:7d:ab:16:44:
         ff:4a:6c:2d:20:38:7a:35:20:e4:d1:42:8c:e2:92:47:0e:11:
         75:1c:34:78:59:3d:81:93:b6:ab:21:57:d6:9e:a9:1b:73:29:
         10:0a:38:ec:8b:3c:2d:9e:cb:47:1e:4c:40:9f:40:43:9e:76:
         82:62:5d:fc:80:4f:66:ac:66:93:d9:94:bf:47:02:05:1a:fb:
         99:8a:a1:ab:cb:aa:bc:76:0c:1b:5d:1b:37:cc:b4:0d:ae:dc:
         01:aa:2d:7d:be:8a:b0:e4:09:e1:c9:1d:8a:ab:c7:fa:d4:97:
         64:6e:68:1f:82:6c:3a:b6:5d:11:6a:56:47:a7:a9:67:c5:65:
         af:22:cf:93:ce:f0:c7:de:87:bf:96:ee:35:ff:9e:a8:0b:f4:
         e6:c0:24:1b:33:f3:00:2f:c4:e7:cf:4c:2d:6b:c2:e7:7b:17:
         fa:c1:8c:bc:35:4d:c6:68:22:95:15:cb:fc:77:9e:7b:9e:a1:
         3d:2d:ff:e4:e5:3a:ac:13:8b:72:5c:36:5a:39:4d:93:62:98:
         e2:37:bc:41:eb:91:46:aa:87:11:a2:f1:76:f7:fd:94:3b:0d:
         4c:44:8a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:57 2026 by rpki-client