Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/15cb3e-87c2-486a-920c-ab3989d42d70/1/7CGvMvHB-zrn8hK8a3c-5b8g_hQ.mft
File:                     7CGvMvHB-zrn8hK8a3c-5b8g_hQ.mft (raw, json)
Hash identifier:          dU0ktzK52VNNERCr1Ik5JGWIgzfODG6CX3Fyci/mdzE=
Subject key identifier:   B6:35:21:9D:44:76:B3:5D:7D:E6:DC:CC:2A:9E:2A:72:56:A3:5C:40
Authority key identifier: EC:21:AF:32:F1:C1:FB:3A:E7:F2:12:BC:6B:77:3E:E5:BF:20:FE:14
Certificate issuer:       /CN=ec21af32f1c1fb3ae7f212bc6b773ee5bf20fe14
Certificate serial:       01A0412A3BC86C703192273B869024992B0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7CGvMvHB-zrn8hK8a3c-5b8g_hQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/15cb3e-87c2-486a-920c-ab3989d42d70/1/7CGvMvHB-zrn8hK8a3c-5b8g_hQ.mft
Manifest number:          73
Signing time:             Thu 27 Aug 2026 03:01:21 +0000
Manifest this update:     Thu 27 Aug 2026 03:01:21 +0000
Manifest next update:     Fri 28 Aug 2026 03:01:21 +0000
Files and hashes:         1: 7CGvMvHB-zrn8hK8a3c-5b8g_hQ.crl (hash: 6xtfz/p1hpA72sc+nRQ5gIOySG28PlJ4meU0Rh0jQ4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/15cb3e-87c2-486a-920c-ab3989d42d70/1/7CGvMvHB-zrn8hK8a3c-5b8g_hQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/15cb3e-87c2-486a-920c-ab3989d42d70/1/7CGvMvHB-zrn8hK8a3c-5b8g_hQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7CGvMvHB-zrn8hK8a3c-5b8g_hQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:41:2a:3b:c8:6c:70:31:92:27:3b:86:90:24:99:2b:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec21af32f1c1fb3ae7f212bc6b773ee5bf20fe14
        Validity
            Not Before: Aug 27 03:01:21 2026 GMT
            Not After : Aug 28 03:01:21 2026 GMT
        Subject: CN=b635219d4476b35d7de6dccc2a9e2a7256a35c40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b6:31:39:d3:bb:37:83:65:f0:39:a0:9a:eb:
                    35:93:82:57:80:e9:31:94:86:8a:48:4a:42:c7:ad:
                    82:05:c2:4a:0f:53:74:a1:52:77:1a:37:30:81:a0:
                    f2:e0:a3:b0:14:81:d0:b4:4e:ac:92:9b:02:5c:b4:
                    79:25:13:55:98:98:7f:4a:b4:44:c8:6c:74:b2:0f:
                    b9:2a:1e:f5:c2:1c:68:f9:07:85:f5:3c:52:bd:25:
                    5f:8c:c6:d0:00:b0:eb:6c:e6:14:e5:cb:85:11:d7:
                    a8:7c:3f:ee:4a:4f:43:58:73:14:b3:01:69:bd:b5:
                    94:19:15:cc:e8:70:34:fc:bb:13:9f:c9:dc:63:9d:
                    ec:3a:ed:e4:a0:fa:ac:c3:c6:fb:a1:7e:aa:5d:ff:
                    63:8d:04:75:fa:a8:f3:d1:96:a8:63:d0:76:d0:36:
                    e7:94:43:18:88:c2:9f:34:8d:70:d2:86:f6:d4:57:
                    0e:85:60:2f:16:af:bc:bb:f2:d2:be:7f:e9:e7:a6:
                    af:bd:13:5f:c4:4e:f5:44:87:3a:93:23:71:08:95:
                    9d:60:79:28:31:87:56:65:1c:37:17:f0:01:7a:78:
                    1f:3a:ae:d5:a0:78:9c:e9:fb:6c:a2:91:5a:e7:e5:
                    d6:6b:dd:dc:cb:e1:9a:5f:a6:49:48:98:86:49:40:
                    9a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:35:21:9D:44:76:B3:5D:7D:E6:DC:CC:2A:9E:2A:72:56:A3:5C:40
            X509v3 Authority Key Identifier:
                keyid:EC:21:AF:32:F1:C1:FB:3A:E7:F2:12:BC:6B:77:3E:E5:BF:20:FE:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7CGvMvHB-zrn8hK8a3c-5b8g_hQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15cb3e-87c2-486a-920c-ab3989d42d70/1/7CGvMvHB-zrn8hK8a3c-5b8g_hQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15cb3e-87c2-486a-920c-ab3989d42d70/1/7CGvMvHB-zrn8hK8a3c-5b8g_hQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:e4:86:6c:24:ad:57:db:1f:09:65:55:fc:91:ae:7f:b4:69:
         67:43:33:21:1d:51:2d:6d:db:33:d8:52:39:fe:65:ab:f0:68:
         f3:5e:42:6d:19:6f:da:91:c3:2d:e0:f9:90:14:56:c6:a6:31:
         e8:a0:de:21:6c:8d:a1:d9:30:65:cc:fa:d9:e0:8f:0f:44:9a:
         e2:57:42:3f:a5:28:0b:15:90:d8:bb:76:4a:4a:92:ea:f4:46:
         dd:49:d9:45:da:98:8b:4d:a3:83:3c:27:6b:3a:0a:5d:3c:b9:
         85:df:c0:f4:ea:ec:1d:1a:f9:94:3b:c1:7c:d1:2a:53:a2:6b:
         05:da:b4:dd:60:e9:85:67:81:16:af:7c:d7:57:24:7f:1e:d3:
         61:ba:cf:24:30:5b:96:fa:ac:9d:5e:a4:b5:8c:7f:f7:7c:f7:
         6f:bf:3c:cf:7c:15:39:47:0f:4a:96:69:48:cf:c8:bf:69:da:
         6e:98:76:c5:c2:0b:20:1a:89:0c:a1:77:1a:a8:c5:f8:f9:32:
         00:8f:f4:3e:5e:6a:16:12:c8:60:07:6c:76:c8:6a:42:6e:a8:
         52:27:a8:eb:c4:f5:ae:85:13:17:83:53:85:3c:7b:08:11:2f:
         3b:30:91:23:93:7f:08:ed:6f:78:6c:0a:77:42:d4:f4:25:2a:
         6d:ad:0e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:47:31 2026 by rpki-client