Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft
File:                     7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft (raw, json)
Hash identifier:          1TnEJcThe/F/1JQ3A0Ih2++6eUZwzYdQNNFvh7534Mo=
Subject key identifier:   7E:79:20:79:87:F3:4B:B3:65:1B:B7:1B:39:15:38:9F:53:82:32:FA
Authority key identifier: ED:2F:A6:86:D1:8C:80:20:AF:C6:AD:F5:5A:FD:BE:66:0D:BA:AC:15
Certificate issuer:       /CN=ed2fa686d18c8020afc6adf55afdbe660dbaac15
Certificate serial:       019D389BD185CB0A159C990E41003FF975E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7S-mhtGMgCCvxq31Wv2-Zg26rBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft
Manifest number:          1592
Signing time:             Sun 29 Mar 2026 08:00:28 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:28 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:28 +0000
Files and hashes:         1: 7S-mhtGMgCCvxq31Wv2-Zg26rBU.crl (hash: Hz+rfH/v2xTrofqq79cGgo6vmptjJzhAFMRlJFxYsOs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7S-mhtGMgCCvxq31Wv2-Zg26rBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9b:d1:85:cb:0a:15:9c:99:0e:41:00:3f:f9:75:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed2fa686d18c8020afc6adf55afdbe660dbaac15
        Validity
            Not Before: Mar 29 08:00:28 2026 GMT
            Not After : Mar 30 08:00:28 2026 GMT
        Subject: CN=7e79207987f34bb3651bb71b3915389f538232fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9b:70:3c:6d:67:28:5f:12:32:96:53:91:ef:
                    51:cd:2f:13:72:91:3f:7b:50:90:f6:bd:85:48:e1:
                    99:6a:7a:97:4e:0a:db:c2:b7:0c:35:d7:11:af:ed:
                    f1:66:76:13:bc:b9:bf:53:60:ac:74:70:da:e3:1a:
                    10:f6:9c:f6:c4:5a:d6:16:dd:5d:a9:d0:20:09:3f:
                    19:72:1b:dd:8d:04:e9:e3:55:53:5b:f2:c8:f3:3d:
                    36:2e:eb:7d:3f:3e:ad:39:84:4e:38:4b:33:f9:4b:
                    1b:a3:bf:ad:39:29:3c:4a:5b:22:5b:ca:f5:97:69:
                    45:78:b0:32:e3:bc:d9:70:4e:3d:d9:01:25:d0:76:
                    42:9b:24:99:75:a9:13:08:0d:45:ee:55:42:46:4b:
                    0c:1e:5f:ed:6d:6c:0f:17:9f:89:9f:5c:05:89:b7:
                    63:8f:b4:03:6c:0a:d3:4d:49:5d:a0:65:54:06:8e:
                    3f:5a:d7:1c:a6:e3:a3:1c:51:5e:3f:89:0c:43:97:
                    1e:3e:98:af:87:a5:b0:e6:84:9c:e9:55:51:b1:9e:
                    8b:b5:b8:48:71:41:15:d0:15:cd:da:87:b0:bf:33:
                    1b:3f:56:20:45:a0:06:00:06:86:83:58:31:16:83:
                    f9:6e:af:5a:ea:c6:18:67:15:f7:10:c7:9b:6a:0f:
                    c1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:79:20:79:87:F3:4B:B3:65:1B:B7:1B:39:15:38:9F:53:82:32:FA
            X509v3 Authority Key Identifier:
                keyid:ED:2F:A6:86:D1:8C:80:20:AF:C6:AD:F5:5A:FD:BE:66:0D:BA:AC:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7S-mhtGMgCCvxq31Wv2-Zg26rBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:85:59:f5:3d:dd:a9:44:8f:7d:51:64:76:0d:bb:3a:c6:54:
         c4:92:e0:05:c4:f3:1a:6d:70:28:1b:71:e0:a4:78:4f:f7:c6:
         15:ec:36:60:53:e4:d8:39:d1:ca:a1:d4:cd:1c:d5:e7:35:48:
         64:18:f8:46:65:55:b4:aa:2d:70:5b:b6:28:75:98:27:26:8f:
         f1:4a:59:92:06:4f:f9:0e:9e:23:2f:81:1e:e4:8e:01:97:ef:
         57:f6:46:e4:01:6e:7f:f2:32:af:12:d5:e1:ad:45:a8:e9:5f:
         77:d5:e6:2d:0a:2c:54:b2:88:9b:23:e4:43:d3:e0:2f:6c:33:
         ab:77:f4:a1:29:29:34:30:16:a1:6a:cb:54:b0:05:db:82:80:
         be:b5:cc:c2:af:a7:f9:0a:98:59:4a:f9:04:75:a6:29:d6:3a:
         8c:30:8d:7f:53:f5:76:f4:ec:6b:54:e8:34:98:71:13:3b:93:
         20:48:b6:62:d9:eb:c9:31:77:20:0d:10:5e:51:f6:57:ad:d1:
         a5:23:bf:99:f2:28:b0:dc:9a:5c:66:bd:9a:6a:f5:ac:d8:c1:
         d5:0b:a1:cb:2b:a5:ab:3f:75:ba:5d:74:b2:2b:10:3e:30:57:
         50:ce:50:d6:10:2d:43:65:d3:4b:fb:e6:e6:74:d7:9d:69:eb:
         56:7b:c3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:27 2026 by rpki-client