Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
File:                     7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft (raw, json)
Hash identifier:          7+8RZp/k+hCMW/yhexnPlJkHGX1vnchZllY5XwKptng=
Subject key identifier:   AB:87:70:A0:3B:09:D1:86:26:4C:0B:E6:76:AA:60:B8:FF:9A:22:99
Authority key identifier: EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1
Certificate issuer:       /CN=ecc45fcadc4c933ac8ff4e0b434a5bfb567b65a1
Certificate serial:       01A13D817B113D85E6A8B0FE56A4F6FEFDEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
Manifest number:          12E7
Signing time:             Thu 15 Oct 2026 03:00:57 +0000
Manifest this update:     Thu 15 Oct 2026 03:00:57 +0000
Manifest next update:     Fri 16 Oct 2026 03:00:57 +0000
Files and hashes:         1: 7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl (hash: hil/Vn8piu+4i4rAMrQPnLbarzayfVjd97U2NNqvdwM=)
                          2: xkug34IJaWSwOfn5zGdas0MixZ4.roa (hash: IepgvoNLMpyof9xTWeZX3c1cPMLbQuZpVjyEywQxdwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 03:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:81:7b:11:3d:85:e6:a8:b0:fe:56:a4:f6:fe:fd:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecc45fcadc4c933ac8ff4e0b434a5bfb567b65a1
        Validity
            Not Before: Oct 15 03:00:57 2026 GMT
            Not After : Oct 16 03:00:57 2026 GMT
        Subject: CN=ab8770a03b09d186264c0be676aa60b8ff9a2299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ad:37:f6:fa:f8:a2:ec:d9:96:cf:8c:6f:ac:
                    4d:b5:e6:23:11:2f:bf:17:61:8e:3c:ac:45:02:83:
                    ec:8c:5e:c4:11:d9:59:af:4e:22:0a:73:b6:38:4f:
                    7a:96:d8:d0:8f:c1:2c:00:90:5d:54:fb:6c:cf:ef:
                    3e:dc:ac:6f:3d:47:2b:e6:98:0e:0e:20:42:49:14:
                    08:7c:69:15:d4:13:f0:d8:7b:5d:0a:6a:2d:92:cd:
                    79:31:64:ce:2e:b5:e5:cd:b8:74:63:79:bd:5e:2e:
                    80:2a:f7:ce:4c:6e:c3:26:49:89:dd:61:9d:f2:bb:
                    3d:24:a6:b9:e7:38:9f:0a:8d:5e:3c:33:40:f1:45:
                    3c:c1:d4:87:e0:5a:63:b1:ea:ac:8d:7c:ff:50:5d:
                    61:c5:04:a5:36:c7:da:1e:2b:e7:d9:cf:0d:50:45:
                    79:d8:06:54:eb:27:08:d5:16:b5:df:2f:79:a7:34:
                    08:52:5f:75:b7:e5:3a:59:43:9f:ba:b7:b3:28:eb:
                    e5:a6:fc:3c:58:30:6e:86:74:3d:8d:df:f0:6e:e9:
                    c1:2f:d6:df:ba:77:4e:de:98:60:b2:de:b1:e6:33:
                    ea:cc:96:54:57:6d:ce:89:fd:61:94:f6:84:b6:9f:
                    e5:a4:02:8a:52:00:8f:4a:3d:15:c6:f7:d0:a4:21:
                    00:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:87:70:A0:3B:09:D1:86:26:4C:0B:E6:76:AA:60:B8:FF:9A:22:99
            X509v3 Authority Key Identifier:
                keyid:EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:b0:49:72:01:d6:c4:a8:6a:29:18:ac:71:86:36:aa:1d:87:
         8e:bb:ec:b9:8f:9a:64:d3:0b:8f:91:9c:68:52:28:31:31:39:
         9e:68:6c:de:45:1b:aa:ba:54:11:fc:05:e6:03:8f:26:d0:d5:
         ad:0e:42:24:3b:97:9e:18:51:b0:da:66:ee:49:3b:2c:ae:e0:
         62:26:79:4b:4e:51:53:b7:59:c4:50:69:53:55:d3:46:e6:92:
         1b:cc:49:ec:c4:cd:35:d8:2b:00:2f:ed:78:6c:e9:2b:04:32:
         56:1e:45:e3:36:97:2e:6e:a8:b5:98:d6:d4:bc:eb:9c:18:d8:
         2d:75:af:d6:61:a5:f3:94:3e:6e:a8:8d:97:45:ac:2c:c1:11:
         56:9a:ff:30:e5:6c:dd:e6:12:b5:7c:eb:a7:8c:41:04:31:e2:
         bd:64:d8:e1:29:9c:b0:76:c7:3f:53:0d:a9:bd:16:63:fa:79:
         5f:d9:25:9f:71:36:57:6e:58:0e:06:87:f0:2e:6c:72:c0:d4:
         15:f0:62:96:fc:5f:72:32:ee:36:13:7b:c4:04:87:d2:15:42:
         fd:53:1d:31:8d:96:bd:0c:ed:68:61:c4:3d:fa:c6:45:d9:9e:
         62:a0:a8:1b:03:27:fd:19:11:13:39:ad:82:df:b4:a7:13:a4:
         0b:da:95:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:05:45 2026 by rpki-client