Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft
File:                     7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft (raw, json)
Hash identifier:          0kpQoWJrit11AabGv45efxSzbp0Rppiv8Mc/YoD3Fsc=
Subject key identifier:   E3:FE:C6:75:55:03:C7:26:0A:44:94:99:59:AA:3F:D3:1B:C4:BA:8D
Authority key identifier: EC:B2:F0:95:30:06:10:45:F4:2F:7B:D5:1F:1C:3B:62:59:EB:AE:1B
Certificate issuer:       /CN=ecb2f09530061045f42f7bd51f1c3b6259ebae1b
Certificate serial:       019F17C24256F0483A90309F6FE5D5B6B0BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft
Manifest number:          1985
Signing time:             Tue 30 Jun 2026 09:00:34 +0000
Manifest this update:     Tue 30 Jun 2026 09:00:34 +0000
Manifest next update:     Wed 01 Jul 2026 09:00:34 +0000
Files and hashes:         1: 7LLwlTAGEEX0L3vVHxw7Ylnrrhs.crl (hash: WEQs1EOn/1yJsewZ6ThJcRZa4tDNE+6I+wgRHn3RWOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:c2:42:56:f0:48:3a:90:30:9f:6f:e5:d5:b6:b0:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb2f09530061045f42f7bd51f1c3b6259ebae1b
        Validity
            Not Before: Jun 30 09:00:34 2026 GMT
            Not After : Jul  1 09:00:34 2026 GMT
        Subject: CN=e3fec6755503c7260a44949959aa3fd31bc4ba8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e1:3d:f7:d7:b8:7f:8c:74:f9:40:0c:36:03:
                    07:99:f5:c6:04:7a:c9:02:53:af:e7:c4:bf:c9:27:
                    f6:1f:25:94:67:0d:6c:50:05:1e:bc:72:5d:a7:3c:
                    0f:ca:d7:6a:d7:d4:61:36:45:67:c9:99:4d:ab:2d:
                    9f:ad:0d:88:92:0b:c9:48:d8:01:48:c3:25:23:54:
                    1a:b3:76:99:fc:44:5c:46:2b:fa:a7:e9:1d:88:95:
                    78:51:c1:20:fb:2b:f1:08:0f:79:e8:31:2b:94:08:
                    12:1c:36:28:c4:52:ba:11:fb:39:32:bc:c9:eb:37:
                    19:0c:f3:d0:5f:d5:83:83:7b:65:79:8d:33:da:2f:
                    69:95:62:01:f0:75:75:41:34:69:63:18:99:15:a1:
                    7d:c5:13:10:70:55:af:c3:62:00:03:e0:dc:24:07:
                    73:e9:93:f5:c8:41:2e:1d:1e:ad:f7:a9:b5:8d:f1:
                    cb:62:7a:6a:65:fc:b2:f8:80:9d:cd:7f:15:ee:2c:
                    fc:f9:1a:97:05:ad:83:4e:02:b5:dd:7c:3c:7e:84:
                    28:b0:1a:eb:11:f9:47:5e:57:ca:60:f7:22:1f:ed:
                    7b:f7:ca:8b:08:33:14:5e:20:a4:21:df:a1:d9:77:
                    5e:1e:85:44:87:1b:3f:6a:d9:45:51:67:1e:ac:d5:
                    b5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:FE:C6:75:55:03:C7:26:0A:44:94:99:59:AA:3F:D3:1B:C4:BA:8D
            X509v3 Authority Key Identifier:
                keyid:EC:B2:F0:95:30:06:10:45:F4:2F:7B:D5:1F:1C:3B:62:59:EB:AE:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:d6:2d:80:6e:a9:5c:20:61:af:81:ae:a3:92:a0:78:aa:29:
         d8:ae:3c:78:fc:a9:95:bf:d1:9f:1c:f9:28:ce:39:9a:f9:85:
         f2:7c:a8:74:f3:68:59:91:b1:8e:72:48:e2:d0:2f:15:88:10:
         6f:09:e2:6e:18:54:fa:e4:9e:b6:5c:35:d0:36:ca:26:f6:e9:
         a2:d1:f0:9d:70:67:42:29:22:22:59:2c:89:ba:a1:3a:3c:4c:
         e0:18:04:0e:ad:d7:a6:36:b7:30:0c:64:dd:ed:c1:50:8b:d8:
         69:3a:1b:13:18:38:bc:50:38:08:3b:4c:22:81:c8:be:30:d5:
         67:6b:6a:84:90:c3:ae:8b:b3:d2:ac:bb:e3:54:3a:aa:60:54:
         50:19:92:3c:99:b6:4e:77:8f:aa:5a:c5:9f:f2:16:6e:20:91:
         42:29:e9:ca:0b:58:e7:12:a3:7c:6e:42:76:a0:5a:61:1a:62:
         6a:9f:50:8f:5b:10:1f:dd:b9:f7:ab:71:bf:12:cb:57:8b:ef:
         ee:33:72:ed:c5:45:19:04:ff:75:d8:83:3f:62:df:3b:e0:b7:
         b5:4d:9d:ad:31:f7:8b:e7:ad:7a:bc:38:1c:c7:c4:88:9c:cd:
         40:c6:ab:ea:3b:f7:e6:6f:ff:7e:dc:7a:fa:eb:84:09:0f:d1:
         1d:c0:9e:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8XwkJW8Eg6kDCfb+XVtrC8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYjJmMDk1MzAwNjEwNDVmNDJmN2JkNTFmMWMzYjYyNTll
YmFlMWIwHhcNMjYwNjMwMDkwMDM0WhcNMjYwNzAxMDkwMDM0WjAzMTEwLwYDVQQD
EyhlM2ZlYzY3NTU1MDNjNzI2MGE0NDk0OTk1OWFhM2ZkMzFiYzRiYThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuE999e4f4x0+UAMNgMHmfXGBHrJ
AlOv58S/ySf2HyWUZw1sUAUevHJdpzwPytdq19RhNkVnyZlNqy2frQ2IkgvJSNgB
SMMlI1Qas3aZ/ERcRiv6p+kdiJV4UcEg+yvxCA956DErlAgSHDYoxFK6Efs5MrzJ
6zcZDPPQX9WDg3tleY0z2i9plWIB8HV1QTRpYxiZFaF9xRMQcFWvw2IAA+DcJAdz
6ZP1yEEuHR6t96m1jfHLYnpqZfyy+ICdzX8V7iz8+RqXBa2DTgK13Xw8foQosBrr
EflHXlfKYPciH+1798qLCDMUXiCkId+h2XdeHoVEhxs/atlFUWcerNW10wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOP+xnVVA8cmCkSUmVmqP9MbxLqNMB8GA1UdIwQY
MBaAFOyy8JUwBhBF9C971R8cO2JZ664bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0xMd2xUQUdFRVgwTDN2Vkh4dzdZbG5ycmhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83ZWQ3MDItODczOS00Y2QwLWIyYmUt
MWFiMDdhMjY5MDEwLzEvN0xMd2xUQUdFRVgwTDN2Vkh4dzdZbG5ycmhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC83ZWQ3MDItODczOS00Y2QwLWIyYmUtMWFiMDdhMjY5MDEw
LzEvN0xMd2xUQUdFRVgwTDN2Vkh4dzdZbG5ycmhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAetYtgG6p
XCBhr4Guo5KgeKop2K48ePyplb/Rnxz5KM45mvmF8nyodPNoWZGxjnJI4tAvFYgQ
bwnibhhU+uSetlw10DbKJvbpotHwnXBnQikiIlksibqhOjxM4BgEDq3Xpja3MAxk
3e3BUIvYaTobExg4vFA4CDtMIoHIvjDVZ2tqhJDDrouz0qy741Q6qmBUUBmSPJm2
TnePqlrFn/IWbiCRQinpygtY5xKjfG5CdqBaYRpiap9Qj1sQH92596txvxLLV4vv
7jNy7cVFGQT/ddiDP2LfO+C3tU2drTH3i+eterw4HMfEiJzNQMar6jv35m//ftx6
+uuECQ/RHcCe8Q==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:13 2026 by rpki-client