Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft
File:                     7nwowZyp0nBozrxpyBVBZ13BLN8.mft (raw, json)
Hash identifier:          BpK1iGtuwHJWJS3oGuG5HfjsvzqmOo/RDk925fmcCmY=
Subject key identifier:   59:13:5B:0B:6B:3D:93:8F:B1:17:A6:F2:27:F3:9F:81:49:76:03:8B
Authority key identifier: EE:7C:28:C1:9C:A9:D2:70:68:CE:BC:69:C8:15:41:67:5D:C1:2C:DF
Certificate issuer:       /CN=ee7c28c19ca9d27068cebc69c81541675dc12cdf
Certificate serial:       01A147606979E3920E2C5E6E208C0B8D0C07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7nwowZyp0nBozrxpyBVBZ13BLN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft
Manifest number:          1AA7
Signing time:             Sat 17 Oct 2026 01:01:03 +0000
Manifest this update:     Sat 17 Oct 2026 01:01:03 +0000
Manifest next update:     Sun 18 Oct 2026 01:01:03 +0000
Files and hashes:         1: 7nwowZyp0nBozrxpyBVBZ13BLN8.crl (hash: //+fR8ehidpt4//hqdlFZ/FKuwcCF8Zm4jJh9Q3MOsA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7nwowZyp0nBozrxpyBVBZ13BLN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 20:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:47:60:69:79:e3:92:0e:2c:5e:6e:20:8c:0b:8d:0c:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee7c28c19ca9d27068cebc69c81541675dc12cdf
        Validity
            Not Before: Oct 17 01:01:03 2026 GMT
            Not After : Oct 18 01:01:03 2026 GMT
        Subject: CN=59135b0b6b3d938fb117a6f227f39f814976038b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c2:d1:2d:18:f3:dd:a8:d1:86:0e:14:34:ef:
                    6d:b6:23:d1:ae:be:87:c0:13:b2:6b:fa:af:6e:bd:
                    6b:47:9c:1f:81:a7:19:a8:97:d4:ab:59:9b:e2:b5:
                    d5:b7:a2:77:24:b9:d3:a4:6e:9b:26:b0:a4:59:39:
                    6e:ab:be:8d:54:c2:62:34:6e:9f:90:71:42:3e:51:
                    31:e5:e8:e5:24:a6:41:8b:c9:54:e0:4f:87:a3:9f:
                    18:22:09:ff:3a:76:af:de:e5:50:fd:88:8f:35:9e:
                    b5:1f:7c:74:e9:da:14:31:0c:07:25:46:48:c6:6f:
                    c4:d9:5c:51:57:99:29:3e:eb:0c:33:68:41:f7:ab:
                    ba:6b:3e:dd:3a:48:57:0a:af:c1:b3:79:ca:93:99:
                    5a:75:fe:fe:17:3e:67:35:d7:56:a6:d0:54:d9:2a:
                    ce:e8:fd:67:af:03:f7:48:04:8a:dd:df:40:e8:3f:
                    5c:9e:32:c3:b1:80:8c:79:64:4f:c8:92:5b:bb:b7:
                    00:33:aa:d0:cd:85:bb:84:0b:68:66:38:cc:14:e5:
                    22:6d:94:89:57:f6:39:a4:c0:89:7a:1d:37:39:b5:
                    11:1f:cc:28:e7:b2:d8:65:46:d0:d8:2e:9d:7d:c1:
                    60:49:17:3a:1d:5b:95:dd:ee:d3:9d:91:59:d8:49:
                    20:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:13:5B:0B:6B:3D:93:8F:B1:17:A6:F2:27:F3:9F:81:49:76:03:8B
            X509v3 Authority Key Identifier:
                keyid:EE:7C:28:C1:9C:A9:D2:70:68:CE:BC:69:C8:15:41:67:5D:C1:2C:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nwowZyp0nBozrxpyBVBZ13BLN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:6a:fa:ca:ff:84:4b:f7:e3:ec:84:e1:80:33:d0:5e:09:80:
         0d:4d:3f:8b:9b:7e:6c:ed:8b:90:a5:57:d9:8f:d6:7d:b5:88:
         93:56:2e:15:2e:77:50:a7:23:74:cf:f4:e6:89:34:f2:3b:19:
         6d:10:f4:d6:51:58:55:4e:02:25:1d:13:9f:5e:66:d4:a4:1b:
         4f:17:ef:87:e8:3b:82:03:11:2a:b1:69:51:6c:65:2e:a4:51:
         44:2d:de:9d:d0:0b:14:4f:72:d6:54:6a:1e:68:7f:ff:19:8e:
         9d:df:82:cf:79:87:d5:3f:bb:d0:ee:38:50:d7:5d:97:5b:30:
         2c:16:76:3e:1f:12:91:23:be:44:a2:e0:89:5a:2f:9b:de:2d:
         bf:21:68:20:be:fc:28:16:6a:46:1a:be:c9:de:df:01:ed:09:
         c2:45:ef:7c:41:b4:3d:c7:21:14:26:e2:2d:34:59:57:4f:9e:
         7e:ba:8f:df:76:b2:54:4f:59:be:16:13:d6:8f:0f:04:39:92:
         04:8a:7c:a7:0e:b1:b0:e0:0f:7b:23:c7:77:55:71:f2:c9:c1:
         25:b0:15:4e:14:bc:a2:88:d1:33:bf:be:8b:06:0f:76:d2:e9:
         2b:fd:b5:74:57:4b:14:93:11:e3:1c:c5:62:29:65:8f:d9:10:
         78:50:b2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:58:46 2026 by rpki-client