Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/802442-db83-42f2-8bf5-75122892f2ad/1/7-61Dv7SnBcXEIVACvB8ZpD6OWo.mft
File:                     7-61Dv7SnBcXEIVACvB8ZpD6OWo.mft (raw, json)
Hash identifier:          YsO+4HbI4JJcf7XXWpeYIlfHHsdvtFKvnftX3/Q+5ig=
Subject key identifier:   34:A3:E6:F7:A7:78:33:CB:4E:27:B1:3D:8E:72:38:E6:78:BA:95:33
Authority key identifier: EF:EE:B5:0E:FE:D2:9C:17:17:10:85:40:0A:F0:7C:66:90:FA:39:6A
Certificate issuer:       /CN=efeeb50efed29c17171085400af07c6690fa396a
Certificate serial:       01A03B27733201EBE86A596EF4A8E103B0DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7-61Dv7SnBcXEIVACvB8ZpD6OWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/802442-db83-42f2-8bf5-75122892f2ad/1/7-61Dv7SnBcXEIVACvB8ZpD6OWo.mft
Manifest number:          011E
Signing time:             Tue 25 Aug 2026 23:00:36 +0000
Manifest this update:     Tue 25 Aug 2026 23:00:36 +0000
Manifest next update:     Wed 26 Aug 2026 23:00:36 +0000
Files and hashes:         1: 7-61Dv7SnBcXEIVACvB8ZpD6OWo.crl (hash: prswv/0P+a1JMDvKAdmJ+JaVd8ZRFMZDFwbVCH9STnQ=)
                          2: JS4OZw-dfoAGScXsIL4kb3KCX_4.roa (hash: CsnYx8saM2GDN99ZZzqzztzcHAktERUojOcFYdBknRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/802442-db83-42f2-8bf5-75122892f2ad/1/7-61Dv7SnBcXEIVACvB8ZpD6OWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/802442-db83-42f2-8bf5-75122892f2ad/1/7-61Dv7SnBcXEIVACvB8ZpD6OWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7-61Dv7SnBcXEIVACvB8ZpD6OWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Aug 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3b:27:73:32:01:eb:e8:6a:59:6e:f4:a8:e1:03:b0:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efeeb50efed29c17171085400af07c6690fa396a
        Validity
            Not Before: Aug 25 23:00:36 2026 GMT
            Not After : Aug 26 23:00:36 2026 GMT
        Subject: CN=34a3e6f7a77833cb4e27b13d8e7238e678ba9533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:07:05:cf:03:6b:d8:b4:74:45:90:f4:46:9f:
                    fa:9c:8e:4a:19:c2:bf:0b:3f:84:fe:b0:23:f0:96:
                    21:8e:4f:6e:d3:14:81:b0:a9:ba:72:2e:5c:fa:5e:
                    48:4f:da:a5:21:f4:c6:34:0d:be:95:0b:75:c3:92:
                    f1:71:8b:8e:34:97:04:2e:db:f5:30:fa:45:56:a9:
                    69:9e:9e:9f:6a:2e:39:9d:24:3c:92:2f:c0:a9:fb:
                    fc:69:bb:d9:93:cf:5e:6f:be:88:cb:ae:ab:06:2b:
                    7c:39:c4:84:89:d6:b0:8e:73:d0:ae:2b:a1:af:a0:
                    bc:c0:d7:54:c5:4d:d4:0c:ee:9f:a9:67:41:18:06:
                    38:a3:d5:e1:27:05:c2:7d:dd:51:64:fb:30:25:96:
                    32:b2:c3:4b:4e:ca:07:10:e9:62:69:38:de:ef:ed:
                    08:2b:15:06:58:67:fa:1d:b6:7a:69:e3:81:ef:f5:
                    33:bb:4a:c1:75:43:94:5c:43:40:d9:e8:2d:d4:81:
                    09:2f:d3:fa:be:6d:09:c6:f8:57:c6:f3:48:4b:c6:
                    b0:c1:6c:f3:6d:7d:e1:6a:46:01:f9:6e:2f:76:74:
                    5e:7e:37:f8:fc:7b:18:c1:6b:8a:77:85:33:b6:aa:
                    1e:0a:a8:89:74:c9:e8:92:04:0d:73:3e:2c:1a:9d:
                    11:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A3:E6:F7:A7:78:33:CB:4E:27:B1:3D:8E:72:38:E6:78:BA:95:33
            X509v3 Authority Key Identifier:
                keyid:EF:EE:B5:0E:FE:D2:9C:17:17:10:85:40:0A:F0:7C:66:90:FA:39:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-61Dv7SnBcXEIVACvB8ZpD6OWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802442-db83-42f2-8bf5-75122892f2ad/1/7-61Dv7SnBcXEIVACvB8ZpD6OWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802442-db83-42f2-8bf5-75122892f2ad/1/7-61Dv7SnBcXEIVACvB8ZpD6OWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:d9:32:af:fd:59:0e:86:22:11:4f:2f:52:64:86:12:b4:59:
         89:85:9c:50:f3:9b:12:8e:40:22:63:f2:e8:9e:25:49:4d:61:
         c7:22:71:cd:19:9d:71:06:c5:58:6e:7e:57:ee:b8:94:ca:1f:
         e0:c2:5a:af:19:ba:8e:86:26:7b:48:88:38:54:a4:f2:35:26:
         7d:e7:4d:a5:98:16:c1:37:01:2d:0f:cb:15:a8:9c:48:71:5b:
         2e:b9:79:be:c8:eb:a4:1c:eb:90:15:5f:8f:7b:d5:2c:c1:72:
         d8:bd:1b:e7:cd:26:02:63:bc:2e:47:f2:01:83:5c:63:d3:51:
         88:2e:d1:ce:8e:1f:ee:a6:15:9b:18:c6:16:80:af:a7:db:d3:
         0c:4b:e5:7f:3c:04:84:a0:ec:e7:67:31:af:a5:b6:f0:27:5d:
         d7:72:83:e4:a6:5a:8f:79:50:4c:9b:07:d2:78:c7:78:7c:84:
         3c:6f:d6:8f:3e:37:88:c3:27:95:a7:b0:f9:4b:f8:5e:86:86:
         72:c7:6b:8d:65:39:93:b7:c3:21:b5:20:f2:46:fb:39:5c:ba:
         e9:3a:d5:b4:c1:d3:8a:a7:55:69:55:d0:f0:7c:cf:46:b6:df:
         f5:2d:d2:57:53:5f:6d:21:47:f4:8e:c9:f6:15:48:fa:51:e2:
         62:9b:0e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 06:23:30 2026 by rpki-client