Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
File:                     7wC6UdY7F3WDfocvvehOLdCHT2M.mft (raw, json)
Hash identifier:          KbgHShJfQYe6H2S69+INJkFd3n17hiLcnkhGzYy/mNA=
Subject key identifier:   26:67:49:C1:AD:CA:33:EF:09:EC:97:7E:24:F9:03:51:1E:4F:43:6F
Authority key identifier: EF:00:BA:51:D6:3B:17:75:83:7E:87:2F:BD:E8:4E:2D:D0:87:4F:63
Certificate issuer:       /CN=ef00ba51d63b1775837e872fbde84e2dd0874f63
Certificate serial:       01A0005CE2561F242F5C5B35F81AEE12DBAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
Manifest number:          16A7
Signing time:             Fri 14 Aug 2026 13:01:22 +0000
Manifest this update:     Fri 14 Aug 2026 13:01:22 +0000
Manifest next update:     Sat 15 Aug 2026 13:01:22 +0000
Files and hashes:         1: 7wC6UdY7F3WDfocvvehOLdCHT2M.crl (hash: yAFujAzaA5nJSKYx/MjoEk1u4QsP90doIN4/St1gjXE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5c:e2:56:1f:24:2f:5c:5b:35:f8:1a:ee:12:db:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef00ba51d63b1775837e872fbde84e2dd0874f63
        Validity
            Not Before: Aug 14 13:01:22 2026 GMT
            Not After : Aug 15 13:01:22 2026 GMT
        Subject: CN=266749c1adca33ef09ec977e24f903511e4f436f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7a:8c:b8:e7:4d:c6:46:ba:3a:4a:df:f4:b8:
                    0e:27:9f:ab:53:e8:ed:01:df:5d:22:2c:43:68:8d:
                    2d:f2:e2:75:fc:93:a5:3c:b5:d9:1c:db:c5:4c:7c:
                    3c:0d:09:87:8b:2a:8c:2d:fe:e5:32:45:b6:f0:46:
                    3d:e1:dc:c6:9b:10:1c:14:d9:e9:46:75:de:1e:2e:
                    b1:31:30:2f:61:b4:e8:00:00:aa:64:07:31:ea:fd:
                    20:07:58:60:1d:49:bd:df:f5:ba:15:81:9c:34:85:
                    33:50:68:77:87:0b:d1:37:6d:00:90:d0:88:84:c7:
                    b9:94:b9:6f:a6:8d:52:59:97:88:10:dc:42:b1:7b:
                    af:37:5b:89:06:38:9a:28:3c:08:10:e7:0b:12:f3:
                    06:46:2a:b7:43:5d:37:7a:c1:dd:af:64:b6:49:d6:
                    3a:ea:73:70:d7:af:23:7f:b9:58:4c:3d:a3:2a:b4:
                    f9:a2:c3:34:db:e7:47:69:4f:01:75:d3:53:9a:a4:
                    f7:f2:d7:80:e8:5b:25:c0:cc:31:f0:05:00:ac:dd:
                    1d:35:05:55:5f:2f:85:df:96:7a:43:6e:8b:5f:d4:
                    d1:d0:63:06:b9:06:39:95:58:ad:13:75:31:59:7d:
                    db:79:bc:f1:3b:da:c9:22:8d:69:e7:fe:94:6a:90:
                    91:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:67:49:C1:AD:CA:33:EF:09:EC:97:7E:24:F9:03:51:1E:4F:43:6F
            X509v3 Authority Key Identifier:
                keyid:EF:00:BA:51:D6:3B:17:75:83:7E:87:2F:BD:E8:4E:2D:D0:87:4F:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:3d:8e:7b:e0:b1:5f:e9:a4:84:d9:46:fc:12:5f:72:17:21:
         03:a2:49:bb:0b:ec:93:fd:c7:cc:9e:11:25:b1:12:cd:ac:39:
         3e:c5:08:3d:78:6c:94:6f:e4:8a:f1:8b:ff:a2:d5:66:6d:62:
         73:0d:66:50:a1:e7:e3:12:79:22:b1:f9:2b:b4:4b:c6:52:dc:
         cf:e0:9e:68:6b:a4:c7:ef:29:44:60:da:f4:3d:20:0d:27:c8:
         47:c1:cd:a3:26:7c:bd:38:c9:93:da:0a:04:da:7c:e6:99:73:
         ad:29:f1:96:55:e0:b5:06:84:d6:5b:a1:71:14:03:fb:6c:d1:
         ab:c5:5a:b6:a6:47:2a:f7:0a:d5:a5:df:6d:74:18:18:20:0d:
         41:fc:b0:e6:58:9b:02:8b:52:30:2e:21:83:ba:24:1a:a2:00:
         d4:b1:f0:b1:52:a0:da:9d:71:cc:20:dd:d2:96:d1:79:a7:b6:
         a7:85:93:59:b6:72:7d:c8:2a:e1:ab:f5:87:ee:c1:86:41:6d:
         ee:52:4a:9e:64:86:f6:df:b8:aa:f9:96:35:0c:c6:91:ed:1e:
         75:e7:91:18:55:39:2a:53:33:f4:02:76:68:b9:58:41:37:86:
         1c:8c:34:3d:e7:8e:35:c8:4c:a9:f9:f6:a6:50:b3:6b:f8:ea:
         bd:18:3e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:38 2026 by rpki-client