Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft
File:                     7uWTl_XWr-28jZFmr_67KAAJH5Q.mft (raw, json)
Hash identifier:          jcZ3hbGpQLkQ6pteM9ZHfCIr5HSV0vP8M0BqvmZnVQs=
Subject key identifier:   21:B7:67:DA:E5:83:AF:4B:B3:EE:BE:83:9B:A2:DF:5F:37:55:F1:34
Authority key identifier: EE:E5:93:97:F5:D6:AF:ED:BC:8D:91:66:AF:FE:BB:28:00:09:1F:94
Certificate issuer:       /CN=eee59397f5d6afedbc8d9166affebb2800091f94
Certificate serial:       01A0010175ED624C6447D17C9834CAE1C918
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7uWTl_XWr-28jZFmr_67KAAJH5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft
Manifest number:          142E
Signing time:             Fri 14 Aug 2026 16:01:07 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:07 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:07 +0000
Files and hashes:         1: 7uWTl_XWr-28jZFmr_67KAAJH5Q.crl (hash: WAV7k7MfJ6Wf11F5yQaZuQi48wNqsWw6FzQyuuz6zr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7uWTl_XWr-28jZFmr_67KAAJH5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:75:ed:62:4c:64:47:d1:7c:98:34:ca:e1:c9:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eee59397f5d6afedbc8d9166affebb2800091f94
        Validity
            Not Before: Aug 14 16:01:07 2026 GMT
            Not After : Aug 15 16:01:07 2026 GMT
        Subject: CN=21b767dae583af4bb3eebe839ba2df5f3755f134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ef:cc:03:4d:b2:93:1a:94:88:5b:94:09:0f:
                    0d:7c:06:62:1d:3a:f0:6b:f7:03:2c:cd:5a:67:57:
                    47:a1:f0:a0:b9:76:33:9f:5d:e1:e3:27:f4:28:c6:
                    1f:aa:2b:71:78:fe:10:2e:4a:45:ea:50:a7:25:e5:
                    91:65:56:b3:4d:2f:95:a0:7e:81:ae:57:1a:38:f8:
                    ce:07:95:59:a6:fa:49:b2:fa:10:bc:7f:d6:bc:22:
                    2e:85:dc:ba:29:a6:a5:8c:a4:f0:1f:d0:2f:d9:b5:
                    36:d9:12:cd:be:ab:e3:43:b3:02:31:80:eb:4b:7f:
                    7f:0d:b6:8e:73:0a:17:6f:52:2b:24:a9:a3:ba:bd:
                    99:9c:d0:4c:9a:92:e1:76:90:6a:1c:f8:09:25:6d:
                    64:56:71:14:2a:0e:1b:d3:ae:10:ab:07:15:17:f9:
                    68:63:46:2e:92:04:51:21:73:0a:68:63:fd:f3:c4:
                    1d:5b:0f:7f:f1:3e:6c:b8:90:85:a5:f0:32:0c:b5:
                    6d:3b:84:a9:f8:3f:ea:fa:57:45:ee:bd:ed:99:0c:
                    31:0b:2e:04:f2:0c:de:be:d9:cc:2c:c4:ac:3e:1d:
                    74:3b:c8:43:00:4d:7e:b2:05:4e:9e:07:16:8d:db:
                    2f:6a:68:41:62:70:94:5b:e5:02:0e:77:63:15:c1:
                    c5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B7:67:DA:E5:83:AF:4B:B3:EE:BE:83:9B:A2:DF:5F:37:55:F1:34
            X509v3 Authority Key Identifier:
                keyid:EE:E5:93:97:F5:D6:AF:ED:BC:8D:91:66:AF:FE:BB:28:00:09:1F:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uWTl_XWr-28jZFmr_67KAAJH5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:bd:59:cb:47:79:b3:c1:46:22:f7:5a:7b:44:7f:0b:39:20:
         12:dc:c5:6f:4b:e9:22:ff:b1:3f:95:dc:dc:ed:f0:4d:9e:8a:
         fc:42:71:e3:a5:dc:a0:8d:9b:91:1b:90:3e:ca:ea:86:54:c0:
         d3:9b:69:e7:8e:63:44:9d:36:6b:35:92:43:da:29:04:49:ab:
         f6:13:07:7d:20:4f:72:8a:7e:cb:26:c2:51:bb:91:4b:01:d1:
         4a:42:ee:53:9c:dc:42:a3:e5:1c:5d:eb:0c:13:0f:26:fc:f6:
         c3:73:19:dc:03:8b:8a:f1:c5:f7:9a:e5:0c:1e:57:e4:c7:03:
         04:20:67:4e:f8:76:db:ef:8d:ab:58:cc:64:7b:95:33:39:dc:
         10:b9:3e:49:01:35:b6:e2:a5:76:d7:41:b9:a2:ed:2a:06:9d:
         51:b1:f7:75:ec:c0:5d:a4:1d:74:dd:5c:43:43:7a:a0:04:94:
         1b:16:40:ed:ba:06:4e:5e:68:41:6a:f3:0f:c2:80:f9:71:d0:
         b2:54:49:64:29:28:64:66:36:25:43:eb:90:5a:42:ed:ae:1b:
         48:5c:0b:13:2e:7b:a3:58:74:d5:4f:25:5e:99:8d:25:31:54:
         e4:8a:b8:52:d5:0e:83:a3:dc:2a:84:a7:4a:4b:d6:b6:9b:0a:
         83:ed:c2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:27:59 2026 by rpki-client