Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft
File:                     7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft (raw, json)
Hash identifier:          BtaPRA7mrTg5faN9hD20KARTnZxLhebVHiIo21QBbEg=
Subject key identifier:   A2:95:93:2D:FC:4E:B1:20:5F:61:42:0A:52:A5:5A:80:97:31:BD:34
Authority key identifier: ED:6F:9C:79:06:94:0E:3D:44:37:C6:BD:CD:E1:64:D0:65:A8:0E:A5
Certificate issuer:       /CN=ed6f9c7906940e3d4437c6bdcde164d065a80ea5
Certificate serial:       019E307250FA48E84C201BB1CD521FCA67AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W-ceQaUDj1EN8a9zeFk0GWoDqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft
Manifest number:          08B9
Signing time:             Sat 16 May 2026 11:00:58 +0000
Manifest this update:     Sat 16 May 2026 11:00:58 +0000
Manifest next update:     Sun 17 May 2026 11:00:58 +0000
Files and hashes:         1: 7W-ceQaUDj1EN8a9zeFk0GWoDqU.crl (hash: 9jclSVyXWVw6Ae3YqNU1P5MbMt85TwQpszn+9w0VPYY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7W-ceQaUDj1EN8a9zeFk0GWoDqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:50:fa:48:e8:4c:20:1b:b1:cd:52:1f:ca:67:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6f9c7906940e3d4437c6bdcde164d065a80ea5
        Validity
            Not Before: May 16 11:00:58 2026 GMT
            Not After : May 17 11:00:58 2026 GMT
        Subject: CN=a295932dfc4eb1205f61420a52a55a809731bd34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:43:75:39:99:84:f2:f8:e8:3a:bd:36:98:e2:
                    ac:9c:6e:71:2d:12:17:68:ae:53:07:f4:ea:ae:b2:
                    cf:55:08:32:95:91:ae:8c:22:6c:14:6f:7d:93:18:
                    0c:e7:4a:f3:86:3b:ba:a9:2e:11:5e:2c:f8:ff:31:
                    64:4d:99:aa:f8:05:bd:f0:49:ae:cd:4f:b0:9f:86:
                    40:69:19:41:10:68:ec:d0:6c:7e:e4:5b:e0:50:b5:
                    ff:b3:87:7c:0a:0c:f5:c8:2a:9d:cf:80:52:ba:b4:
                    60:85:7f:e8:42:8c:c7:7a:92:35:cf:07:96:61:4f:
                    91:95:2f:0a:f3:15:14:37:9b:be:b6:4b:63:5a:5e:
                    86:eb:47:89:0f:00:f4:24:88:a5:3a:57:ec:92:d4:
                    6f:4e:f4:b9:6e:9d:42:36:6e:0a:1f:16:f6:b9:71:
                    ff:3e:1e:4f:b1:bc:3f:0f:01:1c:02:c6:b6:81:ac:
                    a9:1b:41:fd:0b:7e:60:56:d8:de:60:5b:15:3e:1e:
                    0b:94:9a:63:4e:ef:76:71:c6:8d:51:7b:0d:a1:3f:
                    a9:4f:42:f8:46:df:d9:f6:c5:03:7a:10:9b:cd:99:
                    52:1c:58:dd:93:de:82:0d:52:11:4e:ca:af:e1:c3:
                    2b:3c:98:61:6e:e6:f2:f1:07:55:88:b3:eb:78:15:
                    e0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:95:93:2D:FC:4E:B1:20:5F:61:42:0A:52:A5:5A:80:97:31:BD:34
            X509v3 Authority Key Identifier:
                keyid:ED:6F:9C:79:06:94:0E:3D:44:37:C6:BD:CD:E1:64:D0:65:A8:0E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W-ceQaUDj1EN8a9zeFk0GWoDqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:19:d6:bb:9c:a2:56:90:3d:ee:3a:3e:7a:11:86:5f:91:15:
         a0:df:a9:00:e2:74:ce:dd:be:37:53:3d:b7:2b:2f:56:b8:31:
         87:54:eb:9d:40:65:0d:0b:2d:a8:ea:72:48:f1:85:60:71:2d:
         2b:4b:89:9f:02:9c:39:f6:2f:b2:20:ba:72:e6:98:59:65:7f:
         1b:92:58:6e:bd:9e:b8:53:10:c6:3a:22:22:a8:30:23:b1:f2:
         8f:b1:f2:34:93:ff:ab:ac:d9:e4:ca:33:c2:6a:7b:a4:29:cd:
         2c:2f:61:7d:79:4f:da:6f:ac:6a:07:73:a1:4c:27:b5:b7:75:
         8b:90:9e:72:cd:7a:d0:e4:fb:5f:3b:15:f7:49:42:7f:87:1c:
         46:71:c7:a1:ec:c5:ba:7f:40:f0:ba:4b:8d:d1:a1:a7:81:10:
         8f:ed:ea:46:c8:d3:c8:10:08:bf:e6:c1:a9:b5:5b:a5:dc:1a:
         11:5e:c7:1f:80:a4:b6:71:89:ff:fc:51:7c:6a:d4:bb:a0:0e:
         a5:35:69:a6:e4:0a:90:4d:b7:a6:eb:0a:ae:4d:67:f9:ed:4b:
         e9:99:d1:d7:c4:3a:6d:b0:b1:03:31:ab:41:7d:46:b6:60:86:
         fb:c0:36:08:c1:98:fb:7d:9e:f6:83:bf:ac:e4:48:99:30:a8:
         df:66:12:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:39:25 2026 by rpki-client