Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
File:                     7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft (raw, json)
Hash identifier:          Y+fnerXitACg55ucJD7Np8EhNzhe4OuWpaUBl9QaAvk=
Subject key identifier:   27:C4:10:05:A5:F7:C9:57:7A:FB:5F:C7:59:89:64:6B:E4:1A:D7:AC
Authority key identifier: ED:D9:7F:60:78:D2:2E:82:FD:3D:04:AE:C5:D6:72:17:15:25:6F:16
Certificate issuer:       /CN=edd97f6078d22e82fd3d04aec5d6721715256f16
Certificate serial:       019E318512538B52E657BBEECAE3BD83AB54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
Manifest number:          0C98
Signing time:             Sat 16 May 2026 16:01:04 +0000
Manifest this update:     Sat 16 May 2026 16:01:04 +0000
Manifest next update:     Sun 17 May 2026 16:01:04 +0000
Files and hashes:         1: 7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl (hash: jA3vCQgGaxlC16I3lf58Xx7ziI8xna6x0EkSqptGz0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:85:12:53:8b:52:e6:57:bb:ee:ca:e3:bd:83:ab:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edd97f6078d22e82fd3d04aec5d6721715256f16
        Validity
            Not Before: May 16 16:01:04 2026 GMT
            Not After : May 17 16:01:04 2026 GMT
        Subject: CN=27c41005a5f7c9577afb5fc75989646be41ad7ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0c:68:a7:b2:c1:c8:e3:a8:09:c3:b6:6f:71:
                    4b:33:03:c9:73:e5:fe:70:50:09:79:07:49:c6:98:
                    a0:72:31:86:c8:d9:94:80:dd:a8:59:0c:1f:bc:88:
                    ff:51:ac:2d:ba:da:8b:47:fe:c6:39:31:73:04:70:
                    0a:c0:4a:e9:09:f6:9d:b4:57:9b:e4:92:18:20:06:
                    31:ab:18:79:ff:de:89:bb:d3:80:46:97:49:2c:f3:
                    40:0b:7e:27:d3:d6:91:fb:79:c1:bf:f4:be:96:8a:
                    f8:19:6a:6d:f5:86:4a:8f:b8:9b:95:31:37:31:40:
                    02:19:1b:a9:51:20:2b:55:0c:63:f1:b6:ee:4e:3f:
                    d1:67:3c:ee:fb:0e:f5:bf:db:6d:59:0e:dc:36:e9:
                    49:86:8c:f8:94:9e:0c:55:ad:dc:d8:42:11:ae:b9:
                    2d:5b:0a:32:3c:c9:9e:f1:de:bc:72:8a:61:1d:8d:
                    1f:c3:ef:44:dd:01:c9:6c:51:25:dc:2b:f2:b0:1f:
                    8b:62:a3:38:84:7c:4e:03:03:3d:55:64:f0:87:62:
                    4c:86:8e:6e:a2:89:d7:58:3e:8b:d8:dd:1b:4c:e8:
                    2b:46:22:3d:3e:bb:42:58:33:ac:93:86:7f:4a:65:
                    2c:9e:eb:1f:a2:79:7c:f7:f0:85:4a:66:4d:f1:11:
                    58:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C4:10:05:A5:F7:C9:57:7A:FB:5F:C7:59:89:64:6B:E4:1A:D7:AC
            X509v3 Authority Key Identifier:
                keyid:ED:D9:7F:60:78:D2:2E:82:FD:3D:04:AE:C5:D6:72:17:15:25:6F:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:7d:94:bd:2e:47:36:e7:a7:96:f9:2e:dc:c4:11:e7:42:32:
         15:f0:cc:d8:b1:99:ee:7a:f8:f4:56:e0:36:ca:1c:1f:b6:5e:
         82:9f:f5:3a:82:a4:d5:2b:fd:89:bd:c0:b0:38:23:30:6e:c1:
         4a:6e:cf:b3:80:9e:c8:a6:e9:a8:be:9b:6d:9c:ec:26:ec:1f:
         3e:e1:8f:8c:f1:e7:5d:06:ae:ff:f5:4d:62:0f:86:f5:c1:02:
         72:1c:08:25:fb:d8:82:83:24:f6:b1:76:7b:36:cb:a8:4a:83:
         6d:fb:a7:48:74:22:bd:47:6b:53:3e:82:2f:89:1c:e6:07:33:
         30:3e:0f:34:f5:5d:39:24:d9:19:a6:ca:b5:8e:35:8f:cb:0a:
         6b:4d:32:7d:13:ad:dd:b5:83:8a:43:b3:dc:dd:86:cb:a7:d3:
         6e:7e:50:03:f3:34:eb:09:14:0d:7e:55:ce:39:e7:20:1f:67:
         06:54:f7:55:63:50:a0:e6:03:51:07:c5:85:26:57:b6:61:40:
         28:89:71:ae:35:5b:e0:03:eb:28:d1:f7:94:c8:ed:16:3f:12:
         1e:2e:37:25:b6:b5:ec:75:af:ba:9b:91:e8:b0:41:5d:32:fe:
         a5:cc:e5:08:d2:2e:9b:81:2b:6e:15:2c:b1:60:85:b1:d5:f3:
         04:46:25:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xhRJTi1LmV7vuyuO9g6tUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZDk3ZjYwNzhkMjJlODJmZDNkMDRhZWM1ZDY3MjE3MTUy
NTZmMTYwHhcNMjYwNTE2MTYwMTA0WhcNMjYwNTE3MTYwMTA0WjAzMTEwLwYDVQQD
EygyN2M0MTAwNWE1ZjdjOTU3N2FmYjVmYzc1OTg5NjQ2YmU0MWFkN2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwxop7LByOOoCcO2b3FLMwPJc+X+
cFAJeQdJxpigcjGGyNmUgN2oWQwfvIj/UawtutqLR/7GOTFzBHAKwErpCfadtFeb
5JIYIAYxqxh5/96Ju9OARpdJLPNAC34n09aR+3nBv/S+lor4GWpt9YZKj7iblTE3
MUACGRupUSArVQxj8bbuTj/RZzzu+w71v9ttWQ7cNulJhoz4lJ4MVa3c2EIRrrkt
WwoyPMme8d68cophHY0fw+9E3QHJbFEl3CvysB+LYqM4hHxOAwM9VWTwh2JMho5u
oonXWD6L2N0bTOgrRiI9PrtCWDOsk4Z/SmUsnusfonl89/CFSmZN8RFYtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfEEAWl98lXevtfx1mJZGvkGtesMB8GA1UdIwQY
MBaAFO3Zf2B40i6C/T0ErsXWchcVJW8WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2RsX1lIalNMb0w5UFFTdXhkWnlGeFVsYnhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8zYWNkZDQtNzNjYi00MWVlLWIwNTIt
NGZhZGFkMDg1ODIzLzEvN2RsX1lIalNMb0w5UFFTdXhkWnlGeFVsYnhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8zYWNkZDQtNzNjYi00MWVlLWIwNTItNGZhZGFkMDg1ODIz
LzEvN2RsX1lIalNMb0w5UFFTdXhkWnlGeFVsYnhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJH2UvS5H
Nuenlvku3MQR50IyFfDM2LGZ7nr49FbgNsocH7Zegp/1OoKk1Sv9ib3AsDgjMG7B
Sm7Ps4CeyKbpqL6bbZzsJuwfPuGPjPHnXQau//VNYg+G9cECchwIJfvYgoMk9rF2
ezbLqEqDbfunSHQivUdrUz6CL4kc5gczMD4PNPVdOSTZGabKtY41j8sKa00yfROt
3bWDikOz3N2Gy6fTbn5QA/M06wkUDX5VzjnnIB9nBlT3VWNQoOYDUQfFhSZXtmFA
KIlxrjVb4APrKNH3lMjtFj8SHi43Jba17HWvupuR6LBBXTL+pczlCNIum4ErbhUs
sWCFsdXzBEYl9w==
-----END CERTIFICATE-----
Generated at Sat May 16 17:56:07 2026 by rpki-client