Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
File:                     7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft (raw, json)
Hash identifier:          mzGfgDVIA5gXBTiy9LRKcJraHWmJUZa8bhWwE/PDYsE=
Subject key identifier:   3F:70:89:25:43:99:E7:79:2D:87:88:6C:E3:9D:EB:5D:E5:F6:E5:8A
Authority key identifier: ED:D9:7F:60:78:D2:2E:82:FD:3D:04:AE:C5:D6:72:17:15:25:6F:16
Certificate issuer:       /CN=edd97f6078d22e82fd3d04aec5d6721715256f16
Certificate serial:       01A00101DB1EFCABC6244669BB7FC330A604
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
Manifest number:          0D88
Signing time:             Fri 14 Aug 2026 16:01:33 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:33 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:33 +0000
Files and hashes:         1: 7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl (hash: Deql/patAFTephv/il8yDIJQfV/KTqaibn5UQjwV8kY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 16:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:db:1e:fc:ab:c6:24:46:69:bb:7f:c3:30:a6:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edd97f6078d22e82fd3d04aec5d6721715256f16
        Validity
            Not Before: Aug 14 16:01:33 2026 GMT
            Not After : Aug 15 16:01:33 2026 GMT
        Subject: CN=3f7089254399e7792d87886ce39deb5de5f6e58a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a2:48:8d:a5:f9:e8:58:b3:1b:7d:a3:a2:42:
                    78:b1:f5:e1:1d:e9:e8:bc:ef:d2:b1:b8:4f:3a:0f:
                    0f:0d:1a:86:f6:c3:72:64:ea:7a:0a:e5:65:3e:50:
                    5a:8f:58:b9:fe:19:e8:93:e4:95:19:22:6f:80:4a:
                    e2:ae:95:9d:79:5e:7d:c3:ce:2c:5c:5b:62:ba:bf:
                    87:3d:37:38:67:55:04:a4:7c:1b:21:8a:99:12:ee:
                    cb:4c:50:67:9b:66:73:45:7d:17:8f:e0:bc:cd:88:
                    85:24:c7:16:88:2e:7a:6c:b1:26:6f:61:d7:5b:da:
                    58:a8:f8:5c:46:eb:e6:21:c8:09:d0:9a:c5:78:60:
                    04:78:a0:45:64:49:31:94:12:15:04:f6:61:be:20:
                    5f:34:25:eb:cd:b6:26:ce:c0:d2:c4:01:7b:7f:7c:
                    5a:54:c3:2d:39:4e:d8:51:1b:d0:89:c7:72:34:16:
                    3e:aa:fc:72:19:62:72:cf:5e:60:9e:32:8e:49:e2:
                    f0:81:9e:55:f9:db:e5:77:10:0c:c8:9f:0b:0d:f5:
                    c2:7d:ab:07:c8:0b:bf:44:24:d4:96:f1:3b:d6:aa:
                    88:29:cb:0a:a7:b8:3b:70:6f:14:cb:ea:3e:4d:e9:
                    0e:c3:56:1f:52:ba:94:6b:e2:4a:5f:c4:98:ec:e1:
                    6b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:70:89:25:43:99:E7:79:2D:87:88:6C:E3:9D:EB:5D:E5:F6:E5:8A
            X509v3 Authority Key Identifier:
                keyid:ED:D9:7F:60:78:D2:2E:82:FD:3D:04:AE:C5:D6:72:17:15:25:6F:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:59:65:93:68:75:b6:c1:cb:01:9a:43:bc:ea:57:cb:0e:aa:
         43:18:06:bc:af:01:63:39:16:f2:ba:8b:a6:e7:20:3e:f5:67:
         d6:60:4f:83:05:e3:dc:94:92:1e:57:08:bd:e9:a9:47:ea:c1:
         f9:43:d0:d1:2c:1a:d1:77:7f:9b:22:ab:1c:8e:ee:4e:09:46:
         4c:61:72:cb:1c:40:ea:6f:5e:34:c7:65:3d:27:1d:c8:e2:9a:
         6a:e9:78:e2:ac:5e:d1:df:a9:88:c2:2c:fc:c5:15:b7:a6:f4:
         8e:4c:5e:2d:9e:2b:62:86:ac:56:ce:c5:db:5d:f4:49:72:f1:
         8f:25:10:1e:2b:7d:9d:86:31:c6:d5:97:9c:bc:1b:ec:df:b8:
         ea:4c:6d:b7:45:0b:35:ed:8a:99:df:b2:e5:ea:86:6b:ae:1c:
         1c:c4:be:ca:aa:2f:29:07:ed:df:58:a6:79:29:09:0b:3b:53:
         08:0b:c1:71:47:b5:ba:1f:eb:dc:f3:f1:f9:28:47:e6:c8:c1:
         1e:3c:0b:cc:55:58:3b:0a:3c:1e:00:2a:a0:d8:32:2d:04:44:
         3e:02:e5:a9:89:32:fc:ff:5a:39:18:5b:7f:a3:af:d4:e3:36:
         42:05:7d:33:38:d6:89:b3:34:b5:5d:bf:4b:93:4e:76:1d:ce:
         35:c8:91:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:30:24 2026 by rpki-client