Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft
File:                     7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft (raw, json)
Hash identifier:          agfD554+GnW7EU/kJWtnAWItx14Tg64IMQpGG7Smewk=
Subject key identifier:   8D:10:82:13:E6:BA:7D:13:FD:92:72:7A:45:B8:0D:9C:BE:93:A8:22
Authority key identifier: ED:A8:52:91:60:58:53:81:F0:78:01:65:6F:FC:4C:55:12:98:44:9F
Certificate issuer:       /CN=eda8529160585381f07801656ffc4c551298449f
Certificate serial:       01A040BCA992F0FDDDF7E65096CAC4421F79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ahSkWBYU4HweAFlb_xMVRKYRJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft
Manifest number:          03A7
Signing time:             Thu 27 Aug 2026 01:01:40 +0000
Manifest this update:     Thu 27 Aug 2026 01:01:40 +0000
Manifest next update:     Fri 28 Aug 2026 01:01:40 +0000
Files and hashes:         1: 7ahSkWBYU4HweAFlb_xMVRKYRJ8.crl (hash: sP+7Q1/+qj0Fr4Qa0vM6rSs2gRLsmGS173LBIfr/UYk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ahSkWBYU4HweAFlb_xMVRKYRJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:bc:a9:92:f0:fd:dd:f7:e6:50:96:ca:c4:42:1f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eda8529160585381f07801656ffc4c551298449f
        Validity
            Not Before: Aug 27 01:01:40 2026 GMT
            Not After : Aug 28 01:01:40 2026 GMT
        Subject: CN=8d108213e6ba7d13fd92727a45b80d9cbe93a822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d2:91:02:de:c0:2e:13:be:12:7d:f4:97:2c:
                    42:5a:e7:a8:db:01:a8:88:8f:0f:a0:0d:b9:11:23:
                    4b:76:4f:69:f2:e7:f2:70:05:06:4c:b9:03:df:fb:
                    60:b1:39:33:44:45:8a:72:d6:3e:9d:0b:4c:8f:97:
                    f9:8c:3b:17:94:c0:8e:a9:e7:13:fb:3e:ae:2a:70:
                    9c:cf:7d:5f:99:f0:44:5c:cf:5d:57:f6:e7:15:80:
                    a4:1c:8f:6e:87:c4:b5:b3:33:27:4e:16:15:b6:44:
                    a5:e4:3c:52:e7:7a:eb:04:0c:e5:6b:84:5f:29:eb:
                    cc:36:48:e1:ac:08:10:46:b0:7b:99:11:55:8a:eb:
                    c4:d7:2d:f2:00:a0:b4:06:ae:00:f4:b5:08:be:22:
                    7e:b0:d3:82:43:4c:4a:3e:8d:6c:cd:bd:60:cd:ae:
                    ed:cd:48:60:6f:10:26:f2:4e:f4:d6:23:b6:18:e8:
                    05:7a:a2:77:38:f4:07:f4:ad:21:4f:96:37:98:92:
                    2f:68:90:76:da:b9:4f:0e:75:6e:b6:ef:5f:06:1a:
                    98:2c:da:86:12:e8:05:e6:ee:34:30:ba:18:41:9f:
                    5d:cc:e7:52:99:4b:b9:3a:33:8c:ef:00:f8:e2:4b:
                    f4:e5:2a:ab:29:30:b3:ce:cc:e2:56:a1:c9:b8:97:
                    bd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:10:82:13:E6:BA:7D:13:FD:92:72:7A:45:B8:0D:9C:BE:93:A8:22
            X509v3 Authority Key Identifier:
                keyid:ED:A8:52:91:60:58:53:81:F0:78:01:65:6F:FC:4C:55:12:98:44:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ahSkWBYU4HweAFlb_xMVRKYRJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:b5:8a:0b:da:9c:b5:9e:01:04:22:3a:2c:83:0f:e1:8d:4f:
         c4:5b:ab:fc:b5:44:8d:af:ff:10:c8:56:0f:48:32:a2:3c:19:
         42:bf:59:02:60:34:16:ec:f3:65:c0:7a:0c:f7:dd:be:d4:47:
         ec:21:56:bf:4a:c2:33:f4:b9:20:9a:f2:d4:22:5a:6d:68:88:
         e4:a7:c7:3b:d2:72:c0:c8:e1:dd:ca:2e:83:e4:c9:94:fa:fb:
         5e:7a:a1:7c:30:67:87:96:d7:31:8b:da:59:6e:87:5e:ce:83:
         3b:22:7f:89:af:fe:4d:fb:bc:76:59:13:47:62:d8:78:b3:40:
         64:92:ae:29:ed:04:23:16:3e:67:de:33:0c:8c:27:e4:b0:93:
         93:3a:64:9e:21:e7:38:38:c8:74:ba:6a:1f:1b:7d:af:8c:8f:
         f4:9b:5a:a1:40:6b:12:cc:4d:49:4b:08:03:ea:86:99:e0:65:
         1d:10:86:47:fd:22:0c:b2:15:d1:cc:74:0c:a7:57:02:a2:35:
         93:0d:22:06:a3:07:bc:b0:c2:b6:cf:73:0a:db:61:93:1e:c0:
         a5:ab:fb:63:55:b6:52:a6:00:e6:3e:4c:e9:88:99:74:ac:c9:
         02:29:f2:da:01:66:6b:cb:ef:3d:eb:1f:63:8d:fc:44:bd:8e:
         b4:e3:98:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:20:40 2026 by rpki-client