Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft
File:                     7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft (raw, json)
Hash identifier:          c7FuynOK76OEuckQLQYGUBzO6+2mF8dEUcoG2sTIhxI=
Subject key identifier:   DB:ED:AB:A2:B0:F6:47:5C:A6:CD:1C:50:23:EE:B5:1A:0F:99:C6:73
Authority key identifier: ED:24:15:01:3F:2E:9C:4E:E5:8D:7C:2D:FE:EE:AB:28:16:92:D8:57
Certificate issuer:       /CN=ed2415013f2e9c4ee58d7c2dfeeeab281692d857
Certificate serial:       019F17C350518202E95DB3AEFE1688C78725
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7SQVAT8unE7ljXwt_u6rKBaS2Fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft
Manifest number:          1917
Signing time:             Tue 30 Jun 2026 09:01:43 +0000
Manifest this update:     Tue 30 Jun 2026 09:01:43 +0000
Manifest next update:     Wed 01 Jul 2026 09:01:43 +0000
Files and hashes:         1: 7SQVAT8unE7ljXwt_u6rKBaS2Fc.crl (hash: klqU2Zy4OHIBIb+zff/Nr7YlEiUYpCZX1uFnV1oPsdI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7SQVAT8unE7ljXwt_u6rKBaS2Fc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 09:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:c3:50:51:82:02:e9:5d:b3:ae:fe:16:88:c7:87:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed2415013f2e9c4ee58d7c2dfeeeab281692d857
        Validity
            Not Before: Jun 30 09:01:43 2026 GMT
            Not After : Jul  1 09:01:43 2026 GMT
        Subject: CN=dbedaba2b0f6475ca6cd1c5023eeb51a0f99c673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0d:c6:74:60:07:99:50:f6:a3:51:3b:51:eb:
                    fb:3f:ea:74:96:a3:e4:cf:8a:38:92:48:74:5a:98:
                    be:66:17:37:b1:7d:63:25:12:66:63:cc:98:46:5a:
                    ec:89:ed:da:22:94:e1:be:87:c9:5b:47:e0:bb:7a:
                    7e:4e:a5:69:86:a1:9a:7b:4e:a1:11:9b:68:08:e9:
                    3a:2e:6c:6c:62:dc:02:33:58:3f:50:a7:76:a4:5f:
                    c5:e3:e1:a6:f1:51:21:9a:dc:20:14:b6:93:ab:87:
                    74:61:26:ca:1b:84:af:9a:e1:50:dc:b4:06:b5:82:
                    27:cd:08:bc:8b:7c:ef:55:38:53:22:ed:ef:b2:de:
                    34:28:ac:f1:06:b7:41:9c:ac:2e:23:19:14:2d:e8:
                    09:6f:66:e2:58:8a:9b:97:2c:a8:2f:cb:6b:67:1c:
                    94:8c:a6:89:25:bc:9c:84:9f:a2:a9:72:1e:5e:b8:
                    6f:79:8e:10:b3:01:e5:15:e7:6e:a8:94:e9:c5:dd:
                    d1:ca:f7:87:fa:2e:25:1f:f6:20:23:d8:f3:bf:db:
                    02:c0:69:9a:51:65:fa:19:9a:47:90:3f:52:58:1e:
                    df:37:05:b9:11:43:6a:7b:21:03:12:9b:0f:ce:9e:
                    25:f3:d0:01:a9:54:84:ec:08:2c:8d:d9:0b:11:85:
                    4d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:ED:AB:A2:B0:F6:47:5C:A6:CD:1C:50:23:EE:B5:1A:0F:99:C6:73
            X509v3 Authority Key Identifier:
                keyid:ED:24:15:01:3F:2E:9C:4E:E5:8D:7C:2D:FE:EE:AB:28:16:92:D8:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7SQVAT8unE7ljXwt_u6rKBaS2Fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:10:00:0d:48:5a:18:cb:59:ab:91:4c:32:9c:68:ba:fe:28:
         4c:5c:a3:50:6c:0e:f6:46:2d:76:dd:3b:de:3f:61:5a:41:27:
         8a:ae:bc:06:b9:1c:2a:92:6e:0c:29:c6:14:6c:31:ee:83:ff:
         80:4c:2b:95:ba:96:9f:fb:6b:1b:16:14:15:ee:44:04:fd:b6:
         79:01:34:28:15:c1:5f:a2:5e:8e:43:1f:33:83:62:aa:b9:ea:
         5c:05:de:41:df:ad:02:69:94:c1:16:64:a4:82:e4:ad:a4:fd:
         ba:32:ad:46:99:c9:b4:6f:27:38:93:9c:8a:2a:c5:72:8e:d7:
         2f:52:ab:3a:6e:de:6f:8a:80:d7:43:1f:6a:79:a7:ab:1d:c3:
         e6:07:58:01:ae:e4:79:0a:83:1d:96:23:22:e3:58:56:b3:eb:
         3a:7d:cd:0b:0f:2d:a1:cf:c8:6d:74:00:ba:e5:ba:0a:f2:f8:
         95:e3:87:5b:30:76:9a:a7:cc:47:07:67:b5:2b:8b:48:50:0e:
         2d:a0:28:ab:2d:b8:11:02:7e:91:93:31:29:5f:7f:89:f1:6e:
         57:0e:9a:0f:a1:b9:8b:ca:8e:b6:9a:3a:3f:cf:f7:be:60:da:
         03:a6:33:13:ae:f6:42:76:d8:6b:e8:eb:3a:d6:bd:26:2b:a2:
         fe:79:df:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Xw1BRggLpXbOu/haIx4clMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkMjQxNTAxM2YyZTljNGVlNThkN2MyZGZlZWVhYjI4MTY5
MmQ4NTcwHhcNMjYwNjMwMDkwMTQzWhcNMjYwNzAxMDkwMTQzWjAzMTEwLwYDVQQD
EyhkYmVkYWJhMmIwZjY0NzVjYTZjZDFjNTAyM2VlYjUxYTBmOTljNjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ3GdGAHmVD2o1E7Uev7P+p0lqPk
z4o4kkh0Wpi+Zhc3sX1jJRJmY8yYRlrsie3aIpThvofJW0fgu3p+TqVphqGae06h
EZtoCOk6LmxsYtwCM1g/UKd2pF/F4+Gm8VEhmtwgFLaTq4d0YSbKG4SvmuFQ3LQG
tYInzQi8i3zvVThTIu3vst40KKzxBrdBnKwuIxkULegJb2biWIqblyyoL8trZxyU
jKaJJbychJ+iqXIeXrhveY4QswHlFeduqJTpxd3RyveH+i4lH/YgI9jzv9sCwGma
UWX6GZpHkD9SWB7fNwW5EUNqeyEDEpsPzp4l89ABqVSE7AgsjdkLEYVN+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvtq6Kw9kdcps0cUCPutRoPmcZzMB8GA1UdIwQY
MBaAFO0kFQE/LpxO5Y18Lf7uqygWkthXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1NRVkFUOHVuRTdsalh3dF91NnJLQmFTMkZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi83ZGFiZTctZGZmMS00NjZjLWE2MDAt
MDMxMWQwZDVkZGJiLzEvN1NRVkFUOHVuRTdsalh3dF91NnJLQmFTMkZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi83ZGFiZTctZGZmMS00NjZjLWE2MDAtMDMxMWQwZDVkZGJi
LzEvN1NRVkFUOHVuRTdsalh3dF91NnJLQmFTMkZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZhAADUha
GMtZq5FMMpxouv4oTFyjUGwO9kYtdt073j9hWkEniq68BrkcKpJuDCnGFGwx7oP/
gEwrlbqWn/trGxYUFe5EBP22eQE0KBXBX6JejkMfM4NiqrnqXAXeQd+tAmmUwRZk
pILkraT9ujKtRpnJtG8nOJOciirFco7XL1KrOm7eb4qA10Mfanmnqx3D5gdYAa7k
eQqDHZYjIuNYVrPrOn3NCw8toc/IbXQAuuW6CvL4leOHWzB2mqfMRwdntSuLSFAO
LaAoqy24EQJ+kZMxKV9/ifFuVw6aD6G5i8qOtpo6P8/3vmDaA6YzE672QnbYa+jr
Ota9Jiui/nnf+A==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:22:36 2026 by rpki-client