Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft
File:                     7zxxAAZFDN50pBmnFDKY5VBm8mw.mft (raw, json)
Hash identifier:          CyUWPU4sRcPPNTkuVkarKOiDPUCC3XG3OAOMpxnyHyQ=
Subject key identifier:   8F:A3:DA:02:DB:54:6A:02:AE:2F:ED:5D:2F:D3:CC:C6:13:7D:FC:4E
Authority key identifier: EF:3C:71:00:06:45:0C:DE:74:A4:19:A7:14:32:98:E5:50:66:F2:6C
Certificate issuer:       /CN=ef3c710006450cde74a419a7143298e55066f26c
Certificate serial:       019E30E0431E8916FEB35305B8FEB09F9CC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft
Manifest number:          080A
Signing time:             Sat 16 May 2026 13:01:04 +0000
Manifest this update:     Sat 16 May 2026 13:01:04 +0000
Manifest next update:     Sun 17 May 2026 13:01:04 +0000
Files and hashes:         1: 7zxxAAZFDN50pBmnFDKY5VBm8mw.crl (hash: JR/P/n+vua+r5P0M1zRwnXQXZiwFGbu+KvMkPQv9Kp8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:43:1e:89:16:fe:b3:53:05:b8:fe:b0:9f:9c:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef3c710006450cde74a419a7143298e55066f26c
        Validity
            Not Before: May 16 13:01:04 2026 GMT
            Not After : May 17 13:01:04 2026 GMT
        Subject: CN=8fa3da02db546a02ae2fed5d2fd3ccc6137dfc4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:42:87:1b:fd:87:c7:c0:10:5b:41:5b:12:0e:
                    81:27:f8:6c:8a:b3:72:39:df:8e:b2:57:7e:e8:ab:
                    1a:1b:82:b3:70:52:3f:b1:8c:b0:26:d2:e0:6c:b7:
                    a1:12:b2:66:d1:e0:82:1a:a3:de:b3:e5:75:50:05:
                    ef:8e:1f:6c:2e:ec:c1:53:63:e5:45:be:fd:27:3b:
                    3f:53:4b:72:1d:1d:e6:40:48:3c:98:ef:b6:97:eb:
                    c4:d9:a0:22:49:48:be:7e:21:57:ef:69:3b:7b:57:
                    74:19:64:f2:19:1c:da:3e:4b:35:38:8a:89:da:c7:
                    ae:49:c5:93:1e:f2:1e:38:2f:49:e4:6f:db:31:2d:
                    45:9e:f4:44:19:58:3f:b2:c6:8f:81:27:2e:33:a0:
                    9b:25:c1:8e:c3:bb:d3:95:6f:e3:21:b1:a3:34:97:
                    59:a1:b6:ae:ed:4e:23:f9:f5:44:6b:43:ac:92:74:
                    e3:96:75:19:47:ba:62:f4:1a:ab:1b:5b:71:d3:a1:
                    3e:8c:b6:be:ec:6e:5f:d3:3c:86:93:3f:5c:15:f0:
                    27:1c:2c:07:8e:da:34:72:e3:99:a4:e0:aa:cd:7b:
                    a7:8d:e2:81:80:4a:e7:db:bb:c1:45:b4:73:e0:32:
                    f4:ab:49:ac:4a:5f:50:92:57:31:e8:96:2d:72:62:
                    30:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A3:DA:02:DB:54:6A:02:AE:2F:ED:5D:2F:D3:CC:C6:13:7D:FC:4E
            X509v3 Authority Key Identifier:
                keyid:EF:3C:71:00:06:45:0C:DE:74:A4:19:A7:14:32:98:E5:50:66:F2:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:e4:a0:1f:81:39:60:de:95:cf:39:0e:4f:a7:fe:d4:fe:99:
         7d:cf:f2:56:c6:4a:28:41:d6:26:05:ae:25:01:ca:2b:04:0e:
         f0:9e:4b:10:55:b1:26:41:05:cd:b4:8e:ea:7c:a1:02:c2:36:
         15:15:20:20:8d:b7:2b:22:d6:3a:6a:7d:98:2a:c7:23:a1:8a:
         4b:f0:3c:b9:1e:77:cb:d6:a4:4d:12:2b:ce:a1:6b:9a:4e:c7:
         1a:11:5c:e1:cd:87:d9:d8:c5:16:42:53:26:03:f7:29:22:fa:
         a2:3b:1f:da:6c:b9:a1:89:73:dd:f6:34:ae:5a:44:c1:bf:53:
         82:ca:28:6d:71:6d:f2:80:88:39:fc:a7:fc:c3:79:8f:3d:e0:
         88:5f:c2:c1:a7:fa:7c:7d:cc:fa:06:0a:bf:b6:13:83:0e:99:
         3f:8d:dd:10:f5:13:83:f6:22:83:24:3d:2b:77:35:2f:ed:9d:
         f9:78:14:b5:ac:3f:7a:2c:69:59:19:96:cb:72:69:72:44:cf:
         b3:9a:c4:b4:47:e4:27:9d:81:28:ec:29:29:2d:d1:08:0d:5f:
         bf:66:7d:74:c9:89:e6:69:f8:c5:69:26:23:21:e4:98:5e:06:
         c0:de:d9:56:34:16:07:3b:c7:ba:9f:9e:d4:d6:af:a7:e6:d1:
         04:8c:f6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:30 2026 by rpki-client