Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
File:                     7dnow7XdvumM1_7qDf-MdiW4Wp0.mft (raw, json)
Hash identifier:          aMnQOgrLOTwrewPHc5dFsG81h22Tq00tzGqlIw4UbYI=
Subject key identifier:   B4:9C:82:64:DC:89:7C:A6:1D:2D:37:2E:D0:2D:15:03:D4:7E:62:46
Authority key identifier: ED:D9:E8:C3:B5:DD:BE:E9:8C:D7:FE:EA:0D:FF:8C:76:25:B8:5A:9D
Certificate issuer:       /CN=edd9e8c3b5ddbee98cd7feea0dff8c7625b85a9d
Certificate serial:       019F18313760943A5FABF61F26FBF037B87F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7dnow7XdvumM1_7qDf-MdiW4Wp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
Manifest number:          0EF7
Signing time:             Tue 30 Jun 2026 11:01:46 +0000
Manifest this update:     Tue 30 Jun 2026 11:01:46 +0000
Manifest next update:     Wed 01 Jul 2026 11:01:46 +0000
Files and hashes:         1: 7dnow7XdvumM1_7qDf-MdiW4Wp0.crl (hash: ctBhGba+IKr7PCf/zSu6zxrPIKyCJCz/LyVXpZ0Dfzs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7dnow7XdvumM1_7qDf-MdiW4Wp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 11:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:31:37:60:94:3a:5f:ab:f6:1f:26:fb:f0:37:b8:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edd9e8c3b5ddbee98cd7feea0dff8c7625b85a9d
        Validity
            Not Before: Jun 30 11:01:46 2026 GMT
            Not After : Jul  1 11:01:46 2026 GMT
        Subject: CN=b49c8264dc897ca61d2d372ed02d1503d47e6246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fb:67:d1:6c:e9:eb:a6:11:ac:61:0b:69:fa:
                    02:39:3e:32:05:1b:a6:0a:76:15:32:62:44:11:a1:
                    6b:33:12:af:4e:90:df:ff:8c:a7:5c:93:d4:2f:7b:
                    e7:84:da:51:76:60:31:49:e3:40:bc:41:83:c0:82:
                    6e:70:53:db:54:19:72:63:e7:fb:00:4d:33:19:79:
                    7c:7e:ee:b2:04:e9:7f:68:ee:37:38:dd:25:31:11:
                    a4:96:d7:25:48:98:8b:2d:3a:4d:bc:b7:2e:20:7c:
                    5e:33:2a:f9:da:14:3b:c9:92:31:68:a3:54:e5:0f:
                    68:06:01:4d:ff:76:0a:72:a0:ad:74:1e:87:0f:86:
                    94:d2:4d:b7:a2:f3:ef:c7:1e:79:86:59:4e:c8:21:
                    7c:a0:00:75:03:f7:3b:0c:1b:f8:1e:72:bd:b5:d5:
                    32:3d:3f:b2:90:c0:ea:63:fd:e6:8d:67:f8:a0:52:
                    8c:05:6b:72:b7:7c:c0:80:e8:ff:cd:cc:ee:f8:d5:
                    33:b8:71:1f:d5:0e:fb:a3:97:6c:85:36:8b:df:82:
                    86:b9:9a:ad:95:ec:ec:de:97:ce:e3:0c:35:6b:89:
                    d7:2e:58:48:bf:63:7b:0a:fd:6a:69:4d:d0:49:e5:
                    10:58:95:bb:9e:80:3d:35:23:3b:01:6d:e9:89:9d:
                    d8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9C:82:64:DC:89:7C:A6:1D:2D:37:2E:D0:2D:15:03:D4:7E:62:46
            X509v3 Authority Key Identifier:
                keyid:ED:D9:E8:C3:B5:DD:BE:E9:8C:D7:FE:EA:0D:FF:8C:76:25:B8:5A:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dnow7XdvumM1_7qDf-MdiW4Wp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:6a:e2:c4:74:db:b2:0f:f3:f2:b0:d2:a9:30:fa:41:68:34:
         6a:b7:07:02:0e:f8:e1:51:a5:3e:88:43:fb:c5:8b:68:c0:bb:
         c1:64:14:b0:96:b9:07:40:ef:5c:38:4b:4c:05:d8:d6:e0:af:
         fb:73:f5:ca:87:2e:99:b4:00:6a:b7:a9:ec:da:c2:05:73:83:
         35:74:19:a5:ba:3e:05:b3:06:4c:fb:ad:11:53:0c:97:81:e0:
         6a:38:57:9c:cd:dc:6f:e5:e5:12:55:94:78:a4:9f:e6:d6:68:
         84:92:3e:42:c0:dc:ed:4c:87:67:f8:de:f0:b5:bc:af:54:50:
         7e:c3:d5:bb:ca:2e:4d:f0:93:57:77:08:80:b9:4f:7b:14:57:
         d8:48:83:d6:de:9f:8f:f3:77:87:d9:98:a5:9c:91:84:63:62:
         16:9a:8b:8a:81:78:4c:14:3b:68:96:5c:73:92:9a:93:bc:21:
         fe:f9:8d:43:40:f8:0b:fa:a0:e9:e9:90:d6:a1:c1:d0:51:d4:
         19:35:fb:5d:dc:89:56:50:8a:49:1f:0c:7b:a4:4f:dd:70:5c:
         d6:f4:f4:bf:a4:df:86:6c:06:ed:12:71:b6:69:e9:13:61:70:
         00:21:84:29:17:76:02:00:9f:1a:d3:e5:68:9e:af:0e:89:aa:
         7e:52:a6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:24:02 2026 by rpki-client