Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
File:                     7dnow7XdvumM1_7qDf-MdiW4Wp0.mft (raw, json)
Hash identifier:          AaEComH84OwiOF6P9MW+N0BjaK+mW9mvx16g3yZFCXk=
Subject key identifier:   6F:AC:80:00:4D:BD:43:96:13:E8:89:61:86:AC:F2:8E:6B:1D:7C:6C
Authority key identifier: ED:D9:E8:C3:B5:DD:BE:E9:8C:D7:FE:EA:0D:FF:8C:76:25:B8:5A:9D
Certificate issuer:       /CN=edd9e8c3b5ddbee98cd7feea0dff8c7625b85a9d
Certificate serial:       01A13E94EA9FAA93C4A229B1A376FC8C6547
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7dnow7XdvumM1_7qDf-MdiW4Wp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
Manifest number:          1014
Signing time:             Thu 15 Oct 2026 08:01:49 +0000
Manifest this update:     Thu 15 Oct 2026 08:01:49 +0000
Manifest next update:     Fri 16 Oct 2026 08:01:49 +0000
Files and hashes:         1: 7dnow7XdvumM1_7qDf-MdiW4Wp0.crl (hash: WqnQNZ4tfLE3MaYcQQN2UTHuiStC1YwJ4ypMETaVSKg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7dnow7XdvumM1_7qDf-MdiW4Wp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:94:ea:9f:aa:93:c4:a2:29:b1:a3:76:fc:8c:65:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edd9e8c3b5ddbee98cd7feea0dff8c7625b85a9d
        Validity
            Not Before: Oct 15 08:01:49 2026 GMT
            Not After : Oct 16 08:01:49 2026 GMT
        Subject: CN=6fac80004dbd439613e8896186acf28e6b1d7c6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:46:b7:81:6c:56:b8:a4:74:3d:76:56:8e:41:
                    58:a6:44:18:cf:63:a6:0d:8e:18:95:d3:5e:1e:33:
                    02:01:0a:7a:7e:14:6f:8f:5f:ec:8c:3a:b1:88:e4:
                    30:d5:cd:63:13:a9:f6:1e:eb:34:2c:61:e6:70:7b:
                    61:16:e1:da:9f:68:75:8b:00:7e:a8:39:56:45:ca:
                    3e:50:3a:c8:1c:de:78:b5:9d:a0:5c:5e:0f:0d:d9:
                    87:f1:51:47:d7:1c:9d:b0:0a:7a:7d:83:39:58:da:
                    6f:34:b7:79:03:d0:3d:ca:8b:3f:7c:3d:f6:8e:0d:
                    69:df:10:57:c7:dd:15:a9:0b:dc:a6:8f:59:1b:f9:
                    67:c5:ba:42:69:93:ff:0a:6e:1f:4f:f6:e7:5d:e6:
                    a0:eb:26:d7:56:77:de:82:95:5c:aa:d4:64:61:7d:
                    ce:7a:2a:0d:5b:44:0b:ac:33:f5:55:0d:16:a5:49:
                    65:55:7c:25:f6:c1:9e:c0:af:27:3a:7f:52:59:9a:
                    d2:c6:b1:ae:2b:61:80:eb:8b:20:a2:f3:13:e1:9b:
                    ef:6a:94:70:6e:26:40:57:f4:83:27:20:e5:1f:c8:
                    0f:61:72:2e:37:85:37:76:b4:14:a4:78:a9:39:da:
                    25:39:c9:48:79:aa:a1:c9:c8:34:3f:7f:72:09:3e:
                    2c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:AC:80:00:4D:BD:43:96:13:E8:89:61:86:AC:F2:8E:6B:1D:7C:6C
            X509v3 Authority Key Identifier:
                keyid:ED:D9:E8:C3:B5:DD:BE:E9:8C:D7:FE:EA:0D:FF:8C:76:25:B8:5A:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dnow7XdvumM1_7qDf-MdiW4Wp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:be:a9:d7:1f:da:35:f1:28:0e:5c:8b:8d:dd:52:48:8c:9d:
         69:34:b4:32:96:bb:66:b4:aa:3d:20:61:fa:db:d6:5b:00:c4:
         b5:fe:d2:77:72:1a:31:d1:66:f5:45:59:75:f4:40:6a:94:7c:
         f1:49:a8:8c:b7:7d:44:33:54:13:0f:bb:ef:57:8e:1e:e7:83:
         d0:37:14:41:fb:18:2c:b3:33:08:2d:f0:54:4b:ce:3f:b4:85:
         ee:c1:7c:a8:ed:16:65:f0:77:9f:15:29:96:2b:b0:21:9a:42:
         e7:9d:d3:74:15:4e:6c:a4:51:f5:80:70:7a:52:a8:ec:2d:c6:
         bc:c7:1b:2b:51:55:57:91:a9:9c:23:b2:8d:65:c4:20:72:16:
         24:ce:15:b9:b7:0c:f8:a3:1c:5c:14:48:f5:b8:8a:47:85:15:
         d7:0d:2b:4f:63:be:49:38:e3:ee:fc:05:86:6a:54:49:6d:30:
         e3:8d:e8:9d:08:f0:f8:00:79:20:f5:92:f5:a1:9d:e3:de:73:
         99:2d:cc:58:de:f7:2b:da:5c:be:5c:95:c6:85:ce:ec:bc:3b:
         ea:4f:d9:91:f0:56:02:49:67:cc:19:29:8a:3b:5b:ca:d0:67:
         2a:65:48:d3:c8:30:a9:8b:5c:3c:39:75:38:2f:de:5f:75:8f:
         f8:05:62:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:41 2026 by rpki-client