Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
File:                     CEoFdH74ii68ny-u9iAZ3IfRolM.mft (raw, json)
Hash identifier:          dxywGcBe5JrmsyeYwpGZqRBGAeS/0GWUETOwnNwjlFM=
Subject key identifier:   2D:1E:71:A0:2E:A6:82:EB:2C:61:6A:8D:5B:8A:43:39:F6:E7:8E:AB
Authority key identifier: 08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53
Certificate issuer:       /CN=084a05747ef88a2ebc9f2faef62019dc87d1a253
Certificate serial:       01A13E947ECC48C286D49FF353182457C2C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
Manifest number:          1780
Signing time:             Thu 15 Oct 2026 08:01:21 +0000
Manifest this update:     Thu 15 Oct 2026 08:01:21 +0000
Manifest next update:     Fri 16 Oct 2026 08:01:21 +0000
Files and hashes:         1: CEoFdH74ii68ny-u9iAZ3IfRolM.crl (hash: QPwMZkcTZEPZu3xVoKDVhjEnIV+yKnW/36UolIu4duM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:94:7e:cc:48:c2:86:d4:9f:f3:53:18:24:57:c2:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084a05747ef88a2ebc9f2faef62019dc87d1a253
        Validity
            Not Before: Oct 15 08:01:21 2026 GMT
            Not After : Oct 16 08:01:21 2026 GMT
        Subject: CN=2d1e71a02ea682eb2c616a8d5b8a4339f6e78eab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0c:29:d2:4c:09:b9:fa:19:6e:c7:9f:19:62:
                    30:53:fa:1c:f7:83:ce:91:aa:e2:f3:25:f6:48:5c:
                    7f:e9:2a:e2:7b:08:5f:d3:bc:6e:bc:e7:3b:93:fb:
                    d7:ab:7b:55:4f:47:94:ce:32:3b:3c:d1:9b:b3:e8:
                    d8:d2:63:b1:ba:84:7d:b5:e0:ea:3f:c6:0c:d7:ad:
                    75:bc:45:70:4d:f1:6d:c3:60:78:5f:93:c1:a0:31:
                    9b:51:84:bb:c9:9d:86:ea:e5:b2:61:18:f5:1b:7a:
                    89:52:b8:05:5f:7d:d6:05:e6:11:17:12:6d:30:31:
                    f6:db:7e:67:77:2f:a5:d0:0c:29:24:f5:70:69:98:
                    e3:e6:45:d7:37:12:eb:db:36:2a:a7:12:3d:4a:71:
                    a9:59:0f:70:ab:b8:f4:85:73:82:5a:90:f5:56:a1:
                    0c:ea:58:aa:d2:c6:ef:78:c0:04:c0:09:76:46:e4:
                    85:46:0f:ad:d3:ae:f0:16:56:d8:4e:a4:f5:65:c5:
                    97:6e:e1:65:87:ce:0f:7d:e8:93:a6:0e:48:c0:69:
                    c5:b9:b6:a7:1e:eb:8b:52:1a:fa:93:87:54:c5:26:
                    bb:b1:be:08:73:25:2b:44:53:98:d5:7e:e5:4c:27:
                    b3:b3:67:79:b6:0d:cd:b9:57:24:1a:15:31:cc:6d:
                    92:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1E:71:A0:2E:A6:82:EB:2C:61:6A:8D:5B:8A:43:39:F6:E7:8E:AB
            X509v3 Authority Key Identifier:
                keyid:08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:82:8c:97:87:e4:ca:19:f6:b5:51:22:ae:bc:8c:a8:75:5f:
         99:10:bd:68:c9:78:d3:4e:51:96:b9:ce:12:9a:a2:2a:13:c0:
         6e:a8:f0:57:e0:bd:62:85:1e:b1:c2:87:24:2f:d3:b2:7d:98:
         2a:e2:19:2f:e8:01:4b:ef:2d:ac:c9:2d:d7:04:85:da:3e:ce:
         7c:3f:e9:a0:5d:a3:1a:8e:9b:c2:80:e0:bd:15:a0:7a:09:60:
         69:30:1c:e0:fa:df:7f:2f:56:f1:78:92:bb:4b:7b:52:49:81:
         c2:1e:c2:73:15:9b:a2:74:04:a2:a9:9c:c1:8d:bf:0b:18:0b:
         e9:5f:4f:c7:48:5a:ba:84:db:02:78:69:ac:af:ed:55:f3:cb:
         1f:83:9d:d7:da:6c:b1:7f:1b:2f:a9:56:b0:a5:9f:ac:3e:bb:
         0d:c2:b3:78:05:e8:a8:8e:04:14:f9:06:8c:5f:e1:41:41:9b:
         d5:85:1d:b8:e9:67:df:ff:b0:bc:8d:71:72:da:dc:9d:4e:bd:
         4a:fd:d0:e3:6b:9d:29:65:13:81:e2:04:11:e7:35:cb:05:07:
         54:f1:af:b5:d8:37:82:91:e1:bc:80:7c:2a:27:e0:17:8a:3e:
         99:6e:a9:f6:b6:f4:5f:a2:09:f1:3e:15:ed:f2:29:db:5c:1b:
         d2:9f:89:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:33:42 2026 by rpki-client