Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.mft
File:                     3APMhzX27sAjqfI6BLLpDVOpIVI.mft (raw, json)
Hash identifier:          hvTJ7U/0l2qCw9Q2LWn37xPzZaizm0qs33m2x+yQOnY=
Subject key identifier:   65:17:17:56:C5:1D:8F:94:36:87:BF:E9:44:8A:33:8F:16:7F:6A:D0
Authority key identifier: DC:03:CC:87:35:F6:EE:C0:23:A9:F2:3A:04:B2:E9:0D:53:A9:21:52
Certificate issuer:       /CN=dc03cc8735f6eec023a9f23a04b2e90d53a92152
Certificate serial:       01A13FA702449B542C0B19A14B61E828F73A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3APMhzX27sAjqfI6BLLpDVOpIVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.mft
Manifest number:          0B36
Signing time:             Thu 15 Oct 2026 13:01:12 +0000
Manifest this update:     Thu 15 Oct 2026 13:01:12 +0000
Manifest next update:     Fri 16 Oct 2026 13:01:12 +0000
Files and hashes:         1: 3APMhzX27sAjqfI6BLLpDVOpIVI.crl (hash: 4oQ1rS8JcHoGWhY8FisAqXTJkN5Yapw/Y+HqwPRbVW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3APMhzX27sAjqfI6BLLpDVOpIVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:a7:02:44:9b:54:2c:0b:19:a1:4b:61:e8:28:f7:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc03cc8735f6eec023a9f23a04b2e90d53a92152
        Validity
            Not Before: Oct 15 13:01:12 2026 GMT
            Not After : Oct 16 13:01:12 2026 GMT
        Subject: CN=65171756c51d8f943687bfe9448a338f167f6ad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:71:b8:e1:90:eb:55:a2:dd:e9:d3:46:22:66:
                    4d:5e:ee:40:02:75:ff:b9:fa:b9:77:f4:95:0d:26:
                    fd:cd:50:54:31:a2:1d:51:e1:2f:48:0b:ae:78:44:
                    4a:4a:3c:a4:48:7b:8a:e0:0a:ed:d2:98:d8:ca:97:
                    29:99:6e:26:fe:f1:b8:0c:cd:eb:f6:82:00:87:8a:
                    68:ee:10:5f:cb:a4:e0:ec:0c:da:f9:8b:ba:2a:bd:
                    74:c2:b1:fb:02:1c:d7:ad:bf:0e:9d:42:35:1a:de:
                    fd:99:ca:64:a0:df:ba:0a:56:ff:9c:23:f6:b1:5e:
                    88:37:05:10:cc:aa:cd:76:7d:e6:53:29:f3:e3:62:
                    5f:46:5a:09:18:8e:be:d3:dc:29:ab:50:8f:32:8e:
                    cc:02:43:ef:4e:e1:07:20:d2:46:ed:11:db:2e:f7:
                    a8:50:a6:dd:de:eb:9f:05:05:11:b8:ec:ea:ef:72:
                    8a:19:57:00:48:37:17:91:9a:ce:dc:5c:06:a3:b5:
                    5f:c7:ca:d2:99:11:56:70:b9:58:08:67:82:80:47:
                    e2:18:d1:16:36:0a:98:eb:e3:ef:06:ca:4f:29:8a:
                    7f:a5:60:51:f5:62:08:00:9c:24:27:d1:97:e9:7e:
                    4a:1b:89:c6:98:f2:40:4a:96:ba:a8:0c:e8:26:fb:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:17:17:56:C5:1D:8F:94:36:87:BF:E9:44:8A:33:8F:16:7F:6A:D0
            X509v3 Authority Key Identifier:
                keyid:DC:03:CC:87:35:F6:EE:C0:23:A9:F2:3A:04:B2:E9:0D:53:A9:21:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3APMhzX27sAjqfI6BLLpDVOpIVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:14:d0:f4:34:dc:f4:67:70:28:85:75:bd:bf:77:5c:b3:b9:
         fb:48:04:98:fa:c0:9f:a5:dd:2a:6c:d5:08:cb:ca:44:d1:3b:
         5a:d1:31:f0:f7:09:be:ce:37:79:23:9e:b9:02:91:98:77:28:
         66:5c:22:22:8b:69:95:2a:92:de:1d:83:cc:8c:ed:65:26:d0:
         24:61:2f:68:36:16:82:e2:7d:31:4c:a1:62:70:f4:a1:ed:48:
         f6:8a:cc:e7:f4:87:3c:8c:06:b1:6f:1c:83:c6:c7:d6:07:70:
         df:9d:a7:9d:e2:98:a4:d6:24:47:9c:6f:8c:2e:f6:68:6f:3a:
         78:7b:f4:c3:ae:69:72:be:6b:9c:0c:15:28:2a:29:c9:c6:c2:
         95:4a:0e:6d:73:ad:9f:98:23:95:f1:9b:ac:e8:16:66:93:3a:
         3d:b1:42:cb:6a:9f:ee:e3:48:fd:1b:13:e9:43:8f:66:16:67:
         c6:79:f6:15:2c:e3:9d:41:7d:cd:a6:5d:62:fa:af:55:8c:dd:
         3e:00:64:46:d2:16:8b:6f:12:8e:0a:e5:88:06:12:f9:e1:9a:
         6e:bf:e1:76:08:5e:04:66:fb:83:ef:c3:97:c9:65:0a:28:f5:
         f4:e9:07:77:ee:70:39:92:ba:5a:e8:37:b0:58:ea:d8:b5:22:
         53:e1:0c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:21:41 2026 by rpki-client