Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
File:                     7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft (raw, json)
Hash identifier:          S5hlQupHptaTJZrN0Xru5kItMDGJnwv4/eJdeh2uqEo=
Subject key identifier:   05:D5:0F:F2:EE:0D:88:FB:31:F9:45:82:BF:82:1C:59:04:0E:59:42
Authority key identifier: EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44
Certificate issuer:       /CN=ecfd8eaab5aeac3ce941fe125859b32a35251344
Certificate serial:       01A13F02F5CDBA9C46C19D30F44A9132D54C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
Manifest number:          1804
Signing time:             Thu 15 Oct 2026 10:02:00 +0000
Manifest this update:     Thu 15 Oct 2026 10:02:00 +0000
Manifest next update:     Fri 16 Oct 2026 10:02:00 +0000
Files and hashes:         1: 7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl (hash: LAFIdxyo5TdjbBeaGaHn92aCRfneB1BNjl0EEhpoVOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:02:f5:cd:ba:9c:46:c1:9d:30:f4:4a:91:32:d5:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecfd8eaab5aeac3ce941fe125859b32a35251344
        Validity
            Not Before: Oct 15 10:02:00 2026 GMT
            Not After : Oct 16 10:02:00 2026 GMT
        Subject: CN=05d50ff2ee0d88fb31f94582bf821c59040e5942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1e:10:0e:38:db:e7:18:e5:69:54:e1:40:e3:
                    14:32:0c:9c:58:04:8f:0d:95:6f:35:27:3c:91:a6:
                    2f:05:83:a1:95:22:63:b7:e8:1b:99:3b:eb:e5:73:
                    64:62:a0:ce:71:54:08:a9:74:cb:46:d9:de:fb:91:
                    12:b7:81:3d:fd:42:ff:d0:60:61:0d:d5:8b:a3:91:
                    0e:87:1a:0f:fd:50:5d:51:c9:8d:37:04:d0:b5:f4:
                    7e:d1:b0:07:7d:f6:3f:25:3d:a4:74:30:58:23:10:
                    3d:95:85:c9:9f:de:45:4e:ba:75:82:d1:23:e2:12:
                    6a:b2:e9:b4:7a:1f:43:d9:43:b3:38:7f:9e:1e:3b:
                    23:92:36:92:33:b2:9a:80:b6:17:51:d5:64:54:f6:
                    4e:b1:13:1c:3d:a3:a6:e1:cb:06:fe:61:35:09:38:
                    31:f8:34:42:00:11:33:3c:70:26:ba:3c:cc:1b:92:
                    49:e8:71:9f:3d:53:14:0c:f7:08:d1:6e:69:59:97:
                    7e:36:ba:64:49:2c:73:81:a2:e9:4f:c9:65:5d:7b:
                    5a:87:7a:30:63:4f:f2:3a:5d:8a:f9:4e:35:93:67:
                    77:29:51:4c:9e:64:b4:cf:a2:29:45:f2:3a:e1:0e:
                    12:67:6f:f3:e2:93:93:13:b9:94:46:4e:9a:f3:95:
                    c5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D5:0F:F2:EE:0D:88:FB:31:F9:45:82:BF:82:1C:59:04:0E:59:42
            X509v3 Authority Key Identifier:
                keyid:EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:54:82:e8:55:e5:54:db:59:09:47:cc:1e:bf:ee:e2:67:8e:
         9f:0f:50:53:1e:2d:c4:09:e1:a0:ca:a6:1d:42:13:b9:d6:90:
         33:6f:51:ff:ee:0d:da:0d:98:44:4a:89:11:10:f0:df:c1:57:
         ba:08:46:6e:38:21:da:93:82:da:6f:ac:61:4c:8f:a0:4e:4e:
         aa:0a:20:52:b9:aa:3d:ac:74:cd:9a:ae:75:ab:80:43:48:61:
         e2:7e:bf:82:1c:a4:11:e5:89:ea:9e:d6:92:73:33:4b:76:2a:
         87:14:17:ee:25:64:37:ce:2f:5f:65:d7:5d:1e:39:f5:00:11:
         3f:05:9e:73:c2:04:ea:be:05:7a:be:db:4d:03:f1:08:0b:98:
         a8:c3:1e:6b:26:67:90:4e:ec:a6:b9:57:99:c5:b3:e1:e5:13:
         fe:71:18:38:26:0b:64:c9:83:e4:bc:b0:7c:53:72:51:8b:4f:
         9d:47:b1:51:b8:9f:31:d4:ae:f1:a5:0b:6a:a0:f9:98:2b:48:
         92:46:2a:bb:19:9f:ad:e9:7f:1c:50:35:bf:fb:dd:dc:d1:df:
         df:55:fb:75:ca:07:e2:03:0d:10:b9:03:92:b3:62:9d:42:f8:
         5e:4c:a5:8b:82:72:b2:5c:d9:b3:7d:96:9d:b1:3b:5d:1d:ad:
         67:64:49:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:34:57 2026 by rpki-client