Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
File:                     7W3VjHMPSQxsZTC3ULUY55Okh6U.mft (raw, json)
Hash identifier:          07gd3hvtqn7qAyR6DqGwJnqL6ANiMnOjwOgTIEBZ5C0=
Subject key identifier:   1C:40:E2:A0:17:33:F7:72:3F:93:E3:23:6B:FE:FC:73:C1:A8:5C:33
Authority key identifier: ED:6D:D5:8C:73:0F:49:0C:6C:65:30:B7:50:B5:18:E7:93:A4:87:A5
Certificate issuer:       /CN=ed6dd58c730f490c6c6530b750b518e793a487a5
Certificate serial:       01A13DB817465E736DDFEAB3A4CCF1C684EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
Manifest number:          1189
Signing time:             Thu 15 Oct 2026 04:00:37 +0000
Manifest this update:     Thu 15 Oct 2026 04:00:37 +0000
Manifest next update:     Fri 16 Oct 2026 04:00:37 +0000
Files and hashes:         1: 7W3VjHMPSQxsZTC3ULUY55Okh6U.crl (hash: K9H5IcocyrCM8JSZkvzr6DuoWo8qWITCpJ7lMMDVE/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 04:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:b8:17:46:5e:73:6d:df:ea:b3:a4:cc:f1:c6:84:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6dd58c730f490c6c6530b750b518e793a487a5
        Validity
            Not Before: Oct 15 04:00:37 2026 GMT
            Not After : Oct 16 04:00:37 2026 GMT
        Subject: CN=1c40e2a01733f7723f93e3236bfefc73c1a85c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c8:c7:48:c8:a3:66:b8:95:d3:b3:fe:20:67:
                    43:87:bb:15:4c:46:c5:29:f7:77:5d:af:ca:32:1e:
                    ea:0a:33:14:aa:90:ca:9d:9e:ad:8b:4a:ea:f1:11:
                    27:28:a8:c7:6c:3f:58:fd:0d:6a:81:0c:c7:b0:b5:
                    e5:d9:75:3c:50:2d:82:63:6e:9b:5d:4b:fd:00:88:
                    f9:ff:dd:46:64:b5:62:63:99:5c:78:09:29:5d:f7:
                    b1:b9:41:92:9a:bd:e7:0f:69:03:01:10:cf:9d:73:
                    8e:10:37:d4:86:fc:22:e3:ff:2f:7c:f7:4f:42:5d:
                    a2:fb:f4:9c:2c:e5:8b:5c:97:7a:91:92:47:1d:c7:
                    44:ca:d7:28:34:08:7b:85:4f:28:cf:33:2d:96:df:
                    70:0a:47:70:81:9d:57:3d:d2:8d:69:ac:25:ae:d6:
                    1c:c6:01:09:63:be:09:88:d1:7a:62:f6:fd:c6:d7:
                    f7:03:cc:08:76:fb:ca:de:c1:b1:80:89:82:8f:1b:
                    f0:a5:f0:9e:45:da:90:ce:4b:ad:17:83:10:a0:cb:
                    0d:84:db:60:62:95:a2:4a:d1:f2:e7:44:66:c8:67:
                    2b:bb:98:bc:3d:77:41:3c:42:ef:e8:3a:2f:ce:e6:
                    b1:78:3c:5e:16:2c:4e:0f:ae:cd:9f:bb:e9:46:6c:
                    ee:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:40:E2:A0:17:33:F7:72:3F:93:E3:23:6B:FE:FC:73:C1:A8:5C:33
            X509v3 Authority Key Identifier:
                keyid:ED:6D:D5:8C:73:0F:49:0C:6C:65:30:B7:50:B5:18:E7:93:A4:87:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:da:08:f8:08:c9:dc:49:ec:35:29:d0:cd:bd:db:93:6b:20:
         64:61:de:1d:45:13:cb:83:68:09:74:9c:d1:7f:cd:c9:3b:d1:
         41:b5:b6:1e:8a:e0:04:04:68:4c:17:61:8a:9f:4f:89:ca:18:
         dd:42:d3:fb:64:ea:8d:6f:a7:41:c3:64:f3:eb:2d:e8:d3:90:
         28:4a:35:99:ec:43:22:27:c5:e9:67:66:0e:09:54:f1:0f:d2:
         47:58:d2:42:0f:8b:c4:8f:34:f2:63:67:92:d9:be:3d:16:0f:
         59:b2:9e:cb:f9:38:b1:97:1a:58:5d:ce:3d:10:3d:3b:41:4d:
         ad:77:5e:ba:c0:9b:3b:61:a9:b0:ea:2f:c1:9f:49:31:b1:5c:
         39:4e:e4:ae:c3:e3:5d:19:c9:b6:df:ab:3e:09:70:17:fd:49:
         09:b4:ac:76:96:da:a5:9b:6c:b4:4d:b1:f0:59:18:38:64:a5:
         7a:0f:f0:b5:f6:d2:a6:5d:db:0d:3c:ba:6e:ef:01:9c:5e:05:
         10:11:d4:2d:b0:fb:61:b6:72:0a:db:55:39:59:60:61:1c:ea:
         c6:51:c1:e0:3c:e8:82:90:0f:af:66:6b:45:e3:66:ac:e9:a9:
         89:ef:62:65:2e:9a:11:30:2d:1c:3a:08:82:96:02:40:fd:d1:
         76:76:50:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:22:00 2026 by rpki-client