Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
File:                     7kDaG04w_7sypOSkt61zHAMeRCk.mft (raw, json)
Hash identifier:          +vIelLoJMwm7MQwwLMpQl5Kzd/m2psJIbY+FVhVIWjs=
Subject key identifier:   E1:1D:16:55:18:9B:61:AC:ED:0E:43:29:10:0E:F3:3B:00:64:33:1E
Authority key identifier: EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29
Certificate issuer:       /CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
Certificate serial:       01A13F394645AD44DBC91798D8A9D1E12188
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
Manifest number:          0938
Signing time:             Thu 15 Oct 2026 11:01:20 +0000
Manifest this update:     Thu 15 Oct 2026 11:01:20 +0000
Manifest next update:     Fri 16 Oct 2026 11:01:20 +0000
Files and hashes:         1: 7kDaG04w_7sypOSkt61zHAMeRCk.crl (hash: 89lrobGLubq+c/I47RcTVZIUF+lRlQ8MMOPpgUPcgSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:39:46:45:ad:44:db:c9:17:98:d8:a9:d1:e1:21:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
        Validity
            Not Before: Oct 15 11:01:20 2026 GMT
            Not After : Oct 16 11:01:20 2026 GMT
        Subject: CN=e11d1655189b61aced0e4329100ef33b0064331e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b3:1c:7e:f8:82:78:7c:3b:73:a1:1d:1e:48:
                    59:a4:35:ce:aa:3e:7a:a1:22:04:94:b6:87:dd:6b:
                    85:9f:24:b1:cc:df:58:96:a7:4b:20:8f:98:4e:07:
                    65:44:39:0c:fe:76:f8:6d:70:44:b0:50:19:65:99:
                    fd:38:50:08:a7:4b:d0:66:0a:13:0d:b2:bb:0e:b5:
                    ec:4e:54:73:2d:86:4d:5e:10:54:5d:16:58:e5:e4:
                    14:19:5f:0d:b6:fd:92:7b:d0:11:e7:6c:d4:b5:40:
                    cf:b4:18:4c:7b:f4:6f:e6:a1:54:dc:3d:c8:45:3f:
                    e3:30:70:fa:5f:5c:64:48:0d:e2:04:07:f0:fe:35:
                    94:5c:d5:db:42:80:79:f8:1b:cc:52:7f:c9:6d:59:
                    bb:a7:78:83:c4:fb:aa:86:0b:84:32:8d:0e:31:97:
                    12:bf:11:76:0d:b0:b7:e7:56:eb:91:d4:6b:ab:f7:
                    cd:41:1c:a3:98:c0:f7:d7:77:f4:8b:82:00:dc:5c:
                    a6:aa:0a:48:65:10:a4:c6:44:e1:d7:45:5e:04:eb:
                    30:eb:95:b1:0c:50:3f:20:66:fe:43:86:b3:5b:37:
                    12:dc:55:ed:75:eb:ff:4f:54:0f:fc:8f:89:c5:72:
                    66:90:94:bc:35:41:f7:f8:8c:05:83:3f:9a:d5:f6:
                    31:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1D:16:55:18:9B:61:AC:ED:0E:43:29:10:0E:F3:3B:00:64:33:1E
            X509v3 Authority Key Identifier:
                keyid:EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:95:f3:00:76:4a:98:9d:51:15:df:cb:db:e5:1d:13:99:53:
         e3:ef:46:7c:ad:78:b3:4a:96:bd:e7:3b:28:b5:1d:95:36:77:
         0e:68:13:72:de:da:0b:d8:b9:a6:80:01:ce:de:c9:ab:b9:b6:
         82:54:4d:9f:a2:45:7e:f7:a8:d1:47:bd:ce:8f:d2:da:78:2c:
         c0:0f:45:5e:d0:92:42:41:ee:74:58:7d:ef:f1:ae:8d:26:48:
         97:c6:6b:f7:0d:88:63:83:fe:f6:87:c9:00:05:3f:b7:36:05:
         1e:42:15:d8:a0:5c:4a:5f:62:3a:04:23:c5:f4:42:31:40:dd:
         9f:32:36:28:6f:78:2a:55:bd:66:20:f8:cd:ac:fe:ff:39:96:
         dc:7f:76:d5:c8:4c:e3:c7:3e:bf:b7:e6:55:b1:a7:80:31:4e:
         24:d2:b6:b6:a0:ff:3b:7b:ba:3c:6f:9a:27:5c:b9:47:3d:89:
         da:2c:58:95:13:9f:7c:10:e4:85:a3:ad:6c:18:dd:62:ee:9b:
         0a:a3:b9:3e:af:cc:af:63:1f:89:80:f4:fc:1a:0d:ab:1a:07:
         ec:25:01:87:52:12:76:3e:62:1e:67:a9:f6:9d:c4:6d:f8:86:
         6a:64:50:2d:13:3c:0f:10:9a:4a:31:cb:eb:1c:91:15:3e:5c:
         66:32:30:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:19 2026 by rpki-client