Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
File:                     3virX3TckOn_uo1CmI7Vp3SMHQU.mft (raw, json)
Hash identifier:          zIclufSRnUKlit8DdDviNtjzR3z96eQ3HuEuT4PHfbA=
Subject key identifier:   97:CE:F4:A8:C7:1B:EE:D2:E5:CE:CA:59:5F:EF:DD:24:B4:14:DE:C7
Authority key identifier: DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
Certificate issuer:       /CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Certificate serial:       01A1419575ED7DC8B308452023E4A9D0A9AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
Manifest number:          12C1
Signing time:             Thu 15 Oct 2026 22:01:16 +0000
Manifest this update:     Thu 15 Oct 2026 22:01:16 +0000
Manifest next update:     Fri 16 Oct 2026 22:01:16 +0000
Files and hashes:         1: 3virX3TckOn_uo1CmI7Vp3SMHQU.crl (hash: PdMXdGa8iYpxAvGJSvnZ6xX2eScWgLsOjtjmAxqSvxo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:41:95:75:ed:7d:c8:b3:08:45:20:23:e4:a9:d0:a9:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
        Validity
            Not Before: Oct 15 22:01:16 2026 GMT
            Not After : Oct 16 22:01:16 2026 GMT
        Subject: CN=97cef4a8c71beed2e5ceca595fefdd24b414dec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2b:fe:d5:62:64:2e:c1:73:b1:aa:6d:17:b6:
                    86:05:b8:7f:a4:57:19:20:5b:31:e8:19:5e:8b:9f:
                    00:92:62:32:05:bd:d2:27:a2:f8:cc:a0:73:2a:39:
                    b6:2c:75:ad:e0:aa:fa:b6:70:7b:ea:03:a1:87:60:
                    a4:ef:8a:e7:67:44:a6:a6:c5:cc:9e:e8:9d:bf:06:
                    6f:3f:4c:78:12:cd:7e:37:3f:d9:0b:a3:96:5f:fe:
                    55:62:a4:6a:bf:9d:57:1d:19:98:9c:58:ff:1a:e1:
                    bf:ed:9d:ca:c7:53:8b:e4:22:d3:5d:c4:12:8f:a6:
                    43:ea:38:d4:54:77:0e:c2:a3:ac:c9:62:af:91:ee:
                    3f:ed:24:6a:24:57:de:ed:3c:9c:da:51:ad:9a:05:
                    3b:3f:cc:a1:f0:2d:19:93:32:ed:d4:e0:ab:d7:54:
                    f9:6d:d2:42:3e:98:26:83:c5:66:0f:14:1d:a2:f4:
                    c4:1a:30:08:f9:0a:66:be:b1:12:3e:88:5c:52:c1:
                    96:0a:a3:b6:fa:6b:f4:47:da:b7:41:7b:76:70:eb:
                    df:3e:21:2d:36:7b:e6:3e:58:4a:15:04:62:39:b3:
                    68:6c:c8:a6:9a:70:1a:39:eb:50:eb:4d:25:c2:6f:
                    72:b9:da:56:20:57:fd:c1:2e:34:97:2f:c7:3d:da:
                    3b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:CE:F4:A8:C7:1B:EE:D2:E5:CE:CA:59:5F:EF:DD:24:B4:14:DE:C7
            X509v3 Authority Key Identifier:
                keyid:DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:55:e0:32:83:bd:cd:27:1b:c7:3a:81:c0:e5:7f:86:9c:10:
         a6:2e:a8:46:c4:a6:df:12:c4:a6:ac:f5:2b:de:56:43:ef:35:
         df:4b:fa:a1:d2:67:a3:7b:e7:eb:d1:c2:14:56:3e:8e:bb:3d:
         36:1c:37:ea:fe:34:26:9d:2c:01:8c:b8:16:2b:b0:09:f0:36:
         4a:07:e4:7e:be:58:3e:08:21:7a:50:b0:2f:8f:3c:a6:2a:e4:
         78:a7:60:86:8b:5f:1f:5b:8b:31:20:23:11:0f:14:c7:ef:dd:
         2e:b8:f3:fe:27:de:a6:f2:4b:75:b6:f7:77:49:78:3d:8b:1f:
         98:30:23:de:bf:9d:fa:78:e5:8f:8d:20:bd:ba:10:b8:c9:99:
         60:88:da:1d:3d:c9:e8:0d:01:b5:55:11:0e:5f:8d:e0:44:bf:
         33:17:7c:ed:2c:75:55:e6:16:6d:91:a7:54:9e:0e:cd:b5:dd:
         fe:97:ac:e5:6d:70:91:1b:7e:46:07:30:1c:a7:97:b0:dd:2d:
         60:9a:08:d0:2a:51:0f:e8:40:1a:d4:8e:d0:f6:9d:c0:8d:b9:
         e5:d6:3b:07:79:19:78:9c:3f:5a:9f:bf:3b:ef:af:97:83:c1:
         29:1a:b8:1c:ac:89:90:3e:e9:54:01:66:ac:f8:ea:0f:4c:e6:
         fe:bf:e6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:01:35 2026 by rpki-client