Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
File:                     7XlzzE58-_RHB0eBDEFuzH6YGIU.mft (raw, json)
Hash identifier:          yEEyKgLeSdxySG3FuqRbSiaVEXaHGoeIvSQD0x3oQg8=
Subject key identifier:   4D:BC:6E:7E:EA:86:12:C1:FC:BB:E1:97:0F:F0:E7:65:40:D8:D2:E8
Authority key identifier: ED:79:73:CC:4E:7C:FB:F4:47:07:47:81:0C:41:6E:CC:7E:98:18:85
Certificate issuer:       /CN=ed7973cc4e7cfbf4470747810c416ecc7e981885
Certificate serial:       01A13F02CAF7BC0ACD2B12CE02D3990D60DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
Manifest number:          161C
Signing time:             Thu 15 Oct 2026 10:01:49 +0000
Manifest this update:     Thu 15 Oct 2026 10:01:49 +0000
Manifest next update:     Fri 16 Oct 2026 10:01:49 +0000
Files and hashes:         1: 7XlzzE58-_RHB0eBDEFuzH6YGIU.crl (hash: Ir/2MYH1aOOeuQj3MyqPTrBawvdpH3U2BwmWTDrePSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:02:ca:f7:bc:0a:cd:2b:12:ce:02:d3:99:0d:60:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed7973cc4e7cfbf4470747810c416ecc7e981885
        Validity
            Not Before: Oct 15 10:01:49 2026 GMT
            Not After : Oct 16 10:01:49 2026 GMT
        Subject: CN=4dbc6e7eea8612c1fcbbe1970ff0e76540d8d2e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:18:a3:c4:90:52:10:b0:d1:6e:a9:84:b0:0e:
                    69:7b:42:a6:4a:bc:89:86:90:c3:a7:5a:93:97:74:
                    08:cc:5d:0e:71:06:a6:53:dc:bd:6b:76:21:a5:62:
                    af:51:48:3f:1a:63:46:ca:79:ab:b9:6a:b5:f2:b9:
                    84:4a:e6:11:39:90:49:11:1d:8d:3f:91:c7:d2:3c:
                    0f:81:4d:4d:2e:47:6d:0b:fa:7e:51:a1:10:5f:57:
                    28:c3:37:54:a5:0d:97:d7:7a:6b:53:ec:77:6c:d0:
                    be:59:b3:f0:2c:5d:6d:88:17:2f:34:92:08:05:65:
                    08:9a:c1:2f:89:be:9d:71:2b:5c:29:ba:a4:a9:e5:
                    52:66:66:50:f6:78:10:a2:ce:21:73:70:82:35:5d:
                    7c:db:ff:3f:6d:e8:d5:4d:1b:cb:d9:e2:ae:03:26:
                    97:b6:dc:a9:33:f9:26:e8:65:be:5f:fb:71:00:dc:
                    50:6e:b9:5d:28:aa:22:9f:be:d7:94:10:c6:ee:5e:
                    2f:94:cf:24:f9:49:17:5a:33:f2:2a:22:82:ff:85:
                    ee:ba:a1:ae:d7:00:05:4a:86:8b:61:d3:94:01:7c:
                    ab:7b:f7:1a:65:83:95:e5:01:fb:ec:62:b7:c5:b1:
                    ea:a0:b1:6d:07:bf:9d:c0:95:97:b9:f6:31:ec:2f:
                    e9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:BC:6E:7E:EA:86:12:C1:FC:BB:E1:97:0F:F0:E7:65:40:D8:D2:E8
            X509v3 Authority Key Identifier:
                keyid:ED:79:73:CC:4E:7C:FB:F4:47:07:47:81:0C:41:6E:CC:7E:98:18:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:c0:33:ca:ff:8f:ff:d9:68:57:0f:96:92:66:25:91:07:17:
         eb:68:b4:00:41:57:72:9c:a2:e4:0d:5c:54:8d:35:33:3a:cc:
         0b:90:0a:c8:00:aa:84:e9:cb:a7:13:cf:99:e2:f9:6c:37:e5:
         31:d8:00:41:f2:5a:88:89:08:7e:a7:19:b6:06:83:fe:71:42:
         3a:3a:0d:ca:3b:8d:e9:7f:9a:da:d6:12:41:09:a3:9b:f0:8c:
         ac:8b:b9:af:89:94:8c:20:66:1e:9e:38:a3:ae:4d:07:ed:d7:
         b8:e7:58:e6:a7:16:6f:eb:d5:bd:e7:e7:1f:25:c1:84:3b:73:
         09:15:20:32:a3:9e:95:8e:ee:7b:62:b5:f3:ee:2b:77:a6:87:
         fc:0d:7a:6e:1d:8e:41:c5:5f:a1:3b:d8:f5:b1:7c:05:d2:dc:
         da:2e:db:d7:c5:73:08:4e:f5:18:5d:9e:99:a4:a5:5d:21:e0:
         a0:de:f0:9c:57:c7:af:68:1e:86:a7:34:a1:78:ec:fc:f6:84:
         5e:39:99:53:56:c1:e9:0c:31:71:a8:b8:6e:74:e6:68:6e:87:
         8e:fc:00:4f:61:44:a7:62:fd:fa:6f:70:62:07:dc:5a:98:15:
         eb:98:58:2c:ec:b1:e4:55:ec:7b:94:e7:16:f7:97:57:2a:fe:
         e8:11:bf:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:35:37 2026 by rpki-client