Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft
File:                     1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft (raw, json)
Hash identifier:          YOF2xZKm3T0CGOcQcvEg3IK/9w+Y4HerN9nf+i1pEek=
Subject key identifier:   06:5C:6C:51:11:AB:85:19:94:90:B3:58:25:43:76:A1:BA:E0:A2:23
Authority key identifier: D5:F6:23:DA:4C:D2:EE:DD:C2:C8:7C:51:5C:62:51:8C:43:1D:3F:B5
Certificate issuer:       /CN=d5f623da4cd2eeddc2c87c515c62518c431d3fb5
Certificate serial:       01A1464D7662E3CB2E1F5483BE1C0677B590
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1fYj2kzS7t3CyHxRXGJRjEMdP7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft
Manifest number:          07C0
Signing time:             Fri 16 Oct 2026 20:00:44 +0000
Manifest this update:     Fri 16 Oct 2026 20:00:44 +0000
Manifest next update:     Sat 17 Oct 2026 20:00:44 +0000
Files and hashes:         1: 1fYj2kzS7t3CyHxRXGJRjEMdP7U.crl (hash: 2P7L9L6We/fQ0fZDh+ZaQ/+YhqYXJlUhz4M2ucu+5F4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1fYj2kzS7t3CyHxRXGJRjEMdP7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 20:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:46:4d:76:62:e3:cb:2e:1f:54:83:be:1c:06:77:b5:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f623da4cd2eeddc2c87c515c62518c431d3fb5
        Validity
            Not Before: Oct 16 20:00:44 2026 GMT
            Not After : Oct 17 20:00:44 2026 GMT
        Subject: CN=065c6c5111ab85199490b358254376a1bae0a223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:61:0b:47:48:d3:ab:a2:96:f9:8d:95:a7:8b:
                    9f:b1:7c:76:02:12:f5:e3:21:61:93:c8:72:54:b1:
                    70:43:f2:ee:9a:53:f0:6a:30:b0:e5:a1:62:3d:b8:
                    35:bf:0a:cb:3b:55:ff:ed:57:22:b9:8b:6f:56:f2:
                    41:45:3b:c7:71:cd:5f:a8:9b:30:71:0e:0c:46:f1:
                    c5:3a:68:1d:f4:fb:69:88:85:ab:5f:7b:e7:ce:58:
                    bd:23:1c:af:f8:cf:af:8a:a4:b8:45:05:45:68:44:
                    41:7b:7f:cb:78:86:b9:51:44:7c:f7:69:a1:44:dc:
                    7a:70:a3:a2:8a:95:87:38:93:dc:04:79:d0:29:50:
                    91:43:e0:df:2d:3b:6a:ce:96:28:07:45:e6:39:16:
                    28:37:0e:0e:76:a2:b5:a3:fa:c7:06:bf:bb:ad:d4:
                    a7:00:3c:af:43:41:4c:3f:5f:e0:43:47:ed:67:77:
                    d1:d1:aa:22:e7:68:a3:58:0c:93:b7:35:30:67:b1:
                    43:fa:c1:c3:35:09:f0:02:39:5c:92:93:4d:27:02:
                    b1:2c:bb:8f:97:33:2a:6f:1b:83:30:52:fd:d9:05:
                    eb:a4:42:ea:d8:5c:b6:c2:2b:23:05:14:dc:04:fd:
                    05:f7:4b:77:1c:da:1c:fa:46:35:59:8e:f6:2e:a5:
                    0e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:5C:6C:51:11:AB:85:19:94:90:B3:58:25:43:76:A1:BA:E0:A2:23
            X509v3 Authority Key Identifier:
                keyid:D5:F6:23:DA:4C:D2:EE:DD:C2:C8:7C:51:5C:62:51:8C:43:1D:3F:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fYj2kzS7t3CyHxRXGJRjEMdP7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:92:1a:c2:65:cb:f1:76:57:49:56:f8:5d:01:17:be:f2:56:
         69:ae:3c:56:8d:6e:20:67:fb:1f:32:dc:ed:e1:2c:c0:9e:f5:
         9f:0e:9a:33:3d:73:9a:03:ce:a3:dc:81:28:91:17:04:33:83:
         1d:6e:cd:b7:58:89:6c:72:cb:af:30:bd:36:3d:32:a5:4d:86:
         e6:17:9a:30:77:cd:61:9e:76:46:9c:1d:09:91:65:f6:ff:8f:
         8f:70:a4:50:20:40:76:a8:82:bf:bd:88:85:89:3f:f9:3d:b1:
         62:62:02:6f:7d:0c:b2:56:3e:fb:4a:69:25:3a:ff:13:6b:c2:
         a1:6c:c7:e3:40:24:52:73:5d:90:7a:d3:85:3b:92:92:71:2f:
         2a:35:0c:06:3a:a2:05:5d:99:9c:ed:f1:1e:65:7e:70:04:c9:
         b0:56:2b:f4:44:ac:b1:6b:f6:b6:2f:bf:55:2c:5c:cb:c0:28:
         d7:c8:5c:15:ea:41:7f:17:ab:46:f9:51:50:ab:de:37:1c:5d:
         aa:78:e9:fa:5a:b9:b8:1d:22:01:5e:95:a2:2b:68:31:b5:8e:
         db:84:5c:c0:20:d7:ab:18:c0:1a:65:3a:52:a6:bc:04:4f:bd:
         a2:20:37:3e:c0:bc:06:60:38:f0:3a:01:1b:0c:20:96:32:f2:
         db:2b:76:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:58:29 2026 by rpki-client