Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
File:                     3vg4UDz7wFKD_erdRkSke_14P84.mft (raw, json)
Hash identifier:          T4d+ISdR9WofwPe6onOoyWI+rgRcEB+sgJDHAudASSE=
Subject key identifier:   FD:59:8B:A3:6F:6C:CF:92:C0:B7:14:1F:8D:10:9E:5C:81:DE:83:7B
Authority key identifier: DE:F8:38:50:3C:FB:C0:52:83:FD:EA:DD:46:44:A4:7B:FD:78:3F:CE
Certificate issuer:       /CN=def838503cfbc05283fdeadd4644a47bfd783fce
Certificate serial:       01A13D13B8EB97F9A3277D1D472ED573D328
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
Manifest number:          0CCD
Signing time:             Thu 15 Oct 2026 01:01:04 +0000
Manifest this update:     Thu 15 Oct 2026 01:01:04 +0000
Manifest next update:     Fri 16 Oct 2026 01:01:04 +0000
Files and hashes:         1: 3vg4UDz7wFKD_erdRkSke_14P84.crl (hash: +bM4tZeWlXmbi+SgfZny5wxruMNnNmXsKd4StyMcUXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 01:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:13:b8:eb:97:f9:a3:27:7d:1d:47:2e:d5:73:d3:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=def838503cfbc05283fdeadd4644a47bfd783fce
        Validity
            Not Before: Oct 15 01:01:04 2026 GMT
            Not After : Oct 16 01:01:04 2026 GMT
        Subject: CN=fd598ba36f6ccf92c0b7141f8d109e5c81de837b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:29:2c:a0:52:84:75:d3:9a:da:02:78:43:72:
                    91:9b:c5:41:10:91:2c:88:8c:89:4a:e5:c7:3b:97:
                    6c:f8:1c:c2:4b:c2:87:07:18:27:d8:ff:12:a6:e4:
                    0d:a0:08:a3:c5:9c:43:c5:65:19:04:77:fa:ed:1d:
                    81:58:6b:a0:b6:24:5c:f0:61:3b:57:47:db:39:a8:
                    65:48:3a:9c:b3:78:a5:ab:b4:41:06:3f:92:56:3e:
                    1d:a9:bc:1e:b8:7e:d3:2a:16:54:77:05:3e:ff:1c:
                    04:a7:ea:86:ae:45:be:54:df:ae:e5:55:87:37:f2:
                    ef:38:af:5b:e0:75:87:d8:6e:37:2d:9d:4e:10:3f:
                    94:c6:e8:b0:a8:45:42:9c:ff:0c:05:1a:b6:7a:e8:
                    ab:fc:8f:5d:a3:70:30:e4:dc:12:ef:3d:3d:7c:b3:
                    d5:a6:a2:c1:c6:69:6b:4c:f9:c0:c2:47:a9:21:9d:
                    25:24:f9:70:a8:d1:fc:63:03:5b:10:10:e1:77:9d:
                    34:7b:1c:41:ef:81:aa:82:2c:2c:47:83:85:73:be:
                    5a:17:76:7a:85:32:58:54:32:b3:72:12:a9:00:f1:
                    00:76:3f:49:93:e3:c1:8b:4b:ce:74:4c:ac:98:88:
                    b0:07:17:6a:a0:3c:2f:83:e3:f4:77:cd:3e:9d:f5:
                    ea:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:59:8B:A3:6F:6C:CF:92:C0:B7:14:1F:8D:10:9E:5C:81:DE:83:7B
            X509v3 Authority Key Identifier:
                keyid:DE:F8:38:50:3C:FB:C0:52:83:FD:EA:DD:46:44:A4:7B:FD:78:3F:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:4c:48:1d:a3:a9:60:39:72:62:22:77:ac:6e:a2:77:93:4f:
         b4:82:8a:74:bf:a6:74:61:52:2e:e8:50:e3:0e:f1:bd:07:bf:
         13:62:91:f2:c8:e2:fb:0f:8a:a0:1f:34:fe:e8:53:28:ff:09:
         63:e8:64:ce:31:7e:60:72:64:85:f0:99:c4:45:b5:c7:2f:1c:
         0f:88:07:a9:d6:98:fe:b3:22:b1:cf:c1:fb:22:83:30:c7:76:
         fd:c7:49:a7:fd:10:35:0e:44:74:a0:56:df:59:93:37:ec:52:
         4c:98:af:47:46:2c:7d:f1:57:27:ad:a1:2b:7b:cd:09:88:84:
         b6:3d:f5:4c:ed:82:f8:79:19:a3:d9:f0:db:72:75:af:31:7e:
         56:a2:a1:91:ea:88:88:e0:e7:f1:73:e2:68:06:b8:21:3e:6c:
         36:ec:55:d7:7b:76:36:a7:be:4b:b1:d6:98:3f:c0:c0:ea:dd:
         b2:30:ec:5c:86:d1:93:2a:8a:58:67:10:3e:50:ef:e5:fe:58:
         2e:90:3c:b2:6f:59:0f:a3:b2:6d:9a:97:5e:5c:54:27:af:f2:
         de:79:9d:b9:17:32:69:f8:fd:c2:b7:50:34:ab:cd:f6:c7:be:
         ce:cf:9c:e7:a2:b3:d5:71:4d:79:d5:bc:52:ac:8c:b6:14:db:
         b5:b5:34:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:20:59 2026 by rpki-client