Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
File:                     A-7ifdtJC7lmnuug4RaUFkyi6Og.mft (raw, json)
Hash identifier:          6Avd0aTlC2PkpTwle9m2bMum0BTECRbQa5HRIe5Dm8s=
Subject key identifier:   A9:E1:95:78:8F:6E:78:DE:67:23:C2:E2:B1:17:F3:0F:FB:54:CD:6F
Authority key identifier: 03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8
Certificate issuer:       /CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
Certificate serial:       01A14985B0D6B1E71C821C0E6485EF2C06A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
Manifest number:          0766
Signing time:             Sat 17 Oct 2026 11:01:00 +0000
Manifest this update:     Sat 17 Oct 2026 11:01:00 +0000
Manifest next update:     Sun 18 Oct 2026 11:01:00 +0000
Files and hashes:         1: A-7ifdtJC7lmnuug4RaUFkyi6Og.crl (hash: 90ehRG5Y7gQXGsrcw7xPmMzN7/HHQmnIfeX2htCd+KE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:49:85:b0:d6:b1:e7:1c:82:1c:0e:64:85:ef:2c:06:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
        Validity
            Not Before: Oct 17 11:01:00 2026 GMT
            Not After : Oct 18 11:01:00 2026 GMT
        Subject: CN=a9e195788f6e78de6723c2e2b117f30ffb54cd6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f7:e2:8c:f5:1e:3c:80:ae:a3:ee:7d:77:6b:
                    24:2d:4d:5a:90:2b:ba:1d:00:07:bc:07:b4:96:5a:
                    a0:57:59:39:f1:68:2e:93:e7:c0:50:00:59:bb:a1:
                    d5:cc:a5:7b:48:c7:20:ca:5a:ac:65:a8:b0:59:6f:
                    e7:24:e9:ec:db:66:3b:f4:c9:8c:08:e4:ee:24:f8:
                    16:32:32:c5:a9:56:16:33:e8:9f:8e:e5:af:12:fe:
                    73:c5:e7:9d:56:6b:43:bd:2f:6b:2d:32:72:92:9f:
                    3c:71:c8:55:f0:28:a1:4e:5f:48:47:25:ae:d2:40:
                    7e:7e:8d:60:0d:1d:8f:47:b9:2c:97:43:6d:4e:9b:
                    0c:3d:2c:c0:37:1f:ee:26:5e:b1:e4:f5:b0:c8:5c:
                    72:26:5c:50:ec:6f:2e:80:b0:cb:e6:28:f4:fb:1c:
                    06:22:25:61:b3:ef:2b:fc:01:dd:67:61:87:d2:12:
                    a3:8d:bb:5c:35:a1:f5:ee:ec:47:46:87:79:1c:42:
                    7f:6d:25:d4:b1:d3:bd:e4:00:76:fe:da:a0:c9:60:
                    05:41:1f:1d:02:c5:ea:a2:3b:88:89:d5:0d:f0:a3:
                    a9:b2:c2:c3:77:dc:e7:c5:1b:7f:73:a6:83:2d:c0:
                    28:bc:3c:2c:f3:fc:95:a2:8f:b0:07:3e:e1:37:2e:
                    57:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E1:95:78:8F:6E:78:DE:67:23:C2:E2:B1:17:F3:0F:FB:54:CD:6F
            X509v3 Authority Key Identifier:
                keyid:03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:44:b8:a0:b8:42:74:ae:3a:01:14:f3:90:94:73:20:a0:d1:
         78:19:59:3a:6a:48:21:c3:4e:08:0a:1e:5f:9b:0b:f8:9e:b1:
         88:ae:89:46:b4:91:75:a2:c0:12:f8:1a:e1:06:97:62:a2:5b:
         c6:21:de:df:f9:27:fa:44:6c:41:97:fe:6a:9f:68:7f:58:76:
         82:91:68:a6:c7:25:9c:82:c0:9f:3d:ba:45:b1:e8:ac:30:4c:
         e8:2f:b1:1c:c8:6f:68:2c:4e:6b:5b:9d:93:eb:f1:51:d5:3d:
         a0:cf:b6:be:dc:ea:0d:5e:a9:2e:73:8c:c1:f8:c8:1a:77:9f:
         fe:eb:d1:11:4a:c2:8e:f5:13:36:97:6f:92:5e:f2:e1:75:f1:
         5e:00:49:27:ad:fc:71:65:70:a1:91:e7:5d:2d:c0:83:24:20:
         e4:be:cf:ed:43:59:b8:de:eb:34:b7:ac:5a:9c:97:3c:42:ba:
         5d:90:7b:6c:5b:4d:56:c7:28:f0:8a:fc:e1:7c:56:2d:1d:a2:
         90:49:f5:98:70:15:be:f1:6d:89:c7:89:5f:25:c5:ca:d3:99:
         b6:f1:69:46:88:2c:0d:f1:11:ea:a8:19:bb:b5:28:73:ad:b3:
         38:1e:dc:d4:84:31:f7:e0:e4:84:81:12:27:a6:e1:0d:0d:13:
         8f:f6:a1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 15:50:09 2026 by rpki-client