Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/1adb3b-0597-40f4-95f1-08a6680ac842/1/DU7kd6rb1vbH8sonqPohowxrNXw.mft
File:                     DU7kd6rb1vbH8sonqPohowxrNXw.mft (raw, json)
Hash identifier:          sMPlvXHcuZMiJug1AMc/EB8KVR57t5V32ZbCd6WMqrM=
Subject key identifier:   7A:FE:6C:B6:00:61:31:CA:FD:02:3C:31:71:6A:0F:9B:AB:9E:E3:E8
Authority key identifier: 0D:4E:E4:77:AA:DB:D6:F6:C7:F2:CA:27:A8:FA:21:A3:0C:6B:35:7C
Certificate issuer:       /CN=0d4ee477aadbd6f6c7f2ca27a8fa21a30c6b357c
Certificate serial:       01A1434CEFA14E541BD6241A412EC1E99E19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DU7kd6rb1vbH8sonqPohowxrNXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/1adb3b-0597-40f4-95f1-08a6680ac842/1/DU7kd6rb1vbH8sonqPohowxrNXw.mft
Manifest number:          1636
Signing time:             Fri 16 Oct 2026 06:01:17 +0000
Manifest this update:     Fri 16 Oct 2026 06:01:17 +0000
Manifest next update:     Sat 17 Oct 2026 06:01:17 +0000
Files and hashes:         1: DU7kd6rb1vbH8sonqPohowxrNXw.crl (hash: MQCruZ3YuFxvJysl5dLl1GK6KtmulBYWzyXEnwo/818=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/1adb3b-0597-40f4-95f1-08a6680ac842/1/DU7kd6rb1vbH8sonqPohowxrNXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/1adb3b-0597-40f4-95f1-08a6680ac842/1/DU7kd6rb1vbH8sonqPohowxrNXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DU7kd6rb1vbH8sonqPohowxrNXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 06:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:43:4c:ef:a1:4e:54:1b:d6:24:1a:41:2e:c1:e9:9e:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d4ee477aadbd6f6c7f2ca27a8fa21a30c6b357c
        Validity
            Not Before: Oct 16 06:01:17 2026 GMT
            Not After : Oct 17 06:01:17 2026 GMT
        Subject: CN=7afe6cb6006131cafd023c31716a0f9bab9ee3e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3e:af:9b:5d:aa:85:3b:d8:5a:77:b3:6c:b3:
                    03:19:f6:9a:0e:21:c5:a9:9a:d9:c6:d5:ec:41:13:
                    f6:15:0b:f5:e0:87:17:09:c6:7d:f5:af:95:af:2e:
                    4d:31:3e:e2:1d:a5:61:73:ed:b8:31:ec:02:b1:91:
                    c7:6e:fa:af:0a:e4:34:67:b5:96:3b:98:14:9c:16:
                    26:61:ca:40:84:7c:99:5b:09:0f:cb:09:a8:1d:74:
                    e4:8e:37:21:df:b2:1d:c2:ee:a6:50:0f:93:8d:08:
                    cb:66:ec:13:d1:d7:64:b1:6c:b2:12:9a:28:9d:8f:
                    b3:ab:fe:f6:49:72:af:50:5b:5e:dc:aa:79:6a:ea:
                    6b:a8:a6:2c:e3:a8:4c:fc:28:e2:7f:98:e2:02:65:
                    1a:aa:fd:ce:1d:0c:d9:63:44:93:10:57:10:c9:63:
                    f4:52:0f:54:4c:46:e6:46:f1:cd:2f:56:fb:a6:02:
                    6e:07:89:b1:bc:8b:91:bf:e2:4c:b5:1f:27:28:45:
                    7f:f9:58:7c:7e:9f:d4:bb:49:0f:d6:07:85:ec:91:
                    69:5b:1a:c0:c3:23:aa:e8:01:e8:23:39:8f:0a:c1:
                    90:81:8e:76:cd:57:e8:6c:ba:81:81:f9:c1:47:9e:
                    24:b6:fe:bb:f9:c8:52:06:39:c9:0b:17:29:6a:4c:
                    97:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:FE:6C:B6:00:61:31:CA:FD:02:3C:31:71:6A:0F:9B:AB:9E:E3:E8
            X509v3 Authority Key Identifier:
                keyid:0D:4E:E4:77:AA:DB:D6:F6:C7:F2:CA:27:A8:FA:21:A3:0C:6B:35:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7kd6rb1vbH8sonqPohowxrNXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1adb3b-0597-40f4-95f1-08a6680ac842/1/DU7kd6rb1vbH8sonqPohowxrNXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1adb3b-0597-40f4-95f1-08a6680ac842/1/DU7kd6rb1vbH8sonqPohowxrNXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:74:5c:fa:1b:e6:97:bc:ee:88:5b:8a:83:af:3c:63:25:db:
         0f:ce:03:fb:ea:78:6f:47:95:ce:0c:64:9e:7e:da:87:1f:f7:
         7d:b3:5e:23:34:e7:23:0b:a7:8c:37:6f:f6:22:3c:e5:dd:94:
         42:80:25:0c:2e:49:a9:3e:16:56:56:04:ff:39:01:83:2c:e1:
         c4:cd:10:18:17:05:0e:2d:a5:ea:88:8a:8f:c1:b6:ed:b1:76:
         03:51:c5:94:b7:6c:63:36:0f:b0:54:ba:38:24:42:53:da:87:
         23:54:d0:df:d6:6b:fa:0b:96:1a:2a:92:3a:99:12:f1:bf:e4:
         71:0b:47:4e:6f:cc:02:d3:5b:b8:44:ee:ff:29:06:69:87:fb:
         76:10:35:bd:5c:bf:ff:24:52:78:a8:1d:8d:8b:f4:52:b6:0f:
         25:e2:eb:21:75:5e:09:93:ff:a1:25:8f:e7:43:80:09:ad:ca:
         85:d9:c5:9f:2d:8a:d5:85:45:98:98:42:dd:49:07:d7:f6:2a:
         c2:29:e4:11:40:d2:14:9c:7d:a7:00:db:d5:14:bc:9f:4b:a5:
         8c:c1:50:08:be:0d:88:35:37:65:f5:42:13:ff:b1:46:5a:37:
         92:e2:14:5d:31:08:83:ba:99:91:5c:f6:9b:e8:31:ec:cc:69:
         d6:9d:f1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 16:42:41 2026 by rpki-client