Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
File:                     oVKeqYh_ni_mqUWpfUgha8FqS0E.mft (raw, json)
Hash identifier:          BHCKDhYMfcMh+f+SjUIACyh43wsusvqdSjRTJy1Ur7E=
Subject key identifier:   1B:B2:87:4D:0E:DE:8D:74:4A:49:1B:5D:EC:52:7A:DA:E3:B6:51:CF
Authority key identifier: A1:52:9E:A9:88:7F:9E:2F:E6:A9:45:A9:7D:48:21:6B:C1:6A:4B:41
Certificate issuer:       /CN=a1529ea9887f9e2fe6a945a97d48216bc16a4b41
Certificate serial:       01A1799665E2B6EFE6BBB59F52202167E05B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
Manifest number:          15B0
Signing time:             Mon 26 Oct 2026 19:01:01 +0000
Manifest this update:     Mon 26 Oct 2026 19:01:01 +0000
Manifest next update:     Tue 27 Oct 2026 19:01:01 +0000
Files and hashes:         1: oVKeqYh_ni_mqUWpfUgha8FqS0E.crl (hash: SNqP2jQX6Z4cIQ8avJkPwwq2dxeA4AUlJqhnYdCPYz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 19:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:79:96:65:e2:b6:ef:e6:bb:b5:9f:52:20:21:67:e0:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1529ea9887f9e2fe6a945a97d48216bc16a4b41
        Validity
            Not Before: Oct 26 19:01:01 2026 GMT
            Not After : Oct 27 19:01:01 2026 GMT
        Subject: CN=1bb2874d0ede8d744a491b5dec527adae3b651cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:de:73:61:9d:18:9f:fc:99:fe:71:33:92:28:
                    35:b7:0a:43:ed:fe:cb:f2:70:10:23:9a:32:50:9e:
                    18:d3:3c:86:4b:ba:72:ab:dc:4a:93:91:aa:14:ae:
                    1d:ed:fa:ca:7e:d5:29:50:d0:ee:41:a9:6f:73:35:
                    77:97:f2:9e:bd:e5:1f:dd:05:07:c4:3d:9d:f6:91:
                    a7:49:f2:ed:27:0e:47:65:1e:60:02:75:0a:11:b3:
                    6f:a5:27:d5:99:30:96:c5:36:f7:d0:84:fd:eb:a9:
                    16:d9:e3:0a:bd:eb:dd:7a:83:69:f1:c7:e1:a6:bf:
                    53:ac:44:a6:8a:c8:8f:6c:62:f7:ac:37:4c:27:3c:
                    af:89:50:21:20:25:d3:81:23:ad:98:12:80:e7:aa:
                    22:10:a1:f4:70:01:fc:d5:54:4f:a1:a0:f3:ee:e5:
                    f5:f8:82:11:2a:d0:2f:33:32:19:1e:89:20:cd:ca:
                    9c:8d:ce:8a:35:15:e9:cd:24:05:5e:8c:38:f9:99:
                    d7:30:70:d1:96:42:73:29:a6:d6:5c:ff:bc:8f:24:
                    37:af:fd:6e:66:98:3a:32:d4:7b:c1:10:df:1c:71:
                    08:5e:25:a7:31:17:4f:7d:45:3e:ee:b5:93:d3:1e:
                    5e:de:c5:04:96:b3:5c:98:54:82:a5:8f:f5:31:9b:
                    ae:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B2:87:4D:0E:DE:8D:74:4A:49:1B:5D:EC:52:7A:DA:E3:B6:51:CF
            X509v3 Authority Key Identifier:
                keyid:A1:52:9E:A9:88:7F:9E:2F:E6:A9:45:A9:7D:48:21:6B:C1:6A:4B:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:cd:3f:44:e0:aa:9b:08:74:bd:b1:02:8a:2b:06:92:ac:9a:
         8e:ae:51:d6:a9:1b:68:2c:18:61:6d:d3:68:32:f6:6a:03:08:
         6d:10:34:40:68:b4:a6:32:0b:e1:8d:8d:b6:37:6b:87:08:17:
         11:c5:04:b3:0d:59:56:b6:62:35:fe:eb:18:33:e7:7a:11:6d:
         39:b5:a5:78:5f:15:22:77:2a:60:4f:cd:d5:59:84:47:20:0a:
         d2:31:dd:7c:8f:38:2a:ac:51:8b:a5:cc:f1:51:db:e4:1c:c6:
         4b:14:87:87:21:0b:4f:56:13:25:9c:86:4e:3f:4f:9c:1b:32:
         18:de:d3:f0:b8:f4:3a:13:cb:bd:fa:a1:1d:c5:d5:61:58:ae:
         99:22:75:9a:cb:75:b6:ee:5e:02:ed:31:c6:21:7a:25:0d:9f:
         d1:74:ca:bc:11:01:e9:e7:ae:42:00:b5:db:27:a2:a8:db:db:
         17:11:4c:c7:99:ba:d5:bc:d5:43:a9:3b:56:1a:2f:0f:ad:25:
         24:08:f5:36:44:88:6f:2e:5b:3e:b6:9f:28:e0:c5:a2:1b:97:
         b4:f2:22:f3:29:c9:08:ce:43:b1:a6:e1:18:22:b0:dd:2e:a6:
         87:ee:83:fd:10:5b:06:83:20:9b:27:e6:68:3c:82:94:06:36:
         07:89:c8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:31:59 2026 by rpki-client