Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
File:                     B_xIFsg7wTWHjxB93N9DOB3JPPA.mft (raw, json)
Hash identifier:          PkFEbb82X6fvJ9u8OBr3IZLWYaJb1mp3jrwgLIL3WJU=
Subject key identifier:   8A:56:57:A2:33:D6:3D:32:F6:EE:66:71:5C:BC:D0:73:2D:70:AE:96
Authority key identifier: 07:FC:48:16:C8:3B:C1:35:87:8F:10:7D:DC:DF:43:38:1D:C9:3C:F0
Certificate issuer:       /CN=07fc4816c83bc135878f107ddcdf43381dc93cf0
Certificate serial:       01A13FA769E69E5D8442730616C2E5C729D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_xIFsg7wTWHjxB93N9DOB3JPPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
Manifest number:          1AA1
Signing time:             Thu 15 Oct 2026 13:01:38 +0000
Manifest this update:     Thu 15 Oct 2026 13:01:38 +0000
Manifest next update:     Fri 16 Oct 2026 13:01:38 +0000
Files and hashes:         1: B_xIFsg7wTWHjxB93N9DOB3JPPA.crl (hash: Ndqf5PgWkGfg6EARffe2N8Wtcq6YWMJfrPExoN7eVSM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_xIFsg7wTWHjxB93N9DOB3JPPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 13:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:a7:69:e6:9e:5d:84:42:73:06:16:c2:e5:c7:29:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07fc4816c83bc135878f107ddcdf43381dc93cf0
        Validity
            Not Before: Oct 15 13:01:38 2026 GMT
            Not After : Oct 16 13:01:38 2026 GMT
        Subject: CN=8a5657a233d63d32f6ee66715cbcd0732d70ae96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0d:ba:2f:7d:5f:3d:70:27:f8:8e:c2:1e:67:
                    c2:fd:0e:60:d7:d8:c0:a5:fe:bb:fa:f2:e0:67:00:
                    ad:5f:62:ad:bb:d4:ec:5f:16:86:31:4b:ac:f7:8c:
                    fc:4b:a8:42:cf:20:69:dd:65:c6:10:fb:ff:5a:96:
                    c7:c6:9f:54:59:6e:a5:14:f8:c9:ad:35:c8:87:e9:
                    26:cd:b9:8a:56:21:f2:4d:e8:ba:7e:1a:31:8c:1d:
                    74:f6:83:d9:c1:92:03:29:08:ad:63:9b:8f:12:20:
                    cc:2f:01:56:c9:b2:df:41:93:be:ac:73:75:97:61:
                    3e:64:65:c8:a8:87:06:d5:ba:00:3c:e2:9c:6b:6f:
                    c1:51:38:26:a3:6a:7a:b2:25:eb:3d:b3:b5:9e:c7:
                    20:68:a4:92:f5:2f:61:9e:9e:9a:4f:a9:f2:c0:b2:
                    85:5d:47:14:d5:3a:18:1c:b0:3e:98:a5:f7:e6:ce:
                    d8:dc:84:bd:2d:3c:16:62:c0:4b:56:b5:07:58:1e:
                    78:84:01:5a:76:89:de:0c:51:68:3b:78:b2:dd:c9:
                    d4:64:e1:e4:d3:64:f7:19:29:28:8d:d3:3d:85:65:
                    61:2e:d2:21:97:ba:10:81:15:4b:a9:ca:f5:2c:dc:
                    21:28:0f:33:1c:92:17:a2:6c:c1:48:b0:e8:e7:ed:
                    c1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:56:57:A2:33:D6:3D:32:F6:EE:66:71:5C:BC:D0:73:2D:70:AE:96
            X509v3 Authority Key Identifier:
                keyid:07:FC:48:16:C8:3B:C1:35:87:8F:10:7D:DC:DF:43:38:1D:C9:3C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_xIFsg7wTWHjxB93N9DOB3JPPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:73:c0:42:92:6a:1e:6b:08:fb:e8:e9:5b:30:3a:56:18:5b:
         52:1c:6e:84:e5:d9:d5:98:27:d3:1a:fc:35:1d:81:46:e9:6e:
         4a:bb:03:4a:45:08:1f:cc:98:03:68:3c:bd:b9:43:b0:d5:c2:
         7d:54:2e:d7:44:74:9b:01:21:bc:09:ea:cf:ec:61:77:c0:e2:
         35:88:d9:f3:87:79:21:07:75:55:df:fb:29:ab:9c:6a:41:72:
         dc:6c:62:10:b0:59:2a:dc:a7:b9:b0:18:09:db:57:8d:72:ea:
         f3:43:89:64:20:3e:79:29:b2:9e:22:4c:04:29:1f:f2:19:f4:
         f1:1e:3c:1d:7e:2b:4d:a1:85:5b:08:a5:85:e5:5a:a8:87:1c:
         dc:6d:a0:81:43:1d:ff:64:99:ab:d8:37:98:fd:1f:85:57:d3:
         74:91:ad:94:b7:f6:08:c2:68:87:e0:81:4a:fe:b2:0a:60:b7:
         fe:69:2e:94:93:22:aa:05:1f:79:2c:46:76:7d:28:72:8b:28:
         98:20:bb:2a:16:57:31:d0:9d:36:42:40:a2:35:c3:5d:7e:92:
         f4:b0:ab:68:b7:f4:65:fd:8f:63:ee:58:e6:9a:b1:a5:6c:37:
         c2:13:d6:77:56:9a:b4:d4:9c:a9:6a:bb:80:83:50:77:3f:3b:
         d4:07:3e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:07:45 2026 by rpki-client