Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.mft
File:                     7B1ykL_RvhI_vgsHX9UNz2RsT3Y.mft (raw, json)
Hash identifier:          TlgNp7J65ceLh2xc3yXu9DEvoTDPdXOJfpqkZB5B37U=
Subject key identifier:   9C:E2:00:4C:FE:61:E5:E2:0F:63:62:BE:E1:6F:37:BE:36:D1:68:B7
Authority key identifier: EC:1D:72:90:BF:D1:BE:12:3F:BE:0B:07:5F:D5:0D:CF:64:6C:4F:76
Certificate issuer:       /CN=ec1d7290bfd1be123fbe0b075fd50dcf646c4f76
Certificate serial:       01A14ACFA898BDF654BE85577D6AF4E53C57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.mft
Manifest number:          0C28
Signing time:             Sat 17 Oct 2026 17:01:25 +0000
Manifest this update:     Sat 17 Oct 2026 17:01:25 +0000
Manifest next update:     Sun 18 Oct 2026 17:01:25 +0000
Files and hashes:         1: 7B1ykL_RvhI_vgsHX9UNz2RsT3Y.crl (hash: kEIFFzJbBHCey/9nI2WL270UfP6oz7Tx/euUEOQASDw=)
                          2: 7R0KMEDBzBiG-gwWxqL3ap95Tkg.asa (hash: 592gBxhDCiVzB3YFsIoN3WQGZ1tcTFUQSdepB9YadmA=)
                          3: fgHkP2YUSzuNyvGW8zK9eGXNEYY.roa (hash: SUqfyWSJbDnWk7tr9aXaMYt6tAtE7VJWtQ/R4/BKvSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4a:cf:a8:98:bd:f6:54:be:85:57:7d:6a:f4:e5:3c:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec1d7290bfd1be123fbe0b075fd50dcf646c4f76
        Validity
            Not Before: Oct 17 17:01:25 2026 GMT
            Not After : Oct 18 17:01:25 2026 GMT
        Subject: CN=9ce2004cfe61e5e20f6362bee16f37be36d168b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c6:b5:2a:e0:b9:1e:15:76:e1:96:dd:8b:0d:
                    f4:01:fa:00:d3:64:77:c7:27:22:92:1b:e6:2c:4e:
                    4e:62:ef:98:8d:a7:f9:95:3f:52:52:4a:a0:8c:be:
                    21:62:a7:9c:fb:58:bd:cc:39:eb:49:5b:fe:3f:01:
                    71:65:f0:cb:76:04:f8:f1:50:3b:22:24:79:0b:55:
                    a4:1a:f1:0f:e5:cf:f5:e6:b0:a5:6d:14:b3:cd:60:
                    8f:a0:86:84:dc:d6:81:f3:f7:b9:de:80:8a:d5:95:
                    ff:6c:23:e2:b9:ea:0c:3d:81:ab:1c:3b:1f:4f:29:
                    ad:a3:fe:3e:16:cb:23:74:d7:5a:51:95:bc:0d:d9:
                    85:6d:8d:f1:30:a6:b8:ef:25:c7:75:cc:e3:5b:e9:
                    59:57:5b:fd:48:13:72:90:47:5a:b3:06:d5:13:52:
                    c3:2b:5c:44:d2:4c:89:18:c2:00:5b:ab:de:23:2e:
                    a6:26:d6:8c:e2:90:32:ec:16:cd:60:dd:e0:67:0e:
                    c6:3d:cd:85:13:4e:40:44:86:81:52:bf:05:3e:40:
                    1c:25:4a:9f:d3:5e:ba:32:03:09:60:76:1c:92:5d:
                    3c:4b:82:1f:4f:aa:84:60:74:29:bd:62:6e:3e:24:
                    bd:70:29:e2:90:2c:6f:02:91:62:ee:27:0d:b9:41:
                    15:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E2:00:4C:FE:61:E5:E2:0F:63:62:BE:E1:6F:37:BE:36:D1:68:B7
            X509v3 Authority Key Identifier:
                keyid:EC:1D:72:90:BF:D1:BE:12:3F:BE:0B:07:5F:D5:0D:CF:64:6C:4F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:2b:ef:17:ea:aa:b9:1a:a1:60:e1:1f:57:41:93:e0:15:ab:
         c7:87:f4:86:ed:51:28:87:7f:46:1b:9d:b4:34:93:4b:0d:f4:
         24:4b:87:57:90:84:e8:cb:23:8a:05:ba:8b:fa:66:a4:42:ab:
         8f:0d:3f:00:53:c3:d3:47:30:e1:5c:2d:d6:b0:05:dd:30:33:
         0b:4e:ff:5b:3c:c5:08:3e:e9:91:d7:1e:70:c0:66:32:a5:f6:
         bb:a0:99:e9:ac:a5:d7:dc:d8:72:5f:04:35:b5:9f:dd:b9:35:
         61:41:e0:01:55:fd:7a:0d:53:83:0a:2e:e8:12:e7:3a:57:e6:
         2d:09:e7:5d:a4:1f:04:c9:71:9d:d4:05:54:17:42:b9:04:48:
         5a:9c:2c:46:99:22:d6:79:a3:43:4f:27:b1:25:15:28:c8:d3:
         cf:d5:70:66:4d:14:7f:d3:95:60:9a:e3:64:10:18:a1:7c:ca:
         48:0c:67:32:61:14:3c:f4:1c:dd:28:6d:98:ca:88:fb:08:5b:
         41:28:f3:4b:e0:63:09:9c:b6:80:7f:e7:26:50:b0:08:fd:9e:
         16:47:f5:ba:e1:c1:73:25:1c:08:9e:14:bb:96:49:8e:cc:8e:
         4b:ad:19:c9:97:07:e0:f2:6d:07:00:d1:dd:f4:10:7e:b9:82:
         64:d7:e3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 19:26:42 2026 by rpki-client