Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
File:                     M7chLm_l_PDueNzQRA32ngCq1Nw.mft (raw, json)
Hash identifier:          WR+aScgb67M/T7191/d/4v/JNv7VJTbTRUuBPjCRTVI=
Subject key identifier:   8B:66:AC:A2:D9:80:CE:51:E7:B5:00:1C:58:E9:5E:2B:AC:9A:75:A6
Authority key identifier: 33:B7:21:2E:6F:E5:FC:F0:EE:78:DC:D0:44:0D:F6:9E:00:AA:D4:DC
Certificate issuer:       /CN=33b7212e6fe5fcf0ee78dcd0440df69e00aad4dc
Certificate serial:       01A08CB1F0BA6984D163F471FC25FFD73E2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
Manifest number:          178D
Signing time:             Thu 10 Sep 2026 19:01:06 +0000
Manifest this update:     Thu 10 Sep 2026 19:01:06 +0000
Manifest next update:     Fri 11 Sep 2026 19:01:06 +0000
Files and hashes:         1: M7chLm_l_PDueNzQRA32ngCq1Nw.crl (hash: ASDCpix0bMsFXkhot14hURPzEJ7j25BQy9vB6fWmasQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:b1:f0:ba:69:84:d1:63:f4:71:fc:25:ff:d7:3e:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b7212e6fe5fcf0ee78dcd0440df69e00aad4dc
        Validity
            Not Before: Sep 10 19:01:06 2026 GMT
            Not After : Sep 11 19:01:06 2026 GMT
        Subject: CN=8b66aca2d980ce51e7b5001c58e95e2bac9a75a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:55:61:62:ee:5d:f0:b5:49:de:eb:4f:7c:f0:
                    34:05:29:b2:6b:b8:a6:72:c2:d8:56:25:65:3b:e0:
                    c8:bf:bd:c1:48:ff:fc:10:8e:af:f5:14:b3:7d:1a:
                    5e:d1:62:28:ed:df:58:da:fd:43:00:74:87:eb:b0:
                    f5:c1:d3:73:d3:d9:06:0b:e3:32:b7:ba:35:02:77:
                    0f:ff:9a:0d:47:75:88:e4:f5:6c:b3:b3:88:ca:de:
                    8b:91:57:04:11:8e:86:bb:d2:b8:27:a4:54:11:f8:
                    6a:f1:71:ba:dc:c1:d3:1d:4e:0e:2d:6c:7b:d7:2b:
                    e3:f6:e4:1f:c1:22:f3:bd:20:fc:c4:d4:f0:f0:c8:
                    99:9e:e3:76:b2:d2:02:a7:64:d0:2b:af:d8:16:0e:
                    e6:9d:52:3f:d4:35:f9:5d:d0:a6:90:63:fe:36:c1:
                    c2:53:1e:34:0c:c4:dc:86:8d:5a:28:70:2b:e9:a0:
                    a6:06:d6:a8:4a:b4:7a:0e:43:a6:b8:3b:41:8c:88:
                    db:7d:61:54:9b:26:68:4c:b7:a7:66:0f:28:df:a1:
                    a5:9d:02:d7:08:9c:32:48:fc:65:e4:7f:32:15:7d:
                    7e:f8:97:10:dd:32:da:cc:4f:1f:ca:df:19:33:51:
                    c6:13:46:e4:39:57:06:46:68:59:15:fb:be:c6:f2:
                    45:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:66:AC:A2:D9:80:CE:51:E7:B5:00:1C:58:E9:5E:2B:AC:9A:75:A6
            X509v3 Authority Key Identifier:
                keyid:33:B7:21:2E:6F:E5:FC:F0:EE:78:DC:D0:44:0D:F6:9E:00:AA:D4:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:81:9d:87:57:d7:54:8b:be:41:ad:59:27:25:ab:1f:8f:35:
         d2:73:3d:c3:8d:9f:e4:83:07:f1:76:28:11:9d:40:75:36:2f:
         52:49:a5:df:24:a3:c2:44:67:f9:ed:c8:35:2d:28:07:86:de:
         1b:31:cd:60:0f:63:b5:b4:16:6b:9f:bd:fb:e4:51:dc:26:23:
         5b:99:e1:49:df:45:06:a4:3d:04:8b:77:50:ec:0f:c0:65:22:
         c0:43:f3:eb:ee:50:ce:7d:f7:3a:44:96:75:49:f6:ee:05:13:
         6a:e7:6c:62:7f:c6:1a:77:8b:b5:7c:37:07:9f:c6:06:5e:7b:
         d5:c5:86:11:75:d8:82:98:c0:01:a1:a8:30:be:70:04:57:77:
         6e:59:63:4c:5d:34:37:9d:16:db:47:79:49:c5:fa:44:82:29:
         d1:ef:06:d4:ce:14:f8:a4:87:41:37:e8:9c:47:1a:07:1e:e3:
         ea:18:1b:48:68:37:8b:5c:da:94:7d:3d:c1:22:1b:11:e1:81:
         3f:63:78:f0:29:0e:e8:fa:59:9c:1d:72:75:ce:c3:5f:76:3c:
         62:21:76:9a:99:23:46:f8:82:1b:e1:8d:68:a2:1e:4c:99:44:
         2b:f2:7b:b6:dc:fe:a4:ac:b8:47:ab:8d:ff:35:6d:b4:2c:56:
         93:a5:e8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:11:38 2026 by rpki-client