Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft
File:                     078oufsovtkGaqQRPLi-Bl7c9BI.mft (raw, json)
Hash identifier:          VhS7azfLQk+mJ7QK4+dQVA3cU75s070qY9OVm8vE3AQ=
Subject key identifier:   39:54:87:93:C1:11:DF:C0:39:7E:C5:50:1F:6A:33:51:D8:1C:B3:0D
Authority key identifier: D3:BF:28:B9:FB:28:BE:D9:06:6A:A4:11:3C:B8:BE:06:5E:DC:F4:12
Certificate issuer:       /CN=d3bf28b9fb28bed9066aa4113cb8be065edcf412
Certificate serial:       01A0005D11B6234994C543D2E77616120912
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/078oufsovtkGaqQRPLi-Bl7c9BI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft
Manifest number:          1488
Signing time:             Fri 14 Aug 2026 13:01:34 +0000
Manifest this update:     Fri 14 Aug 2026 13:01:34 +0000
Manifest next update:     Sat 15 Aug 2026 13:01:34 +0000
Files and hashes:         1: 078oufsovtkGaqQRPLi-Bl7c9BI.crl (hash: WxmF/v4imVRf/vWVi4rZxjOSgYmVobuNUHYKvjQKKJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/078oufsovtkGaqQRPLi-Bl7c9BI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5d:11:b6:23:49:94:c5:43:d2:e7:76:16:12:09:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3bf28b9fb28bed9066aa4113cb8be065edcf412
        Validity
            Not Before: Aug 14 13:01:34 2026 GMT
            Not After : Aug 15 13:01:34 2026 GMT
        Subject: CN=39548793c111dfc0397ec5501f6a3351d81cb30d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cb:c8:e1:57:4a:68:25:8c:86:54:60:db:d7:
                    86:e7:32:98:90:46:19:d3:0b:4a:05:16:90:ad:fe:
                    72:66:e9:fb:3a:cb:43:5d:27:91:e8:61:f5:85:2b:
                    c5:55:39:06:a1:cc:e8:71:06:fd:9e:b5:68:d7:f6:
                    5b:22:e2:eb:77:93:80:c2:ac:73:83:b1:1a:38:32:
                    92:c2:a2:5c:b6:db:9a:2a:3f:84:1f:40:48:cd:cc:
                    aa:5e:89:ff:57:ec:47:46:ca:33:e3:f5:a5:68:c3:
                    80:d3:7b:e6:0b:9b:9d:7c:35:51:b6:51:93:7e:51:
                    f1:c9:b8:0d:3c:f0:f1:65:58:78:65:e2:f9:10:26:
                    2b:6f:65:fa:8f:38:e9:11:e9:4d:ad:f8:68:27:4a:
                    4c:16:f6:de:87:f5:5e:dd:23:79:28:93:4a:d0:8d:
                    88:09:03:2c:b6:b6:56:82:da:8d:73:e8:e3:6f:35:
                    62:64:1e:33:4d:8d:e5:50:1d:c9:9a:78:13:22:56:
                    f9:25:e3:4e:93:f6:25:fa:f2:c3:27:b5:47:b9:af:
                    d6:2b:65:23:5b:bf:fb:aa:78:1b:2d:4a:93:e4:82:
                    57:0a:39:f8:4a:4e:df:b3:6e:20:b1:5d:ba:f2:7b:
                    6c:71:6a:76:35:a9:2a:14:e8:ee:9c:7b:bd:6f:2f:
                    5f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:54:87:93:C1:11:DF:C0:39:7E:C5:50:1F:6A:33:51:D8:1C:B3:0D
            X509v3 Authority Key Identifier:
                keyid:D3:BF:28:B9:FB:28:BE:D9:06:6A:A4:11:3C:B8:BE:06:5E:DC:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/078oufsovtkGaqQRPLi-Bl7c9BI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:04:80:2d:51:d0:29:6c:4c:99:38:a0:04:1d:b4:09:72:d1:
         ca:c6:2c:cd:09:80:89:9e:7e:ce:37:06:96:d8:77:96:64:a7:
         72:ca:de:de:f8:25:3b:cf:f0:9b:c7:b8:ad:a1:0d:92:a4:3d:
         36:af:aa:fa:1a:82:2d:ed:2b:0c:70:8a:88:fe:bc:44:97:d1:
         f2:0e:87:b0:27:85:c4:88:25:45:6c:60:8c:a8:4e:22:3e:ff:
         dd:a9:92:8a:f5:00:04:98:ef:5d:08:b1:dc:63:b0:4e:29:d8:
         d0:62:6a:bd:29:66:24:36:92:77:2a:be:58:c1:5f:d4:9a:de:
         35:c6:8d:21:42:52:36:23:93:ac:c0:97:0e:d1:27:cd:a5:18:
         55:49:bd:b9:c9:04:ce:55:a4:e7:6b:9c:0d:dd:f0:fd:07:7d:
         4c:14:0c:19:33:98:2a:01:a8:16:e7:fb:29:f3:78:b0:e4:69:
         94:b9:eb:e8:02:97:ea:60:1d:84:f6:32:bc:c1:0b:47:33:9a:
         4f:c1:66:30:da:79:51:de:bd:20:ef:5b:07:b2:e1:49:1c:1b:
         d8:20:f3:45:21:a4:b9:c6:31:00:56:f7:76:f4:3d:ea:7e:6e:
         95:72:ab:7a:19:ca:64:ca:09:25:ff:61:b4:e3:bc:6e:4e:d0:
         7a:88:61:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:20:27 2026 by rpki-client