Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
File:                     C7M4e-bSDUos4TzAkuh_d3uLmVY.mft (raw, json)
Hash identifier:          TWqsh6sl7LZiWzbSclrpcFVROtNfSdPASNlJ+UOovNo=
Subject key identifier:   78:FA:A3:E6:7B:9C:77:70:34:38:85:9F:D4:DC:88:71:63:9A:C7:3C
Authority key identifier: 0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56
Certificate issuer:       /CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956
Certificate serial:       01A13F02E3B9C801B0B4C6510E38A8ACC682
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
Manifest number:          1579
Signing time:             Thu 15 Oct 2026 10:01:56 +0000
Manifest this update:     Thu 15 Oct 2026 10:01:56 +0000
Manifest next update:     Fri 16 Oct 2026 10:01:56 +0000
Files and hashes:         1: C7M4e-bSDUos4TzAkuh_d3uLmVY.crl (hash: AGrn1hMt9OXMzlAz6nkDnLUPOV88gLRWyWTBhcnTH2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:02:e3:b9:c8:01:b0:b4:c6:51:0e:38:a8:ac:c6:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956
        Validity
            Not Before: Oct 15 10:01:56 2026 GMT
            Not After : Oct 16 10:01:56 2026 GMT
        Subject: CN=78faa3e67b9c77703438859fd4dc8871639ac73c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a7:5f:91:1f:78:59:b4:46:47:35:1f:ea:85:
                    77:86:1c:d8:47:45:4d:ca:06:94:14:e5:15:42:32:
                    ac:26:14:27:56:85:a9:83:05:26:b3:a4:29:cb:02:
                    1b:67:38:42:79:94:96:39:44:6f:cf:7d:dd:8f:43:
                    97:b6:4d:95:2e:d5:e0:ec:05:b5:fd:93:a9:70:bf:
                    2c:37:2c:55:66:80:3a:7e:fc:5d:46:35:b1:04:e4:
                    e7:e4:2b:a9:88:b1:07:89:f0:62:0d:ee:43:54:d9:
                    24:4d:ae:0b:90:11:b3:bf:40:a5:be:d4:fb:16:69:
                    33:42:08:a3:1a:1e:7d:4a:e9:ca:9c:44:72:ef:71:
                    da:bd:c5:24:69:41:52:49:34:1d:65:d1:6b:42:a3:
                    c0:03:a8:ec:9d:b6:21:e7:44:5d:09:28:0e:93:24:
                    b4:fa:19:c5:1d:87:96:67:a4:05:98:aa:a5:23:9a:
                    2b:e9:b9:40:52:74:82:7d:94:74:dd:6d:ae:29:89:
                    e6:1b:cd:59:4a:f9:af:24:aa:5b:30:bc:c8:4b:67:
                    1b:52:f1:5e:a6:a5:89:fd:1e:c6:54:88:b1:42:68:
                    a3:f2:2c:8c:93:8c:93:83:d3:25:5c:bf:a0:ea:4b:
                    b1:57:00:2e:34:77:ea:a9:36:5d:eb:a2:cd:e5:ca:
                    63:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:FA:A3:E6:7B:9C:77:70:34:38:85:9F:D4:DC:88:71:63:9A:C7:3C
            X509v3 Authority Key Identifier:
                keyid:0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:5d:03:b3:01:fd:74:19:79:ee:49:aa:eb:97:15:86:6d:2f:
         49:cf:7b:80:6a:61:38:4c:58:77:61:64:27:37:35:2a:ef:3a:
         16:2b:9f:c8:9b:d1:35:8c:df:5b:8c:53:b9:d8:51:e1:48:b1:
         a8:5f:f3:ad:f3:02:eb:b4:33:ad:72:ac:ff:ce:63:44:ea:2f:
         5f:62:dd:ec:e2:df:fa:c1:5b:ba:6e:1e:23:e5:dc:5f:e6:63:
         15:5a:bf:46:24:20:25:9c:af:6d:8a:81:86:78:34:17:f9:6a:
         05:72:29:ea:28:20:34:2f:e2:67:96:9f:c8:f3:fe:b3:03:6e:
         1f:a7:fe:22:a1:00:cd:93:4c:7b:7e:e5:86:d0:2b:e1:02:7c:
         e6:ab:c5:27:fc:eb:73:0e:c1:c4:d2:fd:fb:be:d0:64:6c:d6:
         a2:f4:39:28:a0:2d:81:02:fc:0f:d5:45:d7:74:19:c6:a1:e0:
         10:0e:dc:36:8b:80:84:cc:23:d3:c9:30:6e:17:0e:e3:9c:e4:
         e8:7f:ed:e7:20:68:64:1e:4f:b8:35:9e:6b:07:9e:ed:c6:6e:
         ba:ce:c8:c1:4c:fb:da:db:5e:14:82:ff:40:3e:1c:0b:21:19:
         7e:8e:26:d7:2d:de:6a:7e:af:2b:ce:fd:3f:fe:ab:0a:ff:9e:
         a2:60:6a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:14:37 2026 by rpki-client