Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
File:                     ACY1rIzpE_p8zV123YYuJIxxy_M.mft (raw, json)
Hash identifier:          lgO8N8prCbxj49I4mo840FIKAtKQhyTWTjFPqxyELL8=
Subject key identifier:   2E:F3:CF:FE:7A:73:81:2A:A7:67:33:1F:EB:2C:BF:97:09:9C:08:FB
Authority key identifier: 00:26:35:AC:8C:E9:13:FA:7C:CD:5D:76:DD:86:2E:24:8C:71:CB:F3
Certificate issuer:       /CN=002635ac8ce913fa7ccd5d76dd862e248c71cbf3
Certificate serial:       01A13E26712463F4E04B4ACCD1CA3C0E1B7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ACY1rIzpE_p8zV123YYuJIxxy_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
Manifest number:          0A15
Signing time:             Thu 15 Oct 2026 06:01:09 +0000
Manifest this update:     Thu 15 Oct 2026 06:01:09 +0000
Manifest next update:     Fri 16 Oct 2026 06:01:09 +0000
Files and hashes:         1: ACY1rIzpE_p8zV123YYuJIxxy_M.crl (hash: BWrhey2xaiIjAWHsH5sduIptZAfpIdLdrJtlv6TAxwY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ACY1rIzpE_p8zV123YYuJIxxy_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 06:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:26:71:24:63:f4:e0:4b:4a:cc:d1:ca:3c:0e:1b:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002635ac8ce913fa7ccd5d76dd862e248c71cbf3
        Validity
            Not Before: Oct 15 06:01:09 2026 GMT
            Not After : Oct 16 06:01:09 2026 GMT
        Subject: CN=2ef3cffe7a73812aa767331feb2cbf97099c08fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8a:89:62:09:b7:a8:ac:cd:72:52:69:5d:c8:
                    9b:67:35:ae:4a:97:b9:91:86:44:48:de:eb:f5:56:
                    9d:2a:cd:49:74:5a:e9:36:a2:1f:58:1c:a2:15:b2:
                    87:e0:9a:3f:c0:20:99:09:b0:b8:f2:27:aa:fe:c9:
                    9f:c8:c1:57:c9:f1:a5:a9:c8:ee:50:92:c3:84:e7:
                    33:7b:eb:c0:0f:59:62:9a:9d:2c:6e:83:70:b9:87:
                    dc:8b:a1:31:40:e5:14:19:33:43:f9:ff:44:93:80:
                    93:78:3d:fe:fd:e4:be:10:45:92:7f:75:f8:48:d7:
                    68:e8:fa:f0:3b:f2:c6:20:d5:38:97:64:57:5c:20:
                    05:54:89:1f:e9:b1:0c:be:34:e4:09:64:63:d4:9a:
                    73:60:21:58:4b:b3:c9:d6:a7:76:e2:71:5c:81:87:
                    78:6c:6a:c3:ab:a8:bc:08:70:9e:85:ef:5d:a3:00:
                    48:af:cb:60:9c:33:da:07:db:06:44:cb:f0:a0:92:
                    32:80:79:2e:a3:5d:46:3a:96:74:0b:74:f1:e3:dd:
                    78:2d:22:80:4b:2b:62:56:b7:c7:78:99:03:11:bd:
                    01:81:8e:8a:1c:f3:9b:d2:9a:7d:40:1e:8b:87:83:
                    8a:cb:c4:1e:dd:ad:e4:e7:c7:18:8c:49:ef:52:23:
                    ce:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F3:CF:FE:7A:73:81:2A:A7:67:33:1F:EB:2C:BF:97:09:9C:08:FB
            X509v3 Authority Key Identifier:
                keyid:00:26:35:AC:8C:E9:13:FA:7C:CD:5D:76:DD:86:2E:24:8C:71:CB:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACY1rIzpE_p8zV123YYuJIxxy_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:6a:67:00:5c:8b:da:8b:df:26:fe:f3:8f:f9:4e:fa:fa:07:
         49:1c:b1:6d:9b:c4:9a:74:aa:02:59:93:67:ac:55:18:0d:31:
         ee:7c:bf:19:48:fa:97:7c:01:63:70:42:93:24:fe:7d:8d:b3:
         f5:35:cf:67:39:df:2f:4c:ce:68:da:20:a5:07:86:4c:cf:38:
         6a:99:85:00:66:38:dc:7e:30:15:cc:85:cd:9f:db:bd:a6:b6:
         4f:de:a6:59:ef:85:91:3d:dc:6f:c1:dc:15:b9:f5:db:a7:0d:
         c8:bb:be:d8:b7:66:38:de:99:7b:59:2c:65:69:55:05:cb:90:
         c4:1b:8e:80:7e:3b:0e:a8:6a:6a:b8:d6:a8:26:4c:12:36:fb:
         5b:9e:a3:ab:8a:d6:46:03:78:dc:d1:5b:6d:64:b7:cd:f7:a2:
         be:d3:04:65:77:94:ee:4b:a6:75:c0:8f:71:e5:03:ed:3c:ee:
         fb:88:0c:31:d7:3a:be:09:38:70:8c:d0:03:c7:d7:6c:f5:31:
         f3:16:2b:c4:fb:f8:b7:68:28:9b:df:6a:89:fd:de:8a:17:d1:
         66:f9:a5:26:85:6e:ca:65:28:aa:29:06:f7:4f:e3:68:6c:a8:
         8e:d2:31:a1:84:44:1b:8c:33:15:b7:61:61:6d:b9:02:92:87:
         3f:25:5b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:21:51 2026 by rpki-client