Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft
File:                     7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft (raw, json)
Hash identifier:          ZZ2W5B5gmuZ+w3JxYccVzoAe+ETEHpOYYHHxIcgWvz8=
Subject key identifier:   45:43:A3:E5:E8:23:43:D4:0F:FC:BF:18:44:77:B6:D2:EC:A1:10:BF
Authority key identifier: ED:82:F3:23:35:93:82:D8:01:ED:0B:93:EC:1B:FA:03:0D:E6:36:22
Certificate issuer:       /CN=ed82f323359382d801ed0b93ec1bfa030de63622
Certificate serial:       01A16F804E5EF6A154E7C143943FAE40E36A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft
Manifest number:          0341
Signing time:             Sat 24 Oct 2026 20:00:41 +0000
Manifest this update:     Sat 24 Oct 2026 20:00:41 +0000
Manifest next update:     Sun 25 Oct 2026 20:00:41 +0000
Files and hashes:         1: 7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.crl (hash: 1iTRW8W8RA/6K0pnZWqqZ0pndRBDVofWwrHsBcjvBT4=)
                          2: HQhGJmI4T_DZ_xQg_JWTx_ZEOwY.asa (hash: 81awX6nGzaP5BhwCqw9DUWQmt4pEmO2yQ7dMfVdLs10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 15:57:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6f:80:4e:5e:f6:a1:54:e7:c1:43:94:3f:ae:40:e3:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed82f323359382d801ed0b93ec1bfa030de63622
        Validity
            Not Before: Oct 24 20:00:41 2026 GMT
            Not After : Oct 25 20:00:41 2026 GMT
        Subject: CN=4543a3e5e82343d40ffcbf184477b6d2eca110bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e5:5f:31:39:94:bf:73:8f:9c:44:39:43:fd:
                    22:41:94:3e:4c:60:4a:82:d0:2b:cb:2c:31:c3:29:
                    6b:f3:3b:fd:9a:b6:c4:05:5f:a1:dd:1a:0d:cf:6e:
                    29:8e:5a:b0:01:b5:b2:c8:0c:38:1a:27:04:0f:80:
                    04:fb:9f:d9:77:e5:3f:0a:94:09:cd:a5:33:ee:f7:
                    ba:b3:a5:ce:e4:dd:26:76:f4:eb:d3:be:aa:4b:d7:
                    8a:c5:4a:bd:bc:dc:04:f0:99:3c:1e:79:a6:a7:67:
                    eb:46:ae:dc:49:ac:f0:0b:5e:76:34:97:e4:04:02:
                    55:2d:db:89:b1:e1:a8:a8:93:1d:e1:67:bb:5c:f4:
                    1d:67:10:6c:fd:93:f8:db:f0:93:b7:bd:74:52:1c:
                    61:9d:aa:e7:da:1b:d2:a9:c1:16:26:de:cf:dc:bd:
                    61:5d:22:9f:65:3b:ec:53:b6:e4:40:8b:83:30:fd:
                    8c:38:a7:59:0f:91:b0:d9:ef:72:0b:24:53:64:ed:
                    aa:f7:14:9a:39:b6:69:e0:05:d5:3c:9f:cd:eb:cc:
                    10:8d:f8:c8:7e:88:22:12:c5:1a:c1:fe:b4:b6:1e:
                    3b:0b:94:94:71:f3:f6:6c:27:62:6b:5d:64:da:73:
                    e0:93:c0:18:16:48:aa:68:b8:e8:1d:60:da:fa:54:
                    eb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:43:A3:E5:E8:23:43:D4:0F:FC:BF:18:44:77:B6:D2:EC:A1:10:BF
            X509v3 Authority Key Identifier:
                keyid:ED:82:F3:23:35:93:82:D8:01:ED:0B:93:EC:1B:FA:03:0D:E6:36:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:a8:52:65:b9:ff:42:b2:b3:ac:63:15:eb:4e:bc:e5:df:17:
         59:7a:8d:f7:de:61:5b:14:b9:87:3f:88:d4:96:6e:a6:2d:e3:
         b9:d4:24:ba:c0:8c:03:fa:78:e2:51:3a:2e:13:e9:bb:44:b6:
         d6:49:3d:53:c0:3c:64:61:98:ea:c9:ce:8f:75:3b:6d:1c:08:
         8f:40:8c:e8:66:10:a8:60:19:2c:56:d0:8e:bd:7f:4c:5b:0c:
         ef:d4:58:4d:70:f3:dc:ed:8f:49:bb:9f:64:37:f3:64:36:07:
         e6:97:d3:0c:65:a2:b6:1c:3d:50:2e:ec:9b:6a:85:3f:b7:9f:
         ee:df:b8:69:ba:b4:ae:2d:d0:11:57:34:88:d7:ee:9e:7e:c6:
         3b:7d:6c:7b:63:33:ee:44:43:dd:e7:ef:04:1c:51:74:01:2d:
         96:32:3d:4b:7f:ae:f3:69:72:eb:67:29:24:b4:08:c9:7e:4e:
         90:bb:ea:86:cf:b0:ef:dc:99:9f:f5:1c:3c:ee:95:f6:fb:c9:
         2a:a2:a2:40:87:76:21:21:a7:03:d2:e0:c9:e0:2d:8e:cf:8c:
         03:93:2b:88:6f:9d:ce:a0:33:3d:1c:b7:a2:20:d9:bb:d2:bd:
         f3:a8:c3:37:6c:5f:c5:f7:1b:b1:97:a1:a6:3e:00:95:8d:65:
         33:0d:f3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 01:34:30 2026 by rpki-client