Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
File:                     1II6TKTXaJe13f55iOJx_2gTGPI.mft (raw, json)
Hash identifier:          7zocOL5FjXfdE0UMEA5/fykipEQM9cWqGnvolLgDH4A=
Subject key identifier:   58:BF:1B:D9:99:07:43:7A:55:98:52:31:C0:F7:EF:B7:9F:16:46:97
Authority key identifier: D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2
Certificate issuer:       /CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
Certificate serial:       01A13F02A377E344F2E4D01225E5A115D8C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
Manifest number:          1789
Signing time:             Thu 15 Oct 2026 10:01:39 +0000
Manifest this update:     Thu 15 Oct 2026 10:01:39 +0000
Manifest next update:     Fri 16 Oct 2026 10:01:39 +0000
Files and hashes:         1: 1II6TKTXaJe13f55iOJx_2gTGPI.crl (hash: f8trxUYgUyPP8yeyxa3Ain50k/LMpCa9K9maiX7pytQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:02:a3:77:e3:44:f2:e4:d0:12:25:e5:a1:15:d8:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
        Validity
            Not Before: Oct 15 10:01:39 2026 GMT
            Not After : Oct 16 10:01:39 2026 GMT
        Subject: CN=58bf1bd99907437a55985231c0f7efb79f164697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6b:f1:cd:6f:63:fa:f2:04:43:e4:57:d9:4e:
                    fa:10:2d:e5:eb:1e:8c:7f:c2:23:b9:e7:72:ab:73:
                    ed:17:2a:40:64:b3:c6:22:f5:88:04:45:53:84:8b:
                    9d:3f:68:5b:eb:92:20:74:e9:73:36:2f:0c:60:e5:
                    86:80:b5:35:d4:46:ad:45:00:77:fc:36:4a:86:47:
                    58:4c:c9:8b:e7:60:f7:f1:4e:07:94:e2:71:34:ad:
                    72:c2:5b:21:58:d4:db:6e:6d:85:6e:a3:13:f6:d5:
                    e9:0a:a2:54:3b:60:f3:dd:0c:2d:85:8d:55:c0:20:
                    24:f8:4d:f5:55:30:25:35:64:79:0c:4c:84:3c:0d:
                    8d:c2:96:8f:a0:ad:40:dc:28:f8:33:46:4f:d4:38:
                    a6:fc:1d:0d:36:37:cf:be:f8:b3:40:68:5e:45:af:
                    58:91:84:1a:33:76:2a:bc:23:65:b9:1e:87:92:ae:
                    f7:a3:c4:f6:85:71:6d:55:94:0a:30:75:ba:77:09:
                    db:75:ec:2c:91:5e:a4:1e:92:f5:12:7b:f8:9f:dc:
                    05:4d:4e:a6:0e:a3:db:95:8c:1f:25:2b:f2:63:c7:
                    e6:bd:17:47:a9:ee:53:1f:09:b7:31:c3:a3:eb:a3:
                    3b:9c:db:51:2a:bb:0f:52:f8:69:e3:75:60:b4:e1:
                    98:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:BF:1B:D9:99:07:43:7A:55:98:52:31:C0:F7:EF:B7:9F:16:46:97
            X509v3 Authority Key Identifier:
                keyid:D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:79:40:62:81:c1:70:65:d0:b2:3a:84:85:a3:09:6c:f7:e5:
         b7:fd:7f:fc:18:c5:8e:c8:fb:77:ab:25:5a:4b:5a:01:63:5d:
         b7:4b:ac:70:e8:e8:ff:90:9a:78:1f:f0:9e:de:ab:a7:d2:a1:
         33:42:4f:85:31:62:d4:c5:50:57:72:3d:c1:4b:5b:e7:83:c1:
         ff:c3:c2:5e:29:2f:d3:8e:cd:63:d0:16:76:bf:aa:ab:90:ea:
         e3:2b:e6:84:11:ae:84:6a:7e:24:21:91:f9:29:9b:03:4d:4c:
         02:27:47:94:81:8e:34:ce:85:1b:b4:a9:88:26:c6:4d:27:3f:
         60:94:e0:1d:6b:0e:e7:7a:2f:41:88:be:68:d1:96:44:36:4a:
         1b:96:94:3f:df:1f:03:91:93:17:0c:e8:91:6e:53:ae:9f:da:
         68:03:4c:27:0f:4b:83:25:05:c8:f4:b2:30:0e:1d:38:8a:d8:
         56:6d:30:ed:56:4f:20:b9:0e:88:0d:3a:dc:97:af:73:fa:78:
         6e:9d:53:df:11:8f:5b:4c:e7:56:37:36:b4:a1:f9:9d:1b:7d:
         ba:ff:3e:cb:4d:d4:e9:46:45:41:52:2b:b9:d7:1f:b8:8d:9f:
         db:d4:43:d9:15:6c:96:27:04:ee:3d:cf:b5:26:49:81:17:69:
         77:d0:2c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:21:58 2026 by rpki-client