Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
File:                     7LLMRABmS6sLCRvDmYwN4f73FZs.mft (raw, json)
Hash identifier:          YLIjgJ8llCdkdhZFrPFfW7hb7DXMlgowxaytzjwta8I=
Subject key identifier:   47:B8:11:78:36:2C:2D:8E:12:BC:AE:CC:C7:B8:44:B3:0A:A6:33:B6
Authority key identifier: EC:B2:CC:44:00:66:4B:AB:0B:09:1B:C3:99:8C:0D:E1:FE:F7:15:9B
Certificate issuer:       /CN=ecb2cc4400664bab0b091bc3998c0de1fef7159b
Certificate serial:       01A00101446033544455471C80E6ACC8E435
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
Manifest number:          13C8
Signing time:             Fri 14 Aug 2026 16:00:55 +0000
Manifest this update:     Fri 14 Aug 2026 16:00:55 +0000
Manifest next update:     Sat 15 Aug 2026 16:00:55 +0000
Files and hashes:         1: 7LLMRABmS6sLCRvDmYwN4f73FZs.crl (hash: jDwmOW3CkGLHcR5Uql1rEcNc4OLNicvIfuJ/0T+HJGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:44:60:33:54:44:55:47:1c:80:e6:ac:c8:e4:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb2cc4400664bab0b091bc3998c0de1fef7159b
        Validity
            Not Before: Aug 14 16:00:55 2026 GMT
            Not After : Aug 15 16:00:55 2026 GMT
        Subject: CN=47b81178362c2d8e12bcaeccc7b844b30aa633b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:61:74:5a:7c:2e:e0:77:b6:94:33:e7:80:53:
                    6d:62:04:f0:c3:06:dc:98:a1:ba:e3:74:a6:c0:05:
                    bd:5d:16:5f:b7:4d:b3:ce:84:3a:f6:8c:2b:9e:ae:
                    2f:cd:04:d3:04:e0:ad:a1:cc:be:ca:f0:79:56:b1:
                    90:b2:87:79:84:10:59:5e:3e:84:bd:d3:d4:eb:16:
                    1e:32:b2:e5:fb:11:dd:31:81:0b:a4:00:fe:5f:a4:
                    a4:fd:68:ce:51:16:70:d6:cc:5a:91:1e:35:37:ec:
                    2d:2b:78:e2:89:25:51:41:22:cf:0e:93:e7:c1:f9:
                    b4:4b:70:43:90:4d:0e:e8:38:9b:c7:a5:a8:e8:e3:
                    a8:24:ee:2e:43:59:54:58:cc:83:8f:8c:8e:25:a5:
                    5a:ee:1b:fd:e7:4a:e4:f2:2c:0f:63:4f:62:3d:3c:
                    5a:f1:64:3f:20:ad:73:65:45:7c:51:61:57:6c:0b:
                    aa:82:48:da:81:41:3f:0f:b8:c3:20:6e:3d:fd:68:
                    d1:26:e8:db:86:69:43:a4:86:2c:7e:09:39:c3:a5:
                    88:6c:86:92:b6:ac:29:07:2c:ed:53:c0:93:f4:7d:
                    4d:43:a9:c7:cc:67:5c:22:df:22:5b:cf:a7:51:e9:
                    4e:19:91:f0:26:9a:f3:7e:77:66:6f:b5:8c:6a:2e:
                    ab:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B8:11:78:36:2C:2D:8E:12:BC:AE:CC:C7:B8:44:B3:0A:A6:33:B6
            X509v3 Authority Key Identifier:
                keyid:EC:B2:CC:44:00:66:4B:AB:0B:09:1B:C3:99:8C:0D:E1:FE:F7:15:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:be:58:76:72:04:6c:64:be:5b:20:6b:b1:b9:0f:c0:bb:4d:
         d5:12:bd:26:e3:40:65:90:0d:62:17:6e:21:06:7f:cf:ea:8e:
         18:76:d6:1b:09:d1:6a:ad:53:38:67:29:8f:3b:f4:1e:83:4f:
         c0:c2:16:5f:af:0a:a3:db:7d:8b:18:e1:03:8b:2e:be:16:53:
         fa:45:9a:b8:13:c7:12:7e:ad:6c:b4:66:38:27:e1:fd:33:35:
         e4:1a:2d:0f:3f:8b:76:5c:7a:e0:21:28:07:2a:87:f8:9a:fa:
         1c:3e:00:f2:ff:84:a4:65:a8:50:37:a0:da:e6:09:97:f4:54:
         36:cc:da:a7:1e:2c:6f:ce:37:e3:61:25:06:db:48:34:fe:0c:
         2d:e1:8c:f6:7e:31:ec:ca:25:ae:21:99:b6:c8:5d:04:5b:fc:
         34:0b:0d:35:ee:eb:f2:3c:1a:c5:8a:14:77:47:44:27:93:69:
         91:56:a0:e7:51:78:34:5c:71:60:21:83:55:fe:07:e7:30:7e:
         e4:05:29:1d:0d:b7:72:ae:77:21:93:c8:c3:cb:bc:4c:83:1a:
         37:35:34:0b:9e:5d:b0:91:17:0f:ee:9b:7f:18:d8:1d:33:af:
         a3:18:b8:7f:67:a3:bc:ed:65:65:f3:85:7f:38:9c:63:4c:03:
         d5:fd:9f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:51 2026 by rpki-client