Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
File:                     7LLMRABmS6sLCRvDmYwN4f73FZs.mft (raw, json)
Hash identifier:          ZrarshwRKTcefjfcJB7pPxgFg7dzsPXPwkJgjW4E5WM=
Subject key identifier:   BC:66:F4:9E:8C:57:7F:16:0C:89:71:C3:D8:08:14:34:5F:93:94:3F
Authority key identifier: EC:B2:CC:44:00:66:4B:AB:0B:09:1B:C3:99:8C:0D:E1:FE:F7:15:9B
Certificate issuer:       /CN=ecb2cc4400664bab0b091bc3998c0de1fef7159b
Certificate serial:       01A13FA77396EA4482C0E72596A91A9FE6AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
Manifest number:          146D
Signing time:             Thu 15 Oct 2026 13:01:40 +0000
Manifest this update:     Thu 15 Oct 2026 13:01:40 +0000
Manifest next update:     Fri 16 Oct 2026 13:01:40 +0000
Files and hashes:         1: 7LLMRABmS6sLCRvDmYwN4f73FZs.crl (hash: F5RjX26bxznIZK+m53xAwJBIrC33LKF48XZjbjOudPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 13:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:a7:73:96:ea:44:82:c0:e7:25:96:a9:1a:9f:e6:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb2cc4400664bab0b091bc3998c0de1fef7159b
        Validity
            Not Before: Oct 15 13:01:40 2026 GMT
            Not After : Oct 16 13:01:40 2026 GMT
        Subject: CN=bc66f49e8c577f160c8971c3d80814345f93943f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1a:e8:d1:0a:8b:5c:6d:9e:70:89:9e:70:25:
                    6f:e2:b5:b2:79:f4:3f:ff:af:b6:cf:dd:8e:4d:3a:
                    f6:43:10:0b:d1:2f:44:47:34:12:3f:69:73:8a:f6:
                    f9:41:22:91:67:b8:6d:9f:6e:30:35:a2:cc:6d:1a:
                    99:80:b9:7a:d9:ac:ae:2b:82:dc:bc:2a:39:4c:5d:
                    0b:7f:eb:b1:72:19:f9:48:ec:ba:b2:3a:86:d5:8a:
                    14:bd:04:86:7e:4c:89:78:68:d1:a5:ba:49:98:8b:
                    f5:f2:43:7f:3c:b2:9a:4f:d9:a1:81:13:c8:e5:77:
                    e2:44:68:22:dc:f9:77:85:42:c2:a7:8a:ae:c6:e6:
                    3e:34:03:d0:8a:0e:56:99:e7:6b:17:e3:3f:0a:ff:
                    32:0a:a7:ee:2e:56:55:1b:90:99:bd:db:ec:e2:c5:
                    37:3a:a1:76:08:be:ba:c9:9d:93:ab:aa:6a:63:ff:
                    18:72:58:24:13:9b:75:8c:d2:b3:73:70:7b:df:69:
                    c5:81:19:4b:4f:1d:de:f9:99:f6:5e:14:60:cc:7e:
                    a2:37:4f:55:cd:5a:40:bd:3d:a4:ea:09:89:39:1f:
                    ec:51:11:81:7b:27:89:fb:39:36:dd:97:a1:37:41:
                    e0:c9:9a:8d:cb:9a:ed:7c:00:e8:1c:56:22:df:d4:
                    f3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:66:F4:9E:8C:57:7F:16:0C:89:71:C3:D8:08:14:34:5F:93:94:3F
            X509v3 Authority Key Identifier:
                keyid:EC:B2:CC:44:00:66:4B:AB:0B:09:1B:C3:99:8C:0D:E1:FE:F7:15:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:53:b2:eb:cf:56:0e:81:01:40:83:32:24:a9:32:3b:e0:35:
         d2:e4:91:e8:06:39:dd:ab:e9:12:7c:5f:61:eb:aa:10:53:62:
         0a:4c:36:00:b7:a6:8f:ed:c0:eb:98:64:a4:9a:dc:5c:cf:63:
         28:e1:b4:f8:fa:15:f7:f1:4a:a4:52:51:2a:5d:29:31:68:44:
         e0:a2:4e:ab:73:4e:b9:5c:f1:cb:5e:23:0c:8a:13:c8:c2:09:
         20:e5:55:aa:9f:0d:53:94:36:e6:0c:f1:20:12:a7:92:66:0c:
         06:dd:53:d3:c2:7c:34:fc:09:c3:c5:7a:a3:36:5a:7e:08:76:
         ed:45:fe:09:ae:d0:2b:69:9e:0b:65:46:9d:23:4c:47:b9:7b:
         e1:9b:72:97:9b:c6:6d:a7:85:b7:42:16:27:c6:8e:ec:c3:62:
         df:2a:93:6a:28:f5:b0:d2:77:b0:fd:98:7a:eb:68:ca:28:f4:
         c4:0f:a1:6a:32:45:cf:57:f4:e8:49:c1:47:c8:9a:72:3a:3e:
         6e:bf:3f:96:2e:62:29:ad:7a:04:83:18:31:f9:1a:f3:93:d2:
         a6:0a:9c:e2:01:d4:ab:da:68:43:e3:f6:68:73:21:5e:11:7e:
         dc:ff:72:e5:f1:f4:03:65:ee:72:d1:20:be:11:03:cd:3e:3a:
         dc:f3:60:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/p3OW6kSCwOcllqkan+asMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYjJjYzQ0MDA2NjRiYWIwYjA5MWJjMzk5OGMwZGUxZmVm
NzE1OWIwHhcNMjYxMDE1MTMwMTQwWhcNMjYxMDE2MTMwMTQwWjAzMTEwLwYDVQQD
EyhiYzY2ZjQ5ZThjNTc3ZjE2MGM4OTcxYzNkODA4MTQzNDVmOTM5NDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhro0QqLXG2ecImecCVv4rWyefQ/
/6+2z92OTTr2QxAL0S9ERzQSP2lzivb5QSKRZ7htn24wNaLMbRqZgLl62ayuK4Lc
vCo5TF0Lf+uxchn5SOy6sjqG1YoUvQSGfkyJeGjRpbpJmIv18kN/PLKaT9mhgRPI
5XfiRGgi3Pl3hULCp4quxuY+NAPQig5WmedrF+M/Cv8yCqfuLlZVG5CZvdvs4sU3
OqF2CL66yZ2Tq6pqY/8YclgkE5t1jNKzc3B732nFgRlLTx3e+Zn2XhRgzH6iN09V
zVpAvT2k6gmJOR/sURGBeyeJ+zk23ZehN0HgyZqNy5rtfADoHFYi39TzIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxm9J6MV38WDIlxw9gIFDRfk5Q/MB8GA1UdIwQY
MBaAFOyyzEQAZkurCwkbw5mMDeH+9xWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0xMTVJBQm1TNnNMQ1J2RG1Zd040ZjczRlpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jY2MzODUtMjBlMS00YzY4LTliYTEt
ODk4NDZkZGQ5NDFjLzEvN0xMTVJBQm1TNnNMQ1J2RG1Zd040ZjczRlpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9jY2MzODUtMjBlMS00YzY4LTliYTEtODk4NDZkZGQ5NDFj
LzEvN0xMTVJBQm1TNnNMQ1J2RG1Zd040ZjczRlpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB1Oy689W
DoEBQIMyJKkyO+A10uSR6AY53avpEnxfYeuqEFNiCkw2ALemj+3A65hkpJrcXM9j
KOG0+PoV9/FKpFJRKl0pMWhE4KJOq3NOuVzxy14jDIoTyMIJIOVVqp8NU5Q25gzx
IBKnkmYMBt1T08J8NPwJw8V6ozZafgh27UX+Ca7QK2meC2VGnSNMR7l74Ztyl5vG
baeFt0IWJ8aO7MNi3yqTaij1sNJ3sP2Yeutoyij0xA+hajJFz1f06EnBR8iacjo+
br8/li5iKa16BIMYMfka85PSpgqc4gHUq9poQ+P2aHMhXhF+3P9y5fH0A2XuctEg
vhEDzT463PNgyQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 19:44:49 2026 by rpki-client