Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
File:                     7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft (raw, json)
Hash identifier:          BukeUqtK+/EgxuJ+bKBJOHVus5jLLf0/UcL7k59MVX8=
Subject key identifier:   2F:EC:59:DA:65:33:AC:2A:68:D8:4B:54:4D:EB:3E:F0:A4:D5:28:D5
Authority key identifier: EF:FC:8A:6F:3C:44:B8:ED:D1:77:FE:51:A5:99:91:58:B8:DC:F8:19
Certificate issuer:       /CN=effc8a6f3c44b8edd177fe51a5999158b8dcf819
Certificate serial:       01A11B6355DE379A000D672DC1E1FCB710E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
Manifest number:          12E9
Signing time:             Thu 08 Oct 2026 12:00:57 +0000
Manifest this update:     Thu 08 Oct 2026 12:00:57 +0000
Manifest next update:     Fri 09 Oct 2026 12:00:57 +0000
Files and hashes:         1: 7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl (hash: 1gerooLtTwRW2JogQFz0JQgp45t/NsQ87r1r2gDvbnI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1b:63:55:de:37:9a:00:0d:67:2d:c1:e1:fc:b7:10:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=effc8a6f3c44b8edd177fe51a5999158b8dcf819
        Validity
            Not Before: Oct  8 12:00:57 2026 GMT
            Not After : Oct  9 12:00:57 2026 GMT
        Subject: CN=2fec59da6533ac2a68d84b544deb3ef0a4d528d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2f:5d:1e:e3:65:f6:de:98:f6:30:c7:ca:98:
                    62:4a:97:4a:6a:16:9d:2f:7e:f9:d5:6d:7c:9a:65:
                    f9:46:7d:3b:8a:0a:34:42:a1:23:50:58:c6:6b:65:
                    d6:ab:fc:f1:f2:b4:c4:be:e0:ec:ac:3f:b4:74:40:
                    6b:95:b2:22:26:0b:0e:c4:63:e2:5d:01:94:e1:d1:
                    50:64:af:0a:b8:92:ee:72:85:69:64:78:76:24:77:
                    61:35:3d:2e:5c:e1:92:2f:9e:3a:b8:ed:9f:12:28:
                    fb:ef:f4:6a:ab:34:98:c4:18:cf:b3:f6:01:2e:57:
                    a7:d6:8d:a5:29:c7:c7:19:a2:58:d4:37:11:af:38:
                    bd:ea:1e:59:a9:4a:77:74:f9:b6:49:1f:38:e9:a9:
                    dc:85:f9:b4:0c:c4:68:36:57:39:27:be:cc:e9:9f:
                    70:7b:ee:f5:42:66:52:fb:18:5f:45:6d:8e:98:8b:
                    89:00:63:4e:10:3e:dc:29:2a:7e:3a:93:62:6b:33:
                    0f:20:ce:0b:16:c0:8d:c8:71:06:86:e0:f7:1c:90:
                    df:00:7c:0f:01:c8:94:4a:a1:c0:6e:87:dd:3c:56:
                    9d:ae:ec:00:1d:ba:96:ec:06:90:3b:a6:6d:ba:51:
                    65:ee:8f:d9:a6:fd:3a:2f:92:c1:e8:a3:cd:31:5b:
                    c1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:EC:59:DA:65:33:AC:2A:68:D8:4B:54:4D:EB:3E:F0:A4:D5:28:D5
            X509v3 Authority Key Identifier:
                keyid:EF:FC:8A:6F:3C:44:B8:ED:D1:77:FE:51:A5:99:91:58:B8:DC:F8:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:15:d1:53:88:db:bd:e2:11:9c:2c:a8:3f:ef:2f:f8:be:dd:
         cb:cb:89:dc:b9:10:61:98:4c:2c:b8:c6:ab:91:92:fb:fd:29:
         c3:10:60:89:b3:aa:bc:d3:c3:7b:e7:37:87:80:fe:a0:7b:f9:
         e6:09:70:04:50:e8:b6:99:1f:b9:bf:29:ad:6b:96:8b:8d:05:
         18:90:5e:77:a8:c6:fa:fa:a8:54:26:ef:fa:dd:db:ec:d0:a9:
         b2:d2:04:51:82:34:b2:66:53:34:fa:a2:0c:f9:57:c8:86:28:
         b8:ea:0a:0b:2e:e4:2f:3c:31:b8:19:51:d0:56:30:45:7a:86:
         ca:ed:0f:45:1f:34:a4:be:91:67:ec:77:60:ab:7e:b2:69:e4:
         20:cc:ee:32:2e:46:fb:e4:f3:a3:e3:35:64:26:39:8a:78:03:
         ad:89:62:b2:ef:24:a1:39:2d:41:4e:f9:0f:f1:e9:3d:57:3c:
         e0:e5:d0:a9:8d:52:38:0e:55:fb:b8:0e:f3:58:05:d3:47:73:
         02:02:79:23:8f:66:ce:44:0a:3d:d8:aa:79:7a:eb:1f:42:40:
         5b:a4:61:28:c7:c5:31:25:e3:21:05:00:eb:5a:e9:fb:21:ef:
         f3:57:75:0c:80:61:0a:a1:cc:b4:0f:eb:8c:f6:c0:12:80:35:
         7c:7c:67:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:43:25 2026 by rpki-client