Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/3ac2c2-c1fc-4352-8106-8faf4e4d7f7b/1/7D6JWnysF_dfnXXvbjhhTDLWnlU.mft
File:                     7D6JWnysF_dfnXXvbjhhTDLWnlU.mft (raw, json)
Hash identifier:          wZpyKGKnNof0LvUlitW4RESSP+xwOXzUS+auDAevcb0=
Subject key identifier:   E8:6A:28:BE:2F:75:4D:26:64:A8:31:A7:C0:C9:7F:FE:38:7B:D3:5F
Authority key identifier: EC:3E:89:5A:7C:AC:17:F7:5F:9D:75:EF:6E:38:61:4C:32:D6:9E:55
Certificate issuer:       /CN=ec3e895a7cac17f75f9d75ef6e38614c32d69e55
Certificate serial:       01A0D64B8E2F1DD391E316E858F326270511
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7D6JWnysF_dfnXXvbjhhTDLWnlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/3ac2c2-c1fc-4352-8106-8faf4e4d7f7b/1/7D6JWnysF_dfnXXvbjhhTDLWnlU.mft
Manifest number:          013F
Signing time:             Fri 25 Sep 2026 02:01:10 +0000
Manifest this update:     Fri 25 Sep 2026 02:01:10 +0000
Manifest next update:     Sat 26 Sep 2026 02:01:10 +0000
Files and hashes:         1: 7D6JWnysF_dfnXXvbjhhTDLWnlU.crl (hash: MoZfsdjFudlZKbqwSd6MjwGk42RVM9xvI5RhqBS2J2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/3ac2c2-c1fc-4352-8106-8faf4e4d7f7b/1/7D6JWnysF_dfnXXvbjhhTDLWnlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/3ac2c2-c1fc-4352-8106-8faf4e4d7f7b/1/7D6JWnysF_dfnXXvbjhhTDLWnlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7D6JWnysF_dfnXXvbjhhTDLWnlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:4b:8e:2f:1d:d3:91:e3:16:e8:58:f3:26:27:05:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3e895a7cac17f75f9d75ef6e38614c32d69e55
        Validity
            Not Before: Sep 25 02:01:10 2026 GMT
            Not After : Sep 26 02:01:10 2026 GMT
        Subject: CN=e86a28be2f754d2664a831a7c0c97ffe387bd35f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bd:3c:b9:44:1d:ee:ca:3b:61:ec:36:d1:d4:
                    4a:4a:f0:9e:28:46:55:61:cc:dd:e6:29:e1:b2:6a:
                    d2:c2:9e:46:59:65:4b:b8:d7:1a:06:94:51:f0:95:
                    e1:05:ce:ba:0c:67:36:7f:ec:ab:d3:9b:9a:de:cd:
                    5b:a9:0c:fd:b8:35:27:d3:f7:ae:b6:d3:4a:fd:97:
                    8c:34:f0:fa:cd:72:c1:7b:4f:ad:58:18:14:94:64:
                    8e:ea:b4:99:dc:93:40:04:dc:a1:fb:44:97:61:81:
                    50:6a:a6:59:a9:60:30:9c:fb:f0:13:f1:15:3f:ec:
                    62:44:e0:ed:25:48:16:9b:e8:af:2d:4f:20:14:36:
                    eb:06:e4:4b:b5:8a:07:73:a5:d0:cb:e3:34:34:c8:
                    5a:75:7e:05:73:dd:13:c9:d3:32:28:f0:66:b3:98:
                    7a:0d:33:d4:6b:4e:d0:1b:f7:da:b4:49:7b:1d:0a:
                    c4:69:6c:0a:36:63:01:30:9d:4c:03:f0:fa:36:df:
                    6c:64:b3:46:c5:ab:65:08:12:0f:87:73:3e:c0:45:
                    c2:65:71:ec:55:9d:ca:17:2d:9d:aa:94:f5:a4:b0:
                    28:e5:87:8e:33:e2:6a:61:aa:0e:66:73:4b:fb:66:
                    46:77:88:11:c2:96:99:24:ba:95:50:39:e5:d6:cb:
                    7e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:6A:28:BE:2F:75:4D:26:64:A8:31:A7:C0:C9:7F:FE:38:7B:D3:5F
            X509v3 Authority Key Identifier:
                keyid:EC:3E:89:5A:7C:AC:17:F7:5F:9D:75:EF:6E:38:61:4C:32:D6:9E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7D6JWnysF_dfnXXvbjhhTDLWnlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3ac2c2-c1fc-4352-8106-8faf4e4d7f7b/1/7D6JWnysF_dfnXXvbjhhTDLWnlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3ac2c2-c1fc-4352-8106-8faf4e4d7f7b/1/7D6JWnysF_dfnXXvbjhhTDLWnlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:7e:d6:ce:e9:fa:4c:20:da:54:62:94:75:f2:df:c1:ce:86:
         1c:8d:68:2c:77:a6:88:02:26:b5:8a:fb:af:a0:e2:ae:bd:e8:
         25:6b:d1:2a:b9:3c:ee:42:1c:71:6d:06:a9:2c:2e:82:05:97:
         9e:ac:65:ec:39:af:6c:96:a9:de:bc:ee:67:b0:0b:74:5f:c8:
         b4:cc:47:47:35:7c:a2:15:6f:16:4f:15:13:81:58:5d:60:4c:
         04:70:b1:40:c8:9e:47:d2:e4:61:61:1c:3f:06:f0:d8:1d:40:
         2c:e7:41:2c:5c:4d:19:a1:dc:61:10:df:37:2b:19:9e:80:bc:
         1c:46:05:97:ce:4a:d8:29:be:9f:2c:1b:49:3d:57:84:fa:52:
         e5:c5:c9:96:e3:ea:81:eb:0a:b4:61:a5:47:17:94:eb:60:13:
         c7:52:2d:38:f7:29:4b:6d:b6:2b:54:b0:ee:21:36:1f:f7:85:
         64:86:3e:f3:9e:05:1d:8e:f7:df:22:dc:97:49:d8:d6:4f:65:
         04:9d:1a:87:01:d6:af:e8:5a:fe:cf:9c:1e:af:b5:7b:83:16:
         97:a5:6e:4f:f3:69:97:c8:1a:ea:7c:f2:fb:b5:39:3e:30:3a:
         61:3e:94:2d:01:58:09:57:a4:bc:dc:af:5c:46:9d:e9:4a:91:
         65:ae:41:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:02:49 2026 by rpki-client