Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
File:                     C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft (raw, json)
Hash identifier:          2zPyCoRPT69DHnyAO7fKMJZs3+91jHWMy70Ksd95VvE=
Subject key identifier:   19:27:82:FC:01:8F:57:C1:A1:C7:D3:90:FE:E0:E9:04:23:4A:19:CC
Authority key identifier: 0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
Certificate issuer:       /CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Certificate serial:       01A0CEC89594D0ACA607A23BF481E2DEEE11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
Manifest number:          0E7F
Signing time:             Wed 23 Sep 2026 15:00:46 +0000
Manifest this update:     Wed 23 Sep 2026 15:00:46 +0000
Manifest next update:     Thu 24 Sep 2026 15:00:46 +0000
Files and hashes:         1: C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl (hash: aWFEYf7Occ1E9LbfBZaTtfFErPTn4FilONNH/smVwOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:c8:95:94:d0:ac:a6:07:a2:3b:f4:81:e2:de:ee:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
        Validity
            Not Before: Sep 23 15:00:46 2026 GMT
            Not After : Sep 24 15:00:46 2026 GMT
        Subject: CN=192782fc018f57c1a1c7d390fee0e904234a19cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ab:68:6e:58:90:c1:da:f4:a1:27:e0:79:67:
                    1c:fc:50:73:49:84:f3:62:6f:b6:bc:71:73:5e:1c:
                    9e:ed:ab:b6:b5:68:3b:67:99:f8:60:63:b7:63:e0:
                    be:1b:74:59:d1:03:3b:ac:9c:b6:fa:a6:49:55:97:
                    26:ff:9e:d7:24:da:12:e4:66:6b:f1:0f:38:39:56:
                    6c:9b:02:bf:34:70:c3:e5:f6:75:15:66:af:22:c3:
                    44:d7:94:8a:1d:37:4d:81:34:f7:70:0a:06:e2:99:
                    ac:9d:7e:1d:8c:b4:a8:05:12:51:5d:0e:52:61:94:
                    ff:5c:80:4d:ca:78:b3:57:34:4f:e7:ef:c8:86:b8:
                    6c:25:fe:3c:f4:48:e8:0a:3b:ba:77:c6:80:f2:5b:
                    9b:8a:0c:09:ba:d4:30:8b:40:40:0c:ce:2f:6f:46:
                    99:2c:ab:de:19:d7:54:e6:71:51:93:03:53:1b:ab:
                    b6:55:f5:70:d2:8b:bf:f6:5b:91:ea:fc:cf:4d:e8:
                    44:e8:ed:6c:da:9c:25:9c:f5:7b:31:f0:60:ce:f4:
                    93:bb:5a:eb:50:c9:de:40:26:58:85:90:8e:43:8a:
                    fd:c6:d0:39:c2:f5:9e:18:9f:dd:2e:c7:5d:e6:d6:
                    15:35:e5:b1:ce:57:8f:34:25:4c:30:7d:44:74:ed:
                    4b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:27:82:FC:01:8F:57:C1:A1:C7:D3:90:FE:E0:E9:04:23:4A:19:CC
            X509v3 Authority Key Identifier:
                keyid:0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:c4:da:ea:51:d2:bb:a3:61:e3:f5:55:79:4e:3e:48:cc:ce:
         b0:dc:3f:de:b0:b7:3b:50:ac:6f:8a:0d:01:7a:48:53:69:19:
         6a:25:d7:09:5d:7d:83:0f:ab:91:55:32:19:23:e8:2b:39:23:
         e5:26:43:0d:3d:c0:cd:2b:27:1c:bb:56:ef:e9:9e:21:82:1f:
         49:74:f0:be:90:7e:56:b6:99:7f:5f:af:1b:bc:5a:b8:7f:e8:
         25:c4:7e:5b:b4:89:83:8a:98:4e:86:09:72:e2:4f:00:8d:7f:
         d1:72:00:06:a4:08:f9:4d:02:4d:6d:b5:46:00:27:47:77:20:
         34:50:d7:79:9f:ef:ef:98:db:ee:7f:a0:25:f1:cb:9e:01:9d:
         02:1e:cc:bc:59:77:f2:0d:c8:10:47:48:0f:c8:95:1e:9d:72:
         a0:2f:a3:f9:08:b0:4d:8c:a2:99:99:48:63:30:d1:7d:35:29:
         fd:db:90:6e:2d:87:a0:37:12:71:44:a0:90:ef:48:95:c3:63:
         8c:6a:66:63:30:68:e0:52:5c:ac:a7:2c:a0:f3:78:4c:e1:b1:
         e7:2b:90:8d:3c:f2:4a:b8:01:95:3c:96:e3:8b:57:5d:96:04:
         c4:7d:8f:bd:c2:77:10:bd:5e:3c:07:66:aa:b2:2f:59:d3:65:
         25:96:94:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:44:14 2026 by rpki-client