Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft
File:                     1dhc7fCdgveSwYDZClqaI21qcFw.mft (raw, json)
Hash identifier:          8KukNQRGlJeoriTtvMj0nsp56g2bpamYvHAu+SJwmKg=
Subject key identifier:   82:FD:C2:0D:77:72:3F:87:75:8B:4A:18:09:DF:E3:D2:FB:94:10:50
Authority key identifier: D5:D8:5C:ED:F0:9D:82:F7:92:C1:80:D9:0A:5A:9A:23:6D:6A:70:5C
Certificate issuer:       /CN=d5d85cedf09d82f792c180d90a5a9a236d6a705c
Certificate serial:       01A1DCF04A555AA2A2A80B07CFEC4A32BCC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1dhc7fCdgveSwYDZClqaI21qcFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft
Manifest number:          1AF3
Signing time:             Sun 15 Nov 2026 02:01:37 +0000
Manifest this update:     Sun 15 Nov 2026 02:01:37 +0000
Manifest next update:     Mon 16 Nov 2026 02:01:37 +0000
Files and hashes:         1: 1dhc7fCdgveSwYDZClqaI21qcFw.crl (hash: HZqW1y34HXkjbPDUMRl6gMMJOc3oJzkvOV/qp8NUI1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1dhc7fCdgveSwYDZClqaI21qcFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 02:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dc:f0:4a:55:5a:a2:a2:a8:0b:07:cf:ec:4a:32:bc:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d85cedf09d82f792c180d90a5a9a236d6a705c
        Validity
            Not Before: Nov 15 02:01:37 2026 GMT
            Not After : Nov 16 02:01:37 2026 GMT
        Subject: CN=82fdc20d77723f87758b4a1809dfe3d2fb941050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4f:2b:b5:3d:ff:89:1c:b0:c9:a3:04:ae:94:
                    ba:8d:4a:9b:e0:a0:08:8e:3b:18:08:d6:21:6e:f0:
                    09:08:70:b2:70:97:65:b4:ef:8f:ef:fd:69:c6:59:
                    06:ad:0f:b0:ac:75:9a:f7:0a:a3:cd:03:80:f4:1b:
                    3e:67:b3:72:26:01:c6:93:e8:7f:cf:b5:d1:fd:36:
                    38:5a:b6:ab:65:40:d8:41:77:8a:93:d9:61:ff:72:
                    bb:d7:17:cb:29:81:a5:5e:df:2b:62:24:c6:b7:74:
                    53:5b:bf:22:14:35:26:fc:7b:3b:b7:02:99:73:fb:
                    23:aa:e3:6d:90:bb:a6:75:c2:83:0a:de:bf:69:57:
                    de:ec:af:ec:b5:1f:80:6d:14:ba:99:03:0f:94:49:
                    40:9e:ef:76:90:00:54:3b:c0:ce:86:99:7b:88:8e:
                    8b:99:bf:11:6f:48:49:49:19:c1:97:7b:ce:aa:6e:
                    4f:a6:86:67:91:3b:43:4e:29:96:25:c1:22:27:f3:
                    63:e5:0f:1d:13:69:7c:6e:07:0c:ca:ec:d3:5a:b0:
                    56:8e:bb:c4:f1:54:3d:ea:62:33:f4:cc:57:ec:8d:
                    e7:d0:2f:fe:c9:63:e5:95:7b:ba:b6:73:65:62:7d:
                    d1:28:97:98:8f:92:60:ab:90:35:9a:b4:19:68:4e:
                    c8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:FD:C2:0D:77:72:3F:87:75:8B:4A:18:09:DF:E3:D2:FB:94:10:50
            X509v3 Authority Key Identifier:
                keyid:D5:D8:5C:ED:F0:9D:82:F7:92:C1:80:D9:0A:5A:9A:23:6D:6A:70:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dhc7fCdgveSwYDZClqaI21qcFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:7e:ad:f7:9a:c3:b9:8d:f0:b0:e2:44:85:eb:62:a2:2e:ca:
         9f:fe:af:02:92:ea:ab:44:eb:9d:2d:cb:0b:3b:1e:0f:a9:a3:
         12:08:4f:12:19:7c:26:c1:a5:4c:ee:58:bc:8c:46:ec:11:19:
         7c:e5:e0:86:c2:06:4a:fc:aa:99:af:af:a6:e4:01:21:fb:36:
         73:b5:b3:73:98:bc:e2:1f:af:62:b4:45:54:f6:52:94:3e:5d:
         82:0b:79:76:23:68:28:34:00:87:61:59:0e:24:2f:03:07:c6:
         80:1b:27:17:9e:b4:48:84:5a:eb:d1:f2:cf:de:14:bf:99:97:
         12:bc:80:cb:98:dd:1b:74:01:68:a8:c1:af:7b:f2:7d:3b:9d:
         c4:e6:a9:36:bb:9e:a6:7f:47:0a:93:ad:16:5a:b3:e3:d7:00:
         c9:c9:a0:9b:90:e8:44:22:c7:c6:73:81:22:de:b2:32:95:ae:
         2c:67:aa:33:b4:c6:0e:48:7f:a4:d5:69:c4:24:64:39:d5:c3:
         ce:37:ba:7b:32:cb:49:43:91:4b:39:29:61:44:3c:12:89:30:
         86:b0:63:bf:57:87:e7:2f:b9:36:ed:08:12:ca:58:ca:65:b1:
         27:08:0e:2f:e7:e7:9b:ce:5b:9a:d2:08:eb:ad:5d:a8:7e:80:
         a1:3f:6f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:37:23 2026 by rpki-client