Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/8d84e1-71f4-4518-b00c-6afd1a6d6e20/1/7BDDXcq_u6cPeKF6oYhLR5fjpLI.mft
File:                     7BDDXcq_u6cPeKF6oYhLR5fjpLI.mft (raw, json)
Hash identifier:          FsYA3jfIr9WC/9EFDKjBB71npfwQNcU3m3s+oDK+SLg=
Subject key identifier:   31:FC:FD:D6:7F:B6:30:71:72:CE:4C:65:9D:AD:1E:56:FB:ED:BC:FE
Authority key identifier: EC:10:C3:5D:CA:BF:BB:A7:0F:78:A1:7A:A1:88:4B:47:97:E3:A4:B2
Certificate issuer:       /CN=ec10c35dcabfbba70f78a17aa1884b4797e3a4b2
Certificate serial:       01A11071D80FD8315A845FEFAE844324E2B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7BDDXcq_u6cPeKF6oYhLR5fjpLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/8d84e1-71f4-4518-b00c-6afd1a6d6e20/1/7BDDXcq_u6cPeKF6oYhLR5fjpLI.mft
Manifest number:          1C
Signing time:             Tue 06 Oct 2026 09:00:58 +0000
Manifest this update:     Tue 06 Oct 2026 09:00:58 +0000
Manifest next update:     Wed 07 Oct 2026 09:00:58 +0000
Files and hashes:         1: 7BDDXcq_u6cPeKF6oYhLR5fjpLI.crl (hash: aE5AqwJo4ng2+6GL5gUjVGTEEyPzw0Xc6C/u7GKzfpk=)
                          2: twARUM7qtg-_svxxhZ9v2Br7j5k.asa (hash: IVeX1qT6cfN9j85T3K9lYgnlguv0xFUnxi2r2ZXPZOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/8d84e1-71f4-4518-b00c-6afd1a6d6e20/1/7BDDXcq_u6cPeKF6oYhLR5fjpLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/8d84e1-71f4-4518-b00c-6afd1a6d6e20/1/7BDDXcq_u6cPeKF6oYhLR5fjpLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7BDDXcq_u6cPeKF6oYhLR5fjpLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:10:71:d8:0f:d8:31:5a:84:5f:ef:ae:84:43:24:e2:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec10c35dcabfbba70f78a17aa1884b4797e3a4b2
        Validity
            Not Before: Oct  6 09:00:58 2026 GMT
            Not After : Oct  7 09:00:58 2026 GMT
        Subject: CN=31fcfdd67fb6307172ce4c659dad1e56fbedbcfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b2:0d:d6:fb:35:86:73:a2:db:23:c1:d5:ef:
                    93:9a:7a:37:0c:cd:b7:71:d8:1f:b7:b1:17:34:c9:
                    bd:0c:05:eb:4f:66:18:fe:df:aa:4a:4b:dd:ef:3c:
                    f1:fa:68:88:1f:bc:64:12:69:c7:75:23:58:f8:64:
                    4f:7f:0e:3e:bd:ec:65:eb:5b:e3:eb:03:f3:9a:f2:
                    69:ed:6f:19:f5:fc:c1:b7:dd:4d:b6:e6:47:01:89:
                    c4:b1:75:ca:6d:4a:03:74:55:17:2f:8c:7f:8b:2e:
                    9c:96:be:2b:cd:b9:2f:f2:71:ec:82:61:bb:7e:cf:
                    ac:6a:5d:49:95:e0:14:f6:bf:9d:d4:85:fc:e6:6c:
                    07:4f:7c:67:37:9d:a3:43:a6:a9:22:f8:66:b7:ce:
                    2b:3b:54:97:ce:9a:16:fa:b7:86:5d:69:17:4a:56:
                    f7:f2:9e:a3:ba:8c:37:3c:81:54:86:06:bd:2b:10:
                    cb:95:25:3c:82:e7:63:9b:b7:1a:b0:64:8d:a6:53:
                    af:18:5e:81:88:30:13:85:dc:f2:2c:4c:37:05:1c:
                    db:aa:b0:2d:88:38:b4:a8:d9:38:a4:75:e5:7c:b1:
                    74:9b:b4:ff:c5:3a:41:67:b7:af:43:00:d1:1e:9e:
                    9c:3a:2b:a6:12:90:5c:0c:67:88:7c:fc:4d:a1:75:
                    33:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FC:FD:D6:7F:B6:30:71:72:CE:4C:65:9D:AD:1E:56:FB:ED:BC:FE
            X509v3 Authority Key Identifier:
                keyid:EC:10:C3:5D:CA:BF:BB:A7:0F:78:A1:7A:A1:88:4B:47:97:E3:A4:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7BDDXcq_u6cPeKF6oYhLR5fjpLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8d84e1-71f4-4518-b00c-6afd1a6d6e20/1/7BDDXcq_u6cPeKF6oYhLR5fjpLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8d84e1-71f4-4518-b00c-6afd1a6d6e20/1/7BDDXcq_u6cPeKF6oYhLR5fjpLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:f8:59:8f:e7:d0:9b:a1:a1:af:8a:93:14:24:44:b7:4f:fc:
         a4:d8:b9:53:b0:dc:e9:7a:db:db:29:99:e0:e9:e9:94:78:95:
         e5:4a:72:49:97:59:c2:aa:e1:4a:05:d1:34:86:53:e4:c8:d2:
         a0:ef:04:cb:ca:b1:05:20:6a:ee:53:8c:ca:0d:86:09:7a:88:
         89:2c:a9:5d:6d:1e:22:cc:10:b4:cb:db:aa:a2:36:8e:0d:3a:
         28:06:9e:ee:3b:43:e9:5e:53:b1:08:0e:cf:7f:9b:ce:61:bf:
         f4:fe:eb:e7:28:1d:5f:56:d2:41:f1:b3:8c:36:8f:c3:a4:0f:
         40:81:db:44:2b:dc:87:36:da:3c:43:6a:d4:f0:03:80:0e:81:
         d9:c4:ed:fd:37:15:10:08:fb:f9:d1:20:12:83:0a:3f:2c:fc:
         ff:92:be:73:9b:a4:38:b2:d6:95:44:6c:cb:7d:a6:44:c2:a2:
         a0:39:a3:d6:c2:d3:9e:bc:37:f7:0e:9c:30:64:43:66:10:dc:
         2b:74:ca:cc:91:24:38:1b:f7:a1:1f:d2:75:78:d7:84:c4:e3:
         6f:4d:7b:25:15:fc:30:c1:07:31:64:72:12:01:9b:96:77:f5:
         96:05:9e:e8:73:99:d5:f1:a0:ae:5e:22:8a:c8:f9:5e:51:57:
         ff:95:67:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:05:23 2026 by rpki-client