Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft
File:                     078oufsovtkGaqQRPLi-Bl7c9BI.mft (raw, json)
Hash identifier:          21aXWCd/90tWl8m9HMXR0LioWkuzYz+aFAAw9EAeKmA=
Subject key identifier:   02:3F:E6:6F:6B:31:58:8F:A8:4F:34:7D:AB:CB:55:7A:47:3F:0B:56
Authority key identifier: D3:BF:28:B9:FB:28:BE:D9:06:6A:A4:11:3C:B8:BE:06:5E:DC:F4:12
Certificate issuer:       /CN=d3bf28b9fb28bed9066aa4113cb8be065edcf412
Certificate serial:       01A0CD117222E2547916C8A6866F606BFCFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/078oufsovtkGaqQRPLi-Bl7c9BI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft
Manifest number:          14F2
Signing time:             Wed 23 Sep 2026 07:01:07 +0000
Manifest this update:     Wed 23 Sep 2026 07:01:07 +0000
Manifest next update:     Thu 24 Sep 2026 07:01:07 +0000
Files and hashes:         1: 078oufsovtkGaqQRPLi-Bl7c9BI.crl (hash: 9y7W711lbaW3qwVdDeYeWeUEGo5qV0aquWI2h76/kOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/078oufsovtkGaqQRPLi-Bl7c9BI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 07:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:11:72:22:e2:54:79:16:c8:a6:86:6f:60:6b:fc:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3bf28b9fb28bed9066aa4113cb8be065edcf412
        Validity
            Not Before: Sep 23 07:01:07 2026 GMT
            Not After : Sep 24 07:01:07 2026 GMT
        Subject: CN=023fe66f6b31588fa84f347dabcb557a473f0b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d3:e1:e2:a3:15:04:3d:b2:31:c8:6a:cd:b3:
                    3f:b1:6e:fd:05:86:e7:a5:7a:45:8c:4d:7c:a0:39:
                    92:7f:f7:e3:3e:b6:f2:f6:14:70:b0:8e:d6:8d:08:
                    68:ba:51:7d:bb:59:fc:0c:a3:d6:85:2c:7a:7a:71:
                    09:ce:43:ef:f9:68:9d:6c:e8:67:82:24:79:61:80:
                    94:3b:1c:9b:9b:28:bf:e3:f2:e9:ab:d4:57:a9:a1:
                    76:a4:d9:cb:fa:32:09:9a:b2:4a:95:69:42:97:13:
                    44:79:51:34:fb:a1:7c:b3:5d:8f:56:3a:25:d3:e9:
                    a7:8b:d6:50:47:ee:a4:92:7d:c0:18:e5:7f:ec:66:
                    30:88:9d:b7:66:e2:0e:cb:6b:c2:66:0c:35:bd:db:
                    83:ec:3d:fd:3e:dd:00:cd:67:2b:a9:aa:5f:28:1b:
                    40:e1:d7:6a:23:55:5c:0b:f4:61:5d:93:94:e1:63:
                    92:7c:31:10:d3:7f:5c:05:16:4a:4e:5b:d4:f0:8e:
                    7a:69:32:f8:37:33:86:38:42:4a:52:fd:2a:45:f7:
                    a3:86:27:e7:73:67:aa:1d:49:18:08:02:e2:f0:b8:
                    e6:e3:c2:c5:1b:c5:84:96:a5:d9:c1:46:e5:bb:52:
                    0f:85:eb:7a:f4:d3:4c:b7:76:2b:4f:31:ea:b0:88:
                    72:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:3F:E6:6F:6B:31:58:8F:A8:4F:34:7D:AB:CB:55:7A:47:3F:0B:56
            X509v3 Authority Key Identifier:
                keyid:D3:BF:28:B9:FB:28:BE:D9:06:6A:A4:11:3C:B8:BE:06:5E:DC:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/078oufsovtkGaqQRPLi-Bl7c9BI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:d1:4e:dc:44:82:95:ee:bd:ba:7c:64:37:52:e4:05:e9:43:
         74:fd:f9:e6:dd:44:e3:99:a3:47:31:ec:4b:00:7e:34:cd:23:
         bb:dd:45:54:32:5e:4b:4c:8d:9a:1b:99:d4:27:cf:bd:11:63:
         e2:65:55:10:70:e6:1d:b7:9f:14:e6:cd:f3:31:95:8b:c6:91:
         2b:51:78:fa:2e:29:57:e7:c9:bf:ad:93:80:09:d2:31:c2:aa:
         02:54:4f:b3:b5:ea:07:d9:01:2d:49:7e:33:de:4f:e8:23:8f:
         8b:c5:40:de:f8:be:8e:8c:f6:cd:8a:a2:a3:db:f9:d4:0f:4b:
         48:0f:9d:92:02:42:1f:ae:97:13:32:42:22:4e:2a:e5:81:73:
         49:82:82:d5:fa:46:99:c5:1d:aa:e5:58:90:60:08:b7:c7:87:
         54:9a:2c:68:82:46:70:cd:5a:cd:d4:55:86:a5:55:32:c9:31:
         02:3d:c6:bb:e7:b2:96:3a:af:d0:51:1f:0d:c7:a3:10:38:d5:
         03:9d:a0:cf:df:51:54:32:f5:e7:f6:2a:3c:1b:19:31:c5:5c:
         b2:9a:12:e7:0b:e0:6c:70:03:23:2a:91:fa:15:50:36:55:90:
         26:59:4b:54:a5:9d:b5:41:52:ad:08:2a:33:a1:65:45:d5:68:
         1c:fa:2c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 14:16:49 2026 by rpki-client