Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/7VxHFPIguKxeq3Au-sEaEUJdCmk.mft
File:                     7VxHFPIguKxeq3Au-sEaEUJdCmk.mft (raw, json)
Hash identifier:          d++An2Jc2QlN+b4vvn3bwQUoi/1XnXWqsMge++21htQ=
Subject key identifier:   A1:E5:5F:3F:02:CC:2E:9A:06:5B:17:AF:AF:55:C4:BD:71:B5:AC:99
Authority key identifier: ED:5C:47:14:F2:20:B8:AC:5E:AB:70:2E:FA:C1:1A:11:42:5D:0A:69
Certificate issuer:       /CN=ed5c4714f220b8ac5eab702efac11a11425d0a69
Certificate serial:       01A120C075011D8FE26C317BB4DE3232B30C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7VxHFPIguKxeq3Au-sEaEUJdCmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/7VxHFPIguKxeq3Au-sEaEUJdCmk.mft
Manifest number:          0376
Signing time:             Fri 09 Oct 2026 13:00:46 +0000
Manifest this update:     Fri 09 Oct 2026 13:00:46 +0000
Manifest next update:     Sat 10 Oct 2026 13:00:46 +0000
Files and hashes:         1: 7VxHFPIguKxeq3Au-sEaEUJdCmk.crl (hash: DY4FLEi1zzA/KUVYxcpfNLXRhHZZ9IfUA9GEb+hfW5Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/7VxHFPIguKxeq3Au-sEaEUJdCmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/7VxHFPIguKxeq3Au-sEaEUJdCmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7VxHFPIguKxeq3Au-sEaEUJdCmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 13:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:20:c0:75:01:1d:8f:e2:6c:31:7b:b4:de:32:32:b3:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed5c4714f220b8ac5eab702efac11a11425d0a69
        Validity
            Not Before: Oct  9 13:00:46 2026 GMT
            Not After : Oct 10 13:00:46 2026 GMT
        Subject: CN=a1e55f3f02cc2e9a065b17afaf55c4bd71b5ac99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e2:8a:c7:9a:11:07:84:ce:c7:7d:71:26:93:
                    66:64:a8:73:28:30:8f:b4:f6:28:79:db:b3:87:59:
                    43:77:79:6c:2f:eb:79:26:ca:37:16:e3:53:71:4d:
                    b5:6a:84:80:66:33:31:d6:c2:63:f5:17:05:fd:89:
                    c1:36:9a:c7:fe:8c:e8:81:45:c9:fc:d2:77:57:8a:
                    dc:b4:b0:a1:b4:9d:1c:dd:63:f8:10:ff:b9:63:7f:
                    63:5f:68:a9:39:cc:a7:2a:bd:a9:2d:28:ac:5b:87:
                    91:02:90:02:ed:01:a3:33:7b:3b:8f:26:3b:28:9b:
                    96:f2:5a:b2:3e:90:d9:bc:d3:06:07:d0:db:2c:ae:
                    e3:1d:cd:cd:ce:58:7b:e9:bf:7b:ad:81:08:7a:4e:
                    38:c6:4d:fb:97:b2:4d:e9:4a:33:c5:a1:95:7f:08:
                    3e:d5:a5:9b:79:c5:0d:ca:47:98:a3:24:20:8f:4f:
                    2d:32:b4:4c:67:b5:9b:f8:a6:2c:50:dd:c8:4e:d8:
                    fa:d2:3a:d9:75:34:4e:d0:64:25:bc:7f:45:d3:5d:
                    ee:fa:7c:97:05:a3:a2:29:00:0a:01:e8:6d:e3:67:
                    98:65:e2:47:dc:3d:58:80:d7:89:96:a1:c7:e9:b8:
                    b3:0f:81:de:ef:9d:3d:c7:5e:89:fa:c9:c8:fd:4b:
                    d9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E5:5F:3F:02:CC:2E:9A:06:5B:17:AF:AF:55:C4:BD:71:B5:AC:99
            X509v3 Authority Key Identifier:
                keyid:ED:5C:47:14:F2:20:B8:AC:5E:AB:70:2E:FA:C1:1A:11:42:5D:0A:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VxHFPIguKxeq3Au-sEaEUJdCmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/7VxHFPIguKxeq3Au-sEaEUJdCmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/7VxHFPIguKxeq3Au-sEaEUJdCmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:8c:ab:91:4c:a4:92:1c:48:d9:fd:da:19:bd:ab:8d:65:12:
         93:d7:47:c0:de:b0:ca:44:7a:d4:a5:79:9a:26:b5:9d:8e:75:
         9c:0a:45:46:0d:ec:86:e5:44:79:15:62:e5:c8:a6:5b:69:dd:
         31:42:f4:b4:0c:4f:e1:64:64:9d:38:49:55:61:85:b9:bb:a9:
         c9:53:95:e9:19:07:ed:9a:0e:c1:20:2b:04:6e:bf:70:1a:21:
         37:92:37:69:a1:59:15:90:5a:47:86:c7:43:98:48:3e:e3:75:
         20:32:cf:cb:87:38:02:ab:54:26:48:9c:81:53:84:17:92:17:
         2b:4d:86:8a:93:df:54:d0:18:8d:3c:8b:47:0b:49:5f:d4:ec:
         ee:11:61:ae:95:3c:e1:1a:6e:89:6d:bc:df:e6:d7:6d:82:87:
         83:ae:2d:f7:6d:cc:1e:b5:e2:e1:21:e0:08:80:cc:94:eb:49:
         7c:ba:98:95:16:f0:9f:10:b2:92:9e:b7:68:f4:d8:58:d4:1c:
         5c:24:f6:6d:ed:cd:14:3f:02:f7:1a:18:8f:37:b9:14:e8:ae:
         17:d8:cb:92:20:de:37:9e:e8:74:2a:a8:96:8e:5f:0e:c8:4b:
         c9:5e:01:28:90:ef:f9:53:1e:78:0d:7a:82:93:01:1f:eb:45:
         c4:ed:fe:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:38:39 2026 by rpki-client