Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
File:                     7LLMRABmS6sLCRvDmYwN4f73FZs.mft (raw, json)
Hash identifier:          BrT4yl1fFJg988c7AIqCWVZfbd1WP9iNStm03HLhiw0=
Subject key identifier:   31:20:56:F4:C2:0B:C1:A2:FE:6C:66:C8:DD:04:99:22:E7:9C:91:E0
Authority key identifier: EC:B2:CC:44:00:66:4B:AB:0B:09:1B:C3:99:8C:0D:E1:FE:F7:15:9B
Certificate issuer:       /CN=ecb2cc4400664bab0b091bc3998c0de1fef7159b
Certificate serial:       01A0CBC7CAC7941DD14566173D88E3E21E4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
Manifest number:          1431
Signing time:             Wed 23 Sep 2026 01:01:03 +0000
Manifest this update:     Wed 23 Sep 2026 01:01:03 +0000
Manifest next update:     Thu 24 Sep 2026 01:01:03 +0000
Files and hashes:         1: 7LLMRABmS6sLCRvDmYwN4f73FZs.crl (hash: aZeLoZEXSoLnxCotjNCQ+oyTEnTzFkrN4/4KurQUNlw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:c7:ca:c7:94:1d:d1:45:66:17:3d:88:e3:e2:1e:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb2cc4400664bab0b091bc3998c0de1fef7159b
        Validity
            Not Before: Sep 23 01:01:03 2026 GMT
            Not After : Sep 24 01:01:03 2026 GMT
        Subject: CN=312056f4c20bc1a2fe6c66c8dd049922e79c91e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1a:86:1a:cf:94:01:10:51:1e:f7:a0:65:0a:
                    e4:b3:13:54:5f:c6:4a:36:92:41:18:26:9b:f3:1c:
                    b4:ed:1f:ec:e2:98:46:09:3c:4d:24:f2:d4:bf:c9:
                    5a:b3:0b:21:29:31:8c:69:29:75:a0:49:3e:4b:31:
                    2a:fb:a9:43:cb:c4:e4:c2:2e:a8:16:d8:ef:55:2b:
                    44:b6:f8:b5:6a:6b:12:fc:6b:2e:36:c8:80:61:e5:
                    c9:8e:d4:c9:2a:b4:94:db:36:ea:67:84:50:7c:23:
                    67:0f:3a:e5:6b:7c:61:cd:ba:a8:a3:8f:03:1f:4c:
                    10:03:5b:31:94:d1:58:f4:71:c2:14:10:d6:95:64:
                    94:32:64:c5:0a:23:f9:61:43:6a:9d:ed:32:b7:c4:
                    e5:80:02:4a:9e:16:22:cd:d0:be:26:db:93:ec:26:
                    79:38:8e:bd:7b:88:28:92:4f:73:b2:8b:2f:d6:34:
                    49:39:07:e8:fa:81:96:0d:bd:3d:06:12:89:27:58:
                    01:dc:25:60:c1:c2:c9:07:4a:3d:cb:f7:3a:8f:e9:
                    10:2c:a3:a9:dc:c4:27:e4:b2:02:9d:97:71:88:90:
                    4c:b3:e9:d1:bd:29:ea:8c:c1:29:2b:a9:28:f1:a6:
                    a5:76:65:b5:eb:5f:5c:2c:d2:04:55:65:91:ae:c7:
                    0d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:20:56:F4:C2:0B:C1:A2:FE:6C:66:C8:DD:04:99:22:E7:9C:91:E0
            X509v3 Authority Key Identifier:
                keyid:EC:B2:CC:44:00:66:4B:AB:0B:09:1B:C3:99:8C:0D:E1:FE:F7:15:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:61:14:b3:69:f3:94:f5:79:cf:25:73:bc:20:94:54:2b:bd:
         8e:8f:91:48:9e:dd:b2:35:c8:0f:9c:73:a6:ca:06:a2:1f:17:
         f1:3d:bc:db:d4:a3:a3:7a:04:bc:b7:2e:64:16:4f:86:fb:91:
         45:e4:b7:f0:3c:e0:74:e8:44:95:4d:ac:28:5d:2e:45:80:a4:
         8d:8d:d3:ad:33:76:b2:a2:01:b4:61:f5:0e:b3:ba:6a:cb:e9:
         32:27:05:6e:fb:aa:cc:2b:cb:a6:3e:59:d5:11:74:87:63:35:
         a8:d7:d9:96:1f:8a:b9:a0:d0:81:6e:96:f6:0d:f3:4b:89:a1:
         e4:6d:b5:0a:c3:ba:d9:04:f7:89:64:5c:61:30:d0:61:d1:3b:
         b8:bc:f5:68:c4:8a:0f:10:52:5a:4a:06:2d:19:9b:02:49:0c:
         4d:a9:51:29:45:d2:a0:8c:34:54:1e:7a:38:7d:6b:ff:4a:de:
         58:d9:42:6b:d7:3e:c9:e3:23:2a:1c:e3:a6:ff:e7:22:b8:90:
         04:1c:d1:62:3c:a5:94:2c:e9:ea:ea:d7:06:7c:b0:5c:4c:ca:
         d8:38:46:e3:07:68:b0:ec:65:b1:5b:45:05:8a:30:82:25:3e:
         2c:0e:c3:00:f0:8f:88:4f:f0:e3:a9:25:9e:7f:23:38:15:c5:
         78:fd:f5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:02:29 2026 by rpki-client