Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
File:                     7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft (raw, json)
Hash identifier:          DPi9lLu+C7wM7Y/WkLUQh7r+5baKTXkHAYNFLWy/T+0=
Subject key identifier:   49:C0:23:E5:E3:42:B9:65:57:35:7F:DF:11:E8:DA:97:10:7D:CA:FE
Authority key identifier: EF:FC:8A:6F:3C:44:B8:ED:D1:77:FE:51:A5:99:91:58:B8:DC:F8:19
Certificate issuer:       /CN=effc8a6f3c44b8edd177fe51a5999158b8dcf819
Certificate serial:       01A130A2A1591CCD302E6040FA4B0BFCDF87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
Manifest number:          12F4
Signing time:             Mon 12 Oct 2026 15:02:06 +0000
Manifest this update:     Mon 12 Oct 2026 15:02:06 +0000
Manifest next update:     Tue 13 Oct 2026 15:02:06 +0000
Files and hashes:         1: 7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl (hash: rMkNUVYw1kiMv9aeNpeN6wutV2tAs8xeYyz6Jt9yhiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:30:a2:a1:59:1c:cd:30:2e:60:40:fa:4b:0b:fc:df:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=effc8a6f3c44b8edd177fe51a5999158b8dcf819
        Validity
            Not Before: Oct 12 15:02:06 2026 GMT
            Not After : Oct 13 15:02:06 2026 GMT
        Subject: CN=49c023e5e342b96557357fdf11e8da97107dcafe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4a:35:36:e9:a5:65:8d:be:d0:5c:5d:a9:95:
                    53:1b:48:54:90:d1:4f:a5:51:e9:34:8c:43:91:b0:
                    4f:c1:9b:c7:15:12:d6:17:2a:95:62:e9:46:c6:61:
                    6e:66:20:a1:dc:a7:4c:70:4a:df:d3:53:48:b6:a0:
                    a3:6a:0d:77:a7:0d:61:1d:71:74:e3:50:01:58:78:
                    dd:7a:8e:39:35:32:c4:8a:9d:35:3f:70:d9:cb:01:
                    7c:b6:74:9f:55:0f:69:ec:58:27:11:70:3e:35:a1:
                    c6:5d:3d:15:66:a7:9e:ab:c1:a5:a4:df:9f:d3:24:
                    c8:fe:87:4b:ef:b1:3e:20:db:d6:7f:ac:da:87:1c:
                    3d:08:1e:21:0c:f1:b2:5b:cf:a7:68:13:22:71:35:
                    79:29:bd:d1:ce:ba:0f:0a:88:b2:bb:2d:90:d3:22:
                    11:78:39:2a:6a:a0:7b:24:be:df:de:4f:12:c9:3e:
                    85:e9:f4:f4:34:5d:4c:31:34:7f:77:52:4e:d1:3f:
                    2c:87:74:84:ef:4c:4a:2e:b5:39:a2:d7:2f:9e:a8:
                    a2:a1:00:28:f9:7e:92:fb:4d:4a:f9:ef:06:95:1b:
                    0a:63:26:4c:b5:d3:b3:1f:7a:74:01:6c:3b:f4:23:
                    6a:b6:b9:67:c7:f6:d3:61:4a:65:e4:46:23:a3:53:
                    ba:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C0:23:E5:E3:42:B9:65:57:35:7F:DF:11:E8:DA:97:10:7D:CA:FE
            X509v3 Authority Key Identifier:
                keyid:EF:FC:8A:6F:3C:44:B8:ED:D1:77:FE:51:A5:99:91:58:B8:DC:F8:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:41:4e:69:be:77:6a:a5:db:8a:28:e1:e0:54:71:33:9c:d5:
         79:93:52:f6:60:b8:6a:c3:71:ea:1c:b6:b5:ac:58:18:b9:a2:
         46:b8:f5:93:c5:2b:0a:e4:67:75:a8:47:d5:e6:0d:94:e8:f9:
         bb:0d:8b:96:9a:de:4e:5e:63:97:28:1c:bc:46:c5:29:60:6e:
         af:6d:88:c0:95:78:91:7d:76:62:c1:8e:e3:10:09:3b:64:4c:
         98:37:d0:b1:31:07:6f:13:76:42:b9:10:51:94:65:01:9c:08:
         eb:60:ec:84:bc:f5:29:be:64:5e:26:87:62:f1:7c:69:18:8c:
         23:fd:7e:09:42:11:c4:fd:7b:2f:b2:8f:d8:96:d2:46:95:e8:
         5e:e4:53:c1:8b:84:e1:a9:3b:26:dc:2e:66:44:e5:3e:bd:16:
         46:17:1d:98:f6:24:4a:07:01:7b:38:a7:30:92:37:1b:38:ad:
         42:94:ed:97:45:61:15:cf:e0:29:83:b3:16:ce:fe:8f:27:cd:
         2e:7c:58:e9:73:a4:2b:17:4e:82:c2:fe:ba:69:07:f2:f3:5c:
         fb:f8:f0:7f:86:e9:7d:bd:17:fd:27:70:f9:03:59:2d:36:ef:
         1d:19:46:61:78:01:19:b0:bc:37:88:61:96:e1:62:29:40:c1:
         d6:0f:dc:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:50:50 2026 by rpki-client