Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
File:                     7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft (raw, json)
Hash identifier:          WghlBGuE5P5FentevUVWkA4zumpWJwwfdHV+EvQzTXM=
Subject key identifier:   87:ED:69:CD:17:47:38:9C:B5:F5:45:10:A8:7B:CA:CA:40:0B:4F:53
Authority key identifier: EC:B1:1B:54:50:8A:06:28:9B:0E:D0:6B:17:18:8A:D6:3F:4F:CF:EA
Certificate issuer:       /CN=ecb11b54508a06289b0ed06b17188ad63f4fcfea
Certificate serial:       01A0CC357885A636D36DAA0C9E2555A19EBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
Manifest number:          1A65
Signing time:             Wed 23 Sep 2026 03:00:51 +0000
Manifest this update:     Wed 23 Sep 2026 03:00:51 +0000
Manifest next update:     Thu 24 Sep 2026 03:00:51 +0000
Files and hashes:         1: 7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl (hash: MSxSyYEZwyttDNaVNHa4v+vRQ5N0sYyGBfph3dZ3PGc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:35:78:85:a6:36:d3:6d:aa:0c:9e:25:55:a1:9e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb11b54508a06289b0ed06b17188ad63f4fcfea
        Validity
            Not Before: Sep 23 03:00:51 2026 GMT
            Not After : Sep 24 03:00:51 2026 GMT
        Subject: CN=87ed69cd1747389cb5f54510a87bcaca400b4f53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e7:db:83:8f:26:f5:6c:e8:b7:de:1b:2d:af:
                    49:0f:fc:58:8b:48:da:4b:62:cf:f3:b1:d4:91:47:
                    e0:85:7a:a6:51:75:94:fc:11:48:f2:0e:82:80:76:
                    14:52:e0:51:08:58:55:b7:72:d5:7a:c1:b7:9c:8e:
                    7f:35:2f:41:b9:16:b5:9d:f1:7a:1f:62:1a:d6:62:
                    06:f2:9f:c0:3a:89:f0:83:c0:94:34:95:f2:10:44:
                    06:c4:9f:cb:f0:93:84:c6:b4:aa:9c:f3:cc:b3:d9:
                    f5:d6:d5:7b:1c:a7:21:39:cf:fe:32:ea:5f:06:51:
                    50:f6:fc:e5:a4:b2:d8:59:0c:05:0b:a7:c8:64:09:
                    c2:6f:c6:16:7a:01:6b:91:14:01:e1:95:15:1b:f0:
                    aa:f4:18:c2:6d:25:31:9f:9c:e0:f1:c6:e1:2f:1c:
                    c0:36:f3:5b:ad:3a:7e:59:9d:16:97:54:ec:f6:8f:
                    e8:0b:9b:dd:7c:32:79:da:5b:ea:24:a7:7c:32:c9:
                    37:61:d3:bc:52:8f:56:f5:ce:0d:15:19:13:b1:91:
                    1d:5d:4a:42:60:22:47:db:33:4b:e2:48:30:ea:75:
                    67:08:d9:54:83:92:d6:30:b2:28:30:9c:9c:c2:92:
                    1d:d7:6b:3a:20:2a:37:1d:17:94:91:17:5e:d4:e3:
                    75:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:ED:69:CD:17:47:38:9C:B5:F5:45:10:A8:7B:CA:CA:40:0B:4F:53
            X509v3 Authority Key Identifier:
                keyid:EC:B1:1B:54:50:8A:06:28:9B:0E:D0:6B:17:18:8A:D6:3F:4F:CF:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:d9:aa:64:b1:1d:be:1b:ba:c7:42:cd:17:78:29:14:89:f5:
         2e:ce:e0:e0:dc:78:56:4c:a7:c8:89:50:07:d9:09:e8:ac:57:
         82:17:14:42:d1:36:0a:ee:3d:a2:7c:1b:60:bf:45:73:59:9d:
         da:63:31:88:c5:bf:59:bc:68:d1:bc:c4:dc:08:36:19:78:ff:
         06:ab:92:1d:21:23:b0:06:e6:62:f5:11:8f:d8:8f:a4:e6:0f:
         49:66:d4:b9:16:2c:60:84:89:8a:74:3e:3f:fa:ce:fa:f4:a5:
         2b:5a:4d:0f:9e:c8:e3:de:54:83:1f:83:14:5f:0e:71:ee:e1:
         80:5b:3f:26:64:63:01:90:b1:22:6b:4b:6f:b3:a4:8c:ba:98:
         04:21:62:f9:8f:37:0c:f0:f9:e4:41:7d:fb:54:f2:11:5a:6b:
         08:5c:56:d9:99:48:4a:c0:31:4c:8f:ac:ce:72:93:4a:ce:95:
         96:6d:0a:41:f1:0a:7a:d6:63:bd:ba:3d:dc:80:1f:6f:64:b5:
         8b:de:d8:f0:4b:05:41:e4:9a:6e:f2:6f:58:42:34:2d:12:59:
         04:c3:27:ae:34:92:44:f9:be:74:a0:52:2b:01:45:8f:df:5e:
         1b:31:a3:a1:eb:04:49:5f:c6:b4:ea:23:c8:a7:a1:fc:59:82:
         13:e7:3d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 06:40:36 2026 by rpki-client