Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
File:                     B8YQsqBtsYMYVLZybDMJAzYodBU.mft (raw, json)
Hash identifier:          eUScLmUXraVKsNSvcE1k+FOfqG8ur7h90agIVSTTDAI=
Subject key identifier:   72:27:47:14:E5:13:E1:C1:A8:3A:45:E1:0E:A6:A5:B7:3F:A9:E9:37
Authority key identifier: 07:C6:10:B2:A0:6D:B1:83:18:54:B6:72:6C:33:09:03:36:28:74:15
Certificate issuer:       /CN=07c610b2a06db1831854b6726c33090336287415
Certificate serial:       01A0C40E5F2615E5CDDA9417B972179CD3CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
Manifest number:          1A65
Signing time:             Mon 21 Sep 2026 13:01:11 +0000
Manifest this update:     Mon 21 Sep 2026 13:01:11 +0000
Manifest next update:     Tue 22 Sep 2026 13:01:11 +0000
Files and hashes:         1: B8YQsqBtsYMYVLZybDMJAzYodBU.crl (hash: O/moULY9cAROZSo92ZHhysop4GPXi3L2TEkZa8yTYMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 13:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:0e:5f:26:15:e5:cd:da:94:17:b9:72:17:9c:d3:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07c610b2a06db1831854b6726c33090336287415
        Validity
            Not Before: Sep 21 13:01:11 2026 GMT
            Not After : Sep 22 13:01:11 2026 GMT
        Subject: CN=72274714e513e1c1a83a45e10ea6a5b73fa9e937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:80:b7:41:be:12:ba:0f:af:3e:47:dc:3c:a2:
                    89:ab:a7:58:94:43:b3:e3:69:81:60:4d:04:26:e4:
                    3c:d4:40:59:ef:72:4f:26:d9:d5:5a:4d:d6:4d:4d:
                    31:7b:f4:a0:46:53:e8:b8:ef:95:34:25:ca:16:f7:
                    77:90:41:ec:f2:ec:96:18:33:4a:ff:7d:f1:a2:26:
                    cc:34:76:49:8d:b4:e6:09:9b:60:49:37:fd:04:14:
                    d7:d2:17:06:c4:00:68:f6:1e:f0:68:1c:ce:d6:c4:
                    0d:5a:34:3c:55:f4:b3:2f:54:05:11:03:8f:53:7a:
                    48:35:e7:e6:46:71:ef:19:0e:e3:3b:49:a3:87:d8:
                    e6:c7:19:89:da:6a:87:d1:be:73:cc:50:a3:32:ed:
                    4e:21:10:a9:42:b6:3a:e0:0c:85:2e:c9:d7:e6:f7:
                    ba:8b:f5:e2:0a:60:93:3f:85:51:d6:7c:71:30:74:
                    b6:33:a7:96:ae:b6:32:6e:29:2e:8a:ab:a8:60:66:
                    45:51:14:ae:07:85:70:af:25:01:df:36:17:7a:0b:
                    8c:94:2f:1e:58:f6:51:b6:98:08:08:da:65:8d:a2:
                    ba:5e:b7:ee:03:fa:e9:2c:36:ed:4c:1c:51:2d:e5:
                    10:6f:74:10:51:dd:5d:0b:cd:5e:65:b7:91:dd:55:
                    9c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:27:47:14:E5:13:E1:C1:A8:3A:45:E1:0E:A6:A5:B7:3F:A9:E9:37
            X509v3 Authority Key Identifier:
                keyid:07:C6:10:B2:A0:6D:B1:83:18:54:B6:72:6C:33:09:03:36:28:74:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:95:2b:83:17:92:62:6c:b2:74:ed:2f:ef:b7:9d:2d:6b:5f:
         22:41:38:10:95:06:da:cd:00:70:2d:5c:d6:7a:49:fe:46:9f:
         5c:25:46:a4:a4:e7:bd:44:47:c7:e1:e8:8a:30:ab:52:8d:93:
         2e:93:17:1d:7b:6a:aa:02:41:4e:96:8f:81:42:cd:70:62:d4:
         64:8e:6c:55:b1:57:15:57:ff:83:e1:cd:79:ad:7b:7b:d7:8d:
         a1:d3:be:71:0e:4f:51:30:0f:da:12:d1:b3:a0:33:93:09:a9:
         d7:37:7c:2a:9a:64:76:d5:49:4c:ec:d3:61:57:fc:07:bd:67:
         b6:69:3a:fc:92:70:1f:bc:08:f9:9b:4c:99:43:e0:bb:80:da:
         60:ba:a1:11:43:6e:ac:9a:f2:e3:2d:17:ae:2c:f1:0b:f6:2f:
         80:c6:1f:22:1b:20:58:d2:bf:0f:ff:84:b5:70:70:64:31:03:
         bd:0a:14:67:bd:f0:c0:a3:e0:38:ed:79:6e:f4:d8:87:a9:0d:
         a0:73:75:14:14:d0:c7:7a:2d:dd:05:70:12:c2:2e:9b:01:75:
         48:8e:56:bf:e5:37:a7:45:b9:10:bd:81:61:d5:41:01:73:6a:
         36:01:55:ea:cb:4d:b1:b0:fc:eb:fe:a0:a5:69:ca:f4:be:a1:
         53:3e:66:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:52:27 2026 by rpki-client