Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
File:                     C7M4e-bSDUos4TzAkuh_d3uLmVY.mft (raw, json)
Hash identifier:          wq/7XMrahFrfG48U6FvLRSMF6FBObLAaaq6dK9N5eMI=
Subject key identifier:   F2:93:1B:16:26:FE:A2:3A:C4:24:11:9D:69:72:2B:C4:1B:FC:13:D3
Authority key identifier: 0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56
Certificate issuer:       /CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956
Certificate serial:       01A1C631515ABD818628AAC45106CDD245E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
Manifest number:          15BF
Signing time:             Tue 10 Nov 2026 16:01:23 +0000
Manifest this update:     Tue 10 Nov 2026 16:01:23 +0000
Manifest next update:     Wed 11 Nov 2026 16:01:23 +0000
Files and hashes:         1: C7M4e-bSDUos4TzAkuh_d3uLmVY.crl (hash: Fw/d2iK4DvL9ub/7O7f9hKi6gX+LpDxcJiMMnyh++9I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Nov 2026 16:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:c6:31:51:5a:bd:81:86:28:aa:c4:51:06:cd:d2:45:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956
        Validity
            Not Before: Nov 10 16:01:23 2026 GMT
            Not After : Nov 11 16:01:23 2026 GMT
        Subject: CN=f2931b1626fea23ac424119d69722bc41bfc13d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8b:24:02:31:52:0a:c5:79:9f:36:ae:25:e4:
                    86:f9:fd:43:2b:44:6e:8a:0f:ad:4e:b1:f1:bb:59:
                    e6:36:a0:fa:15:3b:5b:99:b4:8e:ac:c6:24:d0:99:
                    ce:e2:19:89:87:57:45:ba:3f:05:ef:ca:d1:23:a5:
                    7f:30:a9:98:70:67:a8:7a:f9:57:e9:9b:06:bf:f1:
                    c3:83:8b:6e:18:e0:49:d7:78:c1:97:6a:10:81:7e:
                    74:df:b9:f0:82:36:9e:e2:55:75:a8:b5:d6:ef:52:
                    f6:34:53:69:6c:e1:91:e5:64:d3:56:8f:bb:8d:3d:
                    d6:7f:ff:51:fe:be:11:bd:0b:de:52:55:81:aa:99:
                    a5:0f:a5:ae:3b:bb:b2:93:93:58:9f:27:a8:88:35:
                    9b:36:50:76:00:cd:67:51:5d:c8:df:c1:af:54:0c:
                    cd:3f:28:f0:d7:46:db:93:56:1a:2c:c0:f9:cc:77:
                    10:d5:f7:ac:ba:b8:af:96:da:6c:3b:e9:cb:db:4f:
                    c8:2f:8b:c6:96:e1:26:db:89:13:3f:14:66:c4:9f:
                    35:4f:46:d6:fb:7b:e4:14:3b:d4:7c:56:7e:61:b5:
                    ef:f1:41:48:de:19:1b:d0:28:61:ec:29:01:01:a7:
                    1e:25:59:bd:71:96:9a:bc:91:7c:4e:74:4d:6c:49:
                    dd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:93:1B:16:26:FE:A2:3A:C4:24:11:9D:69:72:2B:C4:1B:FC:13:D3
            X509v3 Authority Key Identifier:
                keyid:0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:85:35:d9:76:1f:00:62:45:94:bf:d0:ce:b1:1f:99:9a:ad:
         14:89:a1:24:6b:04:03:89:c3:82:78:9d:38:84:b9:7c:32:e0:
         4f:a5:a8:68:b5:09:9f:db:84:ef:e2:95:89:c5:9d:ae:2a:61:
         36:b7:0c:29:47:a8:aa:5c:16:49:32:2f:23:51:af:c3:b4:ce:
         76:16:95:ee:d3:8e:a6:97:75:13:0e:22:96:8e:08:b2:f7:28:
         c0:18:34:77:2c:dc:ee:d9:e4:fd:00:a9:7d:ea:73:c1:e6:1e:
         43:9d:af:45:57:3d:ac:b4:10:4d:32:05:4c:1b:81:3a:e6:b0:
         a2:9e:4e:5a:ec:df:88:06:d8:33:49:42:38:97:dd:6a:d8:7c:
         bb:da:50:7a:58:d1:41:fa:61:8b:9e:ea:07:4a:c1:05:d2:2d:
         4a:47:9d:a4:0a:56:b7:42:5e:fe:e1:86:1f:10:c3:15:5d:4c:
         45:24:2e:ec:79:67:6b:93:3d:ce:60:e7:8a:1b:ae:31:9c:b3:
         88:a1:46:79:62:6a:27:e4:2a:31:2e:f9:21:87:4f:eb:48:6f:
         e2:71:4a:00:ee:3a:78:51:bd:00:1a:c6:34:f9:94:ee:91:56:
         8a:a3:76:6f:90:d4:d2:43:12:8a:db:d5:8b:f4:fe:bc:08:0d:
         fc:81:2b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 20:08:42 2026 by rpki-client