Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
File:                     C7M4e-bSDUos4TzAkuh_d3uLmVY.mft (raw, json)
Hash identifier:          lsRm26x3kMMk/xbNq/GlLs3vz4EsfXlHIljXHDEKxdE=
Subject key identifier:   C6:1B:6A:21:50:69:5D:99:93:82:A2:5D:E2:6D:1C:B9:57:24:DF:CC
Authority key identifier: 0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56
Certificate issuer:       /CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956
Certificate serial:       01A0C368B9683DFA9940C509D0B3258781D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
Manifest number:          1539
Signing time:             Mon 21 Sep 2026 10:00:15 +0000
Manifest this update:     Mon 21 Sep 2026 10:00:15 +0000
Manifest next update:     Tue 22 Sep 2026 10:00:15 +0000
Files and hashes:         1: C7M4e-bSDUos4TzAkuh_d3uLmVY.crl (hash: 6AX2dAfbZOa8yvgOHdtgbMKmT6+GseR4G8RDe4wVZh0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 10:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:68:b9:68:3d:fa:99:40:c5:09:d0:b3:25:87:81:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956
        Validity
            Not Before: Sep 21 10:00:15 2026 GMT
            Not After : Sep 22 10:00:15 2026 GMT
        Subject: CN=c61b6a2150695d999382a25de26d1cb95724dfcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:46:4b:eb:15:c0:ff:50:d0:61:c2:51:f7:c8:
                    41:04:8b:01:fa:e8:6c:f5:3b:ac:35:a7:50:11:2d:
                    ee:bb:bf:0a:9a:d9:43:eb:e7:90:e5:5a:72:28:eb:
                    55:0a:7a:31:ee:45:9f:9c:21:65:b0:18:75:71:41:
                    9b:94:42:0e:b5:4a:d2:6d:5c:e8:e4:67:76:a2:4a:
                    9a:80:a4:bb:dd:ca:c4:e5:09:48:57:82:79:a2:68:
                    60:df:8c:2e:5f:c6:30:c4:ba:68:af:e7:a5:15:6b:
                    bc:5f:6f:07:2e:15:88:62:f2:a5:e9:e9:5b:a9:66:
                    b6:ee:3c:7e:a4:e4:ac:5e:28:bb:40:64:0e:92:eb:
                    43:7e:8e:1a:be:da:83:a7:58:8e:72:42:f4:bb:f0:
                    a8:5a:72:5c:09:1c:66:ba:78:72:cf:12:86:e5:76:
                    3c:5f:b6:12:6d:02:e6:7b:e9:24:c3:e3:27:b2:5a:
                    34:20:b2:11:a0:a5:ed:81:ef:a7:bb:91:5a:05:45:
                    cf:d7:79:ef:ab:76:2f:0e:a0:37:14:0d:b5:51:64:
                    c0:d5:1c:85:04:9c:2c:41:b1:e4:f8:04:78:00:44:
                    23:51:c4:cf:11:1f:7f:9b:6b:e1:94:77:ec:b2:2c:
                    25:7e:ef:63:55:41:ef:a1:6a:3a:e9:f6:b4:26:d4:
                    4d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:1B:6A:21:50:69:5D:99:93:82:A2:5D:E2:6D:1C:B9:57:24:DF:CC
            X509v3 Authority Key Identifier:
                keyid:0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:42:03:6a:1a:5b:b1:c7:16:66:49:05:98:af:7f:71:5f:a4:
         4e:ff:00:73:e5:a0:09:80:c0:f1:9b:2a:98:4c:93:4e:f2:9d:
         9a:be:5b:10:50:8c:ef:37:c7:6f:29:db:c2:91:82:14:0d:1a:
         53:3a:db:b4:f5:2c:5e:f0:e1:66:b6:5e:24:48:d1:39:72:a3:
         5f:81:4f:c0:1a:fa:bd:ee:97:2b:7e:04:5d:b4:05:66:4f:87:
         88:72:42:45:3c:e0:8d:c6:b6:ae:37:5e:f5:aa:9e:80:d8:da:
         52:99:d7:73:ff:41:b7:e5:14:d1:6c:a1:85:4a:d3:95:13:0d:
         74:7e:fa:25:ed:29:6f:d6:4e:71:1c:65:77:5b:9e:b7:40:99:
         94:6b:22:af:33:d9:14:b2:48:29:ea:81:df:61:84:e7:55:3c:
         10:a2:64:c2:51:9d:61:a3:a5:33:3b:19:85:ec:df:65:28:86:
         35:92:5a:95:0e:2a:28:28:45:fc:0c:17:c9:a1:af:26:1a:3e:
         a3:1b:34:57:ed:6e:03:4a:44:06:6f:30:98:7f:1f:d2:2f:7f:
         ac:6c:b8:0e:00:47:86:6b:2b:4e:c4:71:7e:63:4d:ca:b1:1c:
         b4:3c:08:7c:df:3e:e0:32:75:67:e3:15:85:84:88:61:18:ef:
         91:c2:01:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:59:37 2026 by rpki-client