Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
File:                     5UmH5s-8zliuDJbnZmqyGrPi4JA.mft (raw, json)
Hash identifier:          O/a+DeQ9hUlvpntHZsq59w/nSHHH3zJccYSSOeZRxwI=
Subject key identifier:   47:F0:89:01:29:94:FA:64:34:A6:43:78:2F:CD:10:24:5D:4E:6A:09
Authority key identifier: E5:49:87:E6:CF:BC:CE:58:AE:0C:96:E7:66:6A:B2:1A:B3:E2:E0:90
Certificate issuer:       /CN=e54987e6cfbcce58ae0c96e7666ab21ab3e2e090
Certificate serial:       01A0D07F9B116F02A24C33E35C83FAA9CBFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
Manifest number:          070F
Signing time:             Wed 23 Sep 2026 23:00:18 +0000
Manifest this update:     Wed 23 Sep 2026 23:00:18 +0000
Manifest next update:     Thu 24 Sep 2026 23:00:18 +0000
Files and hashes:         1: 5UmH5s-8zliuDJbnZmqyGrPi4JA.crl (hash: CLIuogczz9zSVlu3fFlqhEVe2HsETSAU/9WNK7JcC+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:7f:9b:11:6f:02:a2:4c:33:e3:5c:83:fa:a9:cb:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e54987e6cfbcce58ae0c96e7666ab21ab3e2e090
        Validity
            Not Before: Sep 23 23:00:18 2026 GMT
            Not After : Sep 24 23:00:18 2026 GMT
        Subject: CN=47f089012994fa6434a643782fcd10245d4e6a09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a4:23:ac:f4:f7:32:aa:73:c5:41:5c:96:ca:
                    5b:c0:03:3a:48:c9:92:4c:99:55:5e:03:7b:28:8c:
                    33:6d:1f:ae:9f:11:43:e9:b3:dd:c7:7d:ed:81:8f:
                    c2:c2:9e:69:ac:a8:fe:d0:28:b9:86:32:f4:ef:68:
                    a1:a7:9b:f2:79:8b:28:bc:72:e8:9c:94:8f:80:d7:
                    76:26:05:93:1b:04:92:01:2e:b3:a0:78:53:d6:0c:
                    95:09:38:82:c2:54:db:0f:ab:ee:2a:09:71:62:98:
                    6e:46:cd:db:d0:e0:0b:7d:0b:20:3e:06:1b:05:09:
                    0a:2e:35:c5:8b:26:2a:22:ab:da:9a:f0:bd:d2:b2:
                    70:09:3a:6b:52:bd:a2:b7:11:eb:65:bc:4f:8e:c6:
                    cd:36:9b:92:1f:0b:7f:f5:04:f6:33:36:e3:ac:0b:
                    7b:da:11:46:82:f4:a5:8d:cb:54:50:8a:6d:6c:67:
                    2f:6d:8d:37:cc:dd:04:2a:b2:aa:3b:3e:49:03:1f:
                    6f:93:91:70:6d:ce:64:f1:79:f2:7b:a9:e0:d3:30:
                    10:ae:17:56:cc:53:b8:bf:20:9f:20:2f:3c:75:01:
                    ca:3e:fc:c5:04:9d:7a:f1:55:6c:bd:04:b4:99:6c:
                    83:ad:f7:04:1d:42:fb:c7:5f:8e:7c:cf:d7:f1:a6:
                    e3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F0:89:01:29:94:FA:64:34:A6:43:78:2F:CD:10:24:5D:4E:6A:09
            X509v3 Authority Key Identifier:
                keyid:E5:49:87:E6:CF:BC:CE:58:AE:0C:96:E7:66:6A:B2:1A:B3:E2:E0:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:bd:ea:39:e2:70:67:8b:ca:a4:21:8e:24:69:eb:b3:76:18:
         bc:7e:b8:80:a5:c1:23:4b:2e:39:33:0c:bc:d1:91:54:40:6a:
         4a:49:1a:1c:5d:19:a1:19:09:30:2d:8c:1c:fa:d4:ee:40:81:
         16:42:7b:09:ad:57:81:18:3c:40:ac:4b:2a:9e:55:f1:41:b2:
         58:91:e9:d8:d9:56:ef:fb:c8:9b:39:e1:ba:d4:3e:ac:46:ce:
         c1:11:be:1e:3e:69:a0:bc:fb:f9:3a:20:67:af:e8:cd:c3:e9:
         1f:9f:77:54:7f:85:a1:93:57:e3:ca:25:c8:85:ae:d2:f7:c0:
         fc:d1:a3:fc:a4:4b:4a:87:23:d9:39:a2:94:7f:b9:12:56:66:
         3d:a1:3c:1a:f0:fb:2d:22:32:f2:1f:06:49:4f:a4:30:fa:9d:
         7d:12:07:de:8c:0b:6c:cf:aa:07:5a:ff:a1:4c:c6:e3:51:d2:
         1a:76:64:ea:b0:62:64:79:92:3c:8e:68:bf:5b:81:10:18:65:
         a8:5f:08:63:31:e6:23:a5:5b:e9:24:60:45:40:bb:0e:51:72:
         33:3d:98:1a:ea:19:1f:b0:3e:e0:33:2d:7f:03:be:08:37:34:
         e2:1d:78:28:ed:9d:7d:f0:ef:b5:ba:a0:ec:41:f7:ae:2c:69:
         e2:ba:a7:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQf5sRbwKiTDPjXIP6qcv9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NDk4N2U2Y2ZiY2NlNThhZTBjOTZlNzY2NmFiMjFhYjNl
MmUwOTAwHhcNMjYwOTIzMjMwMDE4WhcNMjYwOTI0MjMwMDE4WjAzMTEwLwYDVQQD
Eyg0N2YwODkwMTI5OTRmYTY0MzRhNjQzNzgyZmNkMTAyNDVkNGU2YTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaQjrPT3MqpzxUFclspbwAM6SMmS
TJlVXgN7KIwzbR+unxFD6bPdx33tgY/Cwp5prKj+0Ci5hjL072ihp5vyeYsovHLo
nJSPgNd2JgWTGwSSAS6zoHhT1gyVCTiCwlTbD6vuKglxYphuRs3b0OALfQsgPgYb
BQkKLjXFiyYqIqvamvC90rJwCTprUr2itxHrZbxPjsbNNpuSHwt/9QT2MzbjrAt7
2hFGgvSljctUUIptbGcvbY03zN0EKrKqOz5JAx9vk5Fwbc5k8Xnye6ng0zAQrhdW
zFO4vyCfIC88dQHKPvzFBJ168VVsvQS0mWyDrfcEHUL7x1+OfM/X8abjjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfwiQEplPpkNKZDeC/NECRdTmoJMB8GA1UdIwQY
MBaAFOVJh+bPvM5YrgyW52Zqshqz4uCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVVtSDVzLTh6bGl1REpiblptcXlHclBpNEpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84YWU3MzAtYWU1ZS00YmU5LTk3OGIt
MDBiNTIwODc1Mzc2LzEvNVVtSDVzLTh6bGl1REpiblptcXlHclBpNEpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS84YWU3MzAtYWU1ZS00YmU5LTk3OGItMDBiNTIwODc1Mzc2
LzEvNVVtSDVzLTh6bGl1REpiblptcXlHclBpNEpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa73qOeJw
Z4vKpCGOJGnrs3YYvH64gKXBI0suOTMMvNGRVEBqSkkaHF0ZoRkJMC2MHPrU7kCB
FkJ7Ca1XgRg8QKxLKp5V8UGyWJHp2NlW7/vImznhutQ+rEbOwRG+Hj5poLz7+Tog
Z6/ozcPpH593VH+FoZNX48olyIWu0vfA/NGj/KRLSocj2TmilH+5ElZmPaE8GvD7
LSIy8h8GSU+kMPqdfRIH3owLbM+qB1r/oUzG41HSGnZk6rBiZHmSPI5ov1uBEBhl
qF8IYzHmI6Vb6SRgRUC7DlFyMz2YGuoZH7A+4DMtfwO+CDc04h14KO2dffDvtbqg
7EH3rixp4rqn5g==
-----END CERTIFICATE-----
Generated at Thu Sep 24 04:11:40 2026 by rpki-client