Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
File:                     5ZAclsdH6RYsrv5QFArlMhsjxXw.mft (raw, json)
Hash identifier:          bILiCkfQ4zbyjP4JgfE7dbu5UNc+JLmxHkERk2/pLOc=
Subject key identifier:   77:74:B5:B2:61:48:89:98:09:96:F2:15:53:F0:B3:9D:88:51:E4:18
Authority key identifier: E5:90:1C:96:C7:47:E9:16:2C:AE:FE:50:14:0A:E5:32:1B:23:C5:7C
Certificate issuer:       /CN=e5901c96c747e9162caefe50140ae5321b23c57c
Certificate serial:       01A135FEC8CC37E486E56D710B17E804AD86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5ZAclsdH6RYsrv5QFArlMhsjxXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
Manifest number:          05EA
Signing time:             Tue 13 Oct 2026 16:00:52 +0000
Manifest this update:     Tue 13 Oct 2026 16:00:52 +0000
Manifest next update:     Wed 14 Oct 2026 16:00:52 +0000
Files and hashes:         1: 5ZAclsdH6RYsrv5QFArlMhsjxXw.crl (hash: eC9Ok26OR1mceo0Os2H8YA/HI8UVaA9L6+U/Hih1+Jc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5ZAclsdH6RYsrv5QFArlMhsjxXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 16:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:35:fe:c8:cc:37:e4:86:e5:6d:71:0b:17:e8:04:ad:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5901c96c747e9162caefe50140ae5321b23c57c
        Validity
            Not Before: Oct 13 16:00:52 2026 GMT
            Not After : Oct 14 16:00:52 2026 GMT
        Subject: CN=7774b5b2614889980996f21553f0b39d8851e418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:07:7f:b8:f6:3e:80:3b:6a:eb:ee:fc:0b:67:
                    35:15:fe:95:ac:77:98:ad:59:e0:64:b5:fe:49:5a:
                    c8:b8:3b:bf:ef:06:89:6a:5b:dc:dc:e4:32:20:8d:
                    af:51:6b:a7:7a:43:62:24:d7:d2:ed:c9:00:49:7d:
                    2a:22:fb:1b:3f:f9:42:43:e1:57:e9:77:19:85:c3:
                    cb:eb:16:5f:b3:2a:36:37:af:ec:e9:cb:22:4c:e7:
                    0f:ff:fe:d0:a7:01:42:64:d1:ef:39:9f:f6:b6:70:
                    06:eb:e0:dc:ef:1c:a8:8c:bd:53:01:2c:1d:79:06:
                    c2:de:42:6c:6b:66:00:73:2b:89:88:59:c6:92:a1:
                    37:6d:9b:23:b5:19:44:16:cf:3c:ce:dd:e5:4d:7f:
                    b1:42:08:1c:42:c0:09:d9:7e:8e:d6:31:03:3c:a1:
                    79:78:0a:b1:44:f7:e3:81:5e:a7:93:0a:c7:34:c3:
                    26:3d:6f:11:87:33:c9:eb:9c:4d:4b:e0:88:e0:e9:
                    94:47:8e:b9:7c:cc:81:c7:d6:13:fc:e3:14:77:4f:
                    ba:be:e6:c1:ed:e5:52:5d:f2:1c:37:1c:e6:50:f2:
                    1d:ee:76:00:32:81:d4:3c:c2:0a:1b:be:17:9d:8d:
                    da:eb:4f:17:f7:b6:60:4f:74:0b:35:e7:78:1e:23:
                    21:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:74:B5:B2:61:48:89:98:09:96:F2:15:53:F0:B3:9D:88:51:E4:18
            X509v3 Authority Key Identifier:
                keyid:E5:90:1C:96:C7:47:E9:16:2C:AE:FE:50:14:0A:E5:32:1B:23:C5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ZAclsdH6RYsrv5QFArlMhsjxXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:bd:92:dc:5d:e2:29:4a:fb:bb:08:42:67:2e:09:5e:e7:ba:
         72:76:93:18:7e:2a:c3:2e:a4:95:f7:52:aa:a3:83:97:ec:9d:
         b8:e5:9d:9b:b2:3a:48:62:91:ff:bc:c0:5d:f4:71:98:c7:c9:
         02:33:0b:aa:a6:bd:1c:89:21:d9:97:1f:82:04:03:25:b7:05:
         b0:ec:53:40:c1:2e:80:dd:52:90:ac:e7:5d:35:b1:5a:9d:f5:
         dd:32:75:a0:f2:ef:53:d0:3f:69:eb:45:61:b7:e4:09:cc:41:
         20:1b:47:db:91:44:e3:5e:4e:db:dc:e3:f5:66:9e:b7:7c:d8:
         1c:50:b5:82:de:16:4c:ca:d6:6d:a3:a3:4e:f2:3e:d6:d4:e5:
         d0:4c:7e:5c:ff:9a:38:1e:48:cb:eb:80:6e:c8:d7:f0:07:14:
         95:1a:c5:84:5b:9e:c4:75:21:e6:85:fe:3b:d3:d6:eb:4a:ff:
         27:7c:5f:e3:6a:64:ec:63:18:89:59:15:b2:5c:aa:1d:89:72:
         38:a0:6b:67:02:fe:51:57:91:59:ab:d1:ef:01:b6:78:3e:4c:
         e6:22:fb:9b:8d:6f:09:8b:9c:31:2d:14:c4:39:15:68:48:e0:
         bf:9f:c3:5c:38:6d:08:4e:f6:8c:82:d6:9f:b7:72:e4:29:a4:
         a3:48:98:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 03:52:18 2026 by rpki-client