Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
File:                     564LxrVkpXPje515fLdeuxt24AE.mft (raw, json)
Hash identifier:          JmTO+zmmYqkJOWVKLnYhBfOEJ36v0OiP7MxErz/7nJ8=
Subject key identifier:   9E:E1:D1:03:32:EF:CD:66:85:A9:0A:99:08:83:C9:F9:68:DE:CF:4C
Authority key identifier: E7:AE:0B:C6:B5:64:A5:73:E3:7B:9D:79:7C:B7:5E:BB:1B:76:E0:01
Certificate issuer:       /CN=e7ae0bc6b564a573e37b9d797cb75ebb1b76e001
Certificate serial:       01A0CF6D11A6C58A35D1BE58A810C6AB3D0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
Manifest number:          1A68
Signing time:             Wed 23 Sep 2026 18:00:26 +0000
Manifest this update:     Wed 23 Sep 2026 18:00:26 +0000
Manifest next update:     Thu 24 Sep 2026 18:00:26 +0000
Files and hashes:         1: 564LxrVkpXPje515fLdeuxt24AE.crl (hash: UfnZiYnz9AsM44r51EYVo+6tsoNfaoKXtVx/z0bAMOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:6d:11:a6:c5:8a:35:d1:be:58:a8:10:c6:ab:3d:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ae0bc6b564a573e37b9d797cb75ebb1b76e001
        Validity
            Not Before: Sep 23 18:00:26 2026 GMT
            Not After : Sep 24 18:00:26 2026 GMT
        Subject: CN=9ee1d10332efcd6685a90a990883c9f968decf4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5c:7f:5b:d1:34:9a:c0:5a:45:43:50:5e:8d:
                    b2:de:17:de:e2:88:3d:3c:a1:71:91:4d:cb:fd:fa:
                    28:44:d6:e1:e3:e5:06:6f:4d:44:59:7b:ee:4d:38:
                    e6:5f:0a:0f:97:d3:cb:69:31:15:86:d4:43:2a:39:
                    83:b3:f2:d1:52:4b:7b:c0:96:0f:49:7b:54:27:76:
                    8a:7c:ea:bd:7d:5d:c0:31:2a:44:15:47:4a:40:4e:
                    d1:61:0c:ae:e1:da:76:c5:dc:ce:f2:38:81:49:cf:
                    b1:16:45:eb:0b:ae:b9:a8:36:43:43:5c:92:58:b9:
                    d5:1f:c5:a0:3d:b8:0f:b3:cf:4f:1a:68:64:29:98:
                    38:bc:f4:58:be:a5:54:8f:fd:f7:85:db:68:98:27:
                    27:08:f6:68:f2:08:54:bc:0c:93:2d:d0:0c:c5:e4:
                    c7:30:28:82:fc:d3:95:a5:66:33:81:b4:69:e3:9d:
                    b2:b4:24:cb:93:8f:69:1f:d0:70:f4:99:d8:97:79:
                    9b:b5:67:7e:7d:b2:4f:36:c7:60:ee:20:30:ee:d5:
                    05:62:fd:e7:6b:35:b7:aa:cb:46:93:a7:22:7c:5f:
                    51:ab:f5:3b:d1:c3:6f:f7:93:ea:01:9f:2b:bf:fc:
                    49:ab:02:33:ad:94:91:73:1f:55:3a:be:26:56:b6:
                    b5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E1:D1:03:32:EF:CD:66:85:A9:0A:99:08:83:C9:F9:68:DE:CF:4C
            X509v3 Authority Key Identifier:
                keyid:E7:AE:0B:C6:B5:64:A5:73:E3:7B:9D:79:7C:B7:5E:BB:1B:76:E0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:fc:44:02:95:35:cd:72:c4:8f:cd:c6:8c:29:65:20:9d:d4:
         a5:72:fd:dd:ea:24:18:3d:55:21:53:8d:39:8a:2b:2d:3a:bc:
         ba:20:5e:79:b6:1d:34:b8:a4:88:64:cf:ed:9f:d0:4f:92:c7:
         0a:3b:c7:57:c3:82:54:02:2d:12:ad:e0:68:1b:f8:2a:fd:ca:
         61:45:a8:fe:5c:5f:66:00:09:68:43:47:38:72:7d:3b:1a:cc:
         63:d9:b1:ab:5a:10:75:25:2c:0f:5e:2f:4f:b8:31:b7:81:08:
         53:68:ea:35:63:a9:d5:89:ed:9c:a0:0e:fe:1b:8a:2a:23:8f:
         2a:4b:7d:e6:64:2d:e0:83:f4:c1:09:a2:d5:7b:cd:ec:98:c0:
         d1:70:6d:a8:eb:c0:cc:82:7e:79:55:3d:30:b9:66:6e:fb:ec:
         5d:50:a7:36:5b:5a:f9:2d:dd:4e:54:62:ef:40:dd:2b:b4:16:
         2a:56:62:5e:8f:4c:a4:6d:fa:bf:f7:a0:75:10:05:7a:b4:e2:
         ea:5d:3b:ff:39:c1:29:0c:17:05:ae:62:39:0a:fc:d9:a8:3f:
         00:1a:99:2e:6d:23:12:54:94:c8:ff:82:dc:2e:88:79:aa:fe:
         68:24:22:5b:32:de:bd:01:ad:cf:4f:89:41:2f:98:3e:e1:bf:
         99:94:72:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:46:48 2026 by rpki-client