Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
File:                     55rcKmJwJwixoO4N87TPkiiW3NY.mft (raw, json)
Hash identifier:          aBsFWC9YkQPwThlrgQjnuqugGnq2bR3PX5Vte0RhQSM=
Subject key identifier:   68:95:0D:D8:A8:81:45:B0:38:11:3B:0A:39:B1:CA:A4:B2:0B:FA:61
Authority key identifier: E7:9A:DC:2A:62:70:27:08:B1:A0:EE:0D:F3:B4:CF:92:28:96:DC:D6
Certificate issuer:       /CN=e79adc2a62702708b1a0ee0df3b4cf922896dcd6
Certificate serial:       01A0E8F6B2C70107ADB9910CEF55767494A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
Manifest number:          07C7
Signing time:             Mon 28 Sep 2026 17:01:16 +0000
Manifest this update:     Mon 28 Sep 2026 17:01:16 +0000
Manifest next update:     Tue 29 Sep 2026 17:01:16 +0000
Files and hashes:         1: 55rcKmJwJwixoO4N87TPkiiW3NY.crl (hash: MSExSTGZpIbzRtkIxZmr5FTRVeV7xFvceKswhzFfjOE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 14:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e8:f6:b2:c7:01:07:ad:b9:91:0c:ef:55:76:74:94:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e79adc2a62702708b1a0ee0df3b4cf922896dcd6
        Validity
            Not Before: Sep 28 17:01:16 2026 GMT
            Not After : Sep 29 17:01:16 2026 GMT
        Subject: CN=68950dd8a88145b038113b0a39b1caa4b20bfa61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:26:f5:5d:f3:74:37:06:18:d2:51:dc:a3:28:
                    86:04:15:24:5f:1c:d5:8b:66:6a:86:4c:e8:64:22:
                    4b:0d:ed:b2:f9:d6:4f:21:23:54:a5:50:cd:f3:cb:
                    77:f1:3a:28:9c:e3:3e:89:99:37:e3:77:c7:cf:6e:
                    00:da:74:d4:f2:99:db:5c:e9:13:72:fd:0a:e5:07:
                    97:88:1e:d2:7c:0e:9e:31:8c:0d:62:68:92:4e:b2:
                    9a:f4:a1:41:68:35:cc:28:98:4b:c0:61:07:1e:c9:
                    a5:11:01:25:5a:f5:d7:49:8d:70:5e:0c:ae:4f:f8:
                    c1:94:59:b9:41:a9:84:c2:d2:a4:5a:fc:9e:c0:d9:
                    9b:91:ea:a6:5f:54:b7:74:74:9e:69:cb:0c:b1:bf:
                    29:71:fe:f1:71:39:be:8d:df:c1:ce:14:2d:c9:dc:
                    0c:80:06:a5:9a:6d:71:a8:a7:1f:ae:09:70:b0:65:
                    7e:88:f0:17:6b:04:06:99:5f:02:f3:c5:b3:dc:8d:
                    0a:c5:f9:a0:ae:ed:44:9a:34:5a:2e:ce:98:54:23:
                    32:02:17:f3:7f:a9:70:5b:00:f4:01:66:e9:ee:5d:
                    48:8c:a7:9b:26:de:6b:78:51:b9:93:3d:4d:10:fd:
                    31:76:79:ef:c0:19:f9:55:26:70:b8:e1:0a:af:c4:
                    53:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:95:0D:D8:A8:81:45:B0:38:11:3B:0A:39:B1:CA:A4:B2:0B:FA:61
            X509v3 Authority Key Identifier:
                keyid:E7:9A:DC:2A:62:70:27:08:B1:A0:EE:0D:F3:B4:CF:92:28:96:DC:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:85:c8:07:a7:32:24:f0:49:cc:27:17:01:fb:61:82:6f:c6:
         4b:37:8c:76:3f:9a:35:df:4e:c3:56:80:15:77:ce:b5:f7:04:
         67:23:88:05:f6:56:09:ff:9b:3d:54:d6:b3:6f:66:23:8f:9e:
         0e:28:d3:9f:54:1b:d6:14:b8:79:c7:89:20:3a:a8:0e:f6:c6:
         f1:81:e6:3a:3f:5b:3e:c4:73:b8:98:31:bc:79:40:38:17:05:
         42:14:bf:b8:79:b9:39:8a:e6:b3:92:49:ae:20:ed:0e:e3:fd:
         a1:54:30:bb:a8:11:87:d8:86:63:92:37:e2:7f:24:d5:ab:6f:
         dc:c7:14:04:13:ec:fe:1c:8d:0b:bb:c8:e4:cc:23:5d:8c:5a:
         35:ca:15:88:90:26:65:9c:b5:50:a6:45:d1:89:fe:8d:3f:3b:
         3b:f2:fc:93:af:6c:b2:63:af:72:a5:2b:86:8b:f2:cb:b6:a4:
         10:bd:d1:49:05:95:cc:5a:35:b6:fa:ee:43:0e:fe:81:98:28:
         c2:c6:1b:0d:ad:5f:90:2a:3a:a5:b3:ab:c0:ff:fe:0e:13:45:
         ed:b6:5e:f3:c8:9f:82:5a:ee:e9:4f:eb:26:96:8d:0e:8e:7f:
         11:bb:1f:22:f7:6b:4f:f1:23:dc:e5:88:54:de:eb:74:55:b7:
         90:4a:9c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:18:21 2026 by rpki-client