Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft
File:                     5J1E2IEnX8osC2s_fs7i0iIUb9I.mft (raw, json)
Hash identifier:          6BtXYRxnHpgx/62Mea642uBqyQePGt8TvD6sYbTwo9g=
Subject key identifier:   27:01:9E:0D:8E:BC:39:61:FE:18:96:1A:3F:6C:5D:85:4E:FE:31:C7
Authority key identifier: E4:9D:44:D8:81:27:5F:CA:2C:0B:6B:3F:7E:CE:E2:D2:22:14:6F:D2
Certificate issuer:       /CN=e49d44d881275fca2c0b6b3f7ecee2d222146fd2
Certificate serial:       01A0DA5F57B4B33C9483DF41247B6C061329
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5J1E2IEnX8osC2s_fs7i0iIUb9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft
Manifest number:          179A
Signing time:             Fri 25 Sep 2026 21:01:16 +0000
Manifest this update:     Fri 25 Sep 2026 21:01:16 +0000
Manifest next update:     Sat 26 Sep 2026 21:01:16 +0000
Files and hashes:         1: 5J1E2IEnX8osC2s_fs7i0iIUb9I.crl (hash: Ftw+nL5TT5D6uTu9x0qhZN/ES5YwXDzIH5XpiCsUg5I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5J1E2IEnX8osC2s_fs7i0iIUb9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:5f:57:b4:b3:3c:94:83:df:41:24:7b:6c:06:13:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e49d44d881275fca2c0b6b3f7ecee2d222146fd2
        Validity
            Not Before: Sep 25 21:01:16 2026 GMT
            Not After : Sep 26 21:01:16 2026 GMT
        Subject: CN=27019e0d8ebc3961fe18961a3f6c5d854efe31c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:68:33:b6:42:bb:9d:9f:6f:2b:3d:f7:69:3f:
                    a2:69:67:20:e1:8a:3a:4c:2d:5d:a7:15:f6:d8:45:
                    71:50:28:6d:80:97:ed:d1:73:58:55:42:1b:a2:e1:
                    86:c1:a2:1b:63:f0:68:32:6f:c1:b0:a4:a9:5f:f2:
                    29:37:f8:63:31:06:8a:e8:8c:04:9f:14:cc:ef:42:
                    39:cb:f4:ea:ee:c2:68:07:49:8a:ad:f3:98:ce:42:
                    52:08:10:99:85:e0:b7:f0:db:6d:3f:95:d1:f3:ad:
                    72:bb:7b:59:3a:b5:44:fc:4d:b8:28:14:e9:59:c4:
                    0d:78:d5:3c:fe:da:52:ed:f7:4f:00:79:91:b0:ba:
                    46:8d:ba:0d:3b:2d:03:4d:ff:22:48:e7:64:6e:62:
                    cc:0a:f9:d4:cb:8c:d6:8d:1d:1a:40:cf:98:47:f3:
                    83:9c:26:88:f9:07:72:02:dc:ce:95:20:ba:92:44:
                    b1:45:c1:c9:20:d9:82:3f:5f:cc:f0:86:1a:96:43:
                    db:32:1b:01:bb:78:e0:42:70:ac:aa:82:ef:80:8e:
                    60:b9:c3:d4:12:cc:fa:9f:0c:c3:4d:5c:e4:28:d9:
                    55:86:d4:bb:ad:12:79:ea:79:9c:82:2a:10:45:51:
                    33:67:ad:07:9f:3d:69:d2:a1:4f:5c:9a:f6:88:4e:
                    82:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:01:9E:0D:8E:BC:39:61:FE:18:96:1A:3F:6C:5D:85:4E:FE:31:C7
            X509v3 Authority Key Identifier:
                keyid:E4:9D:44:D8:81:27:5F:CA:2C:0B:6B:3F:7E:CE:E2:D2:22:14:6F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J1E2IEnX8osC2s_fs7i0iIUb9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:07:a2:dc:22:04:0d:37:d7:30:c3:fc:ca:e1:ce:38:a9:13:
         e9:cc:1d:27:85:e1:02:53:c4:06:ce:76:93:47:2e:00:a8:a4:
         a3:4d:7c:24:52:79:25:72:63:96:b2:71:52:3f:b4:67:c9:16:
         d1:a8:5b:44:37:71:fe:c8:8e:a2:89:5b:c4:b9:90:21:46:37:
         27:be:8f:9b:84:4d:0e:31:82:74:b8:aa:f0:2a:4c:ee:09:1b:
         c9:04:cf:c2:8e:b5:eb:9c:97:81:2f:a5:9a:4c:9b:8c:31:b4:
         24:3d:4d:56:6f:4d:6d:62:44:6e:61:d0:01:38:63:0f:f8:a1:
         8d:87:d7:94:61:a7:4a:6a:d3:98:c8:dc:9e:c8:b3:ca:1a:01:
         bf:66:11:82:c1:95:cf:2c:2c:95:58:b4:46:82:8b:73:a9:77:
         bf:01:d4:43:d2:9d:60:44:94:2b:58:85:5e:3d:59:84:0d:7c:
         9c:f2:2f:f6:b5:d4:62:0f:2b:9a:6e:d1:ef:61:93:b7:ff:1f:
         6f:e9:16:5a:5b:11:bb:33:6a:8d:df:e6:0e:61:5f:29:a0:4a:
         e3:6b:a6:9a:e7:ad:3e:bb:d1:dc:a2:d7:f9:aa:42:05:87:2f:
         29:1b:cc:1e:f7:70:81:dc:b0:57:d1:57:11:1c:88:b3:a8:f1:
         5f:f7:4f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:57:57 2026 by rpki-client