Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
File:                     5frVG_rdJFMhvgkuaB2N5uLSdcM.mft (raw, json)
Hash identifier:          aNP+hVlfsP7IxE9AVNuXmCGPHqno+O+FZbGfoEXErRs=
Subject key identifier:   28:8A:53:F7:40:69:E8:AE:4E:99:F8:5C:57:0D:D1:5B:96:4A:BD:74
Authority key identifier: E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3
Certificate issuer:       /CN=e5fad51bfadd245321be092e681d8de6e2d275c3
Certificate serial:       01A0D07F7C95A18D31527F7D0FA33AFD2175
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
Manifest number:          09EF
Signing time:             Wed 23 Sep 2026 23:00:10 +0000
Manifest this update:     Wed 23 Sep 2026 23:00:10 +0000
Manifest next update:     Thu 24 Sep 2026 23:00:10 +0000
Files and hashes:         1: 5frVG_rdJFMhvgkuaB2N5uLSdcM.crl (hash: 06+k4VCfYsSHXIbEwbLFOASjHqiVr2viEqGaJpnGAdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:7f:7c:95:a1:8d:31:52:7f:7d:0f:a3:3a:fd:21:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5fad51bfadd245321be092e681d8de6e2d275c3
        Validity
            Not Before: Sep 23 23:00:10 2026 GMT
            Not After : Sep 24 23:00:10 2026 GMT
        Subject: CN=288a53f74069e8ae4e99f85c570dd15b964abd74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a4:75:c9:f4:78:18:06:4a:db:30:ef:be:2a:
                    49:b2:49:24:9a:d5:c9:33:e7:19:e1:d6:52:b3:b4:
                    05:34:3d:d1:27:af:2f:85:5b:70:23:fa:08:11:3a:
                    26:08:a5:95:de:e9:3c:69:bc:bb:cd:1b:2e:33:59:
                    11:8e:d5:0d:dc:de:bb:f6:bb:4c:b9:69:4b:59:88:
                    ef:f6:f2:75:e6:59:be:8e:5a:aa:6e:7f:63:6c:e0:
                    e2:d4:3d:80:e9:09:e0:ef:a6:ea:e9:2c:4c:18:2d:
                    b5:dc:fd:59:eb:b0:94:9e:75:dc:16:1f:8a:d2:51:
                    15:a6:93:96:d1:9d:8a:9e:ba:c0:68:c7:65:14:f7:
                    6c:0e:7e:9e:c9:d7:5f:a0:69:c3:f9:6d:97:00:37:
                    60:34:75:80:c7:04:0f:35:9e:ef:6e:6e:5e:d5:a5:
                    af:37:de:59:97:a7:81:cb:b1:5d:b6:49:3b:7e:e0:
                    76:a3:e0:19:4e:9b:ef:a1:dc:d0:61:14:b6:fe:0f:
                    76:bb:d4:69:df:68:45:07:4f:e2:34:f6:db:a5:07:
                    78:a0:e3:d0:a3:31:8e:ae:55:d1:cf:90:ba:34:e2:
                    a9:47:cd:67:3e:bf:1c:1d:43:7c:99:7f:4f:dd:ec:
                    24:18:19:c7:e5:cd:ff:41:b6:11:cd:bd:78:75:81:
                    2c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:8A:53:F7:40:69:E8:AE:4E:99:F8:5C:57:0D:D1:5B:96:4A:BD:74
            X509v3 Authority Key Identifier:
                keyid:E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:df:10:0b:a4:0d:85:be:69:c8:ac:69:5f:e1:24:c2:d3:98:
         17:0a:4d:a5:be:bf:c6:aa:96:6e:b4:3c:05:0f:17:59:0e:34:
         ab:82:47:9a:81:5d:5f:f5:7b:bd:dd:af:1e:82:f3:2a:79:fb:
         4e:b2:aa:86:a2:87:7d:0a:91:ed:47:bb:3e:c3:43:6b:8f:66:
         29:28:79:00:f7:c6:8c:47:a6:57:39:4c:8b:ac:0c:9b:07:23:
         51:aa:0f:b0:fb:34:df:f8:17:7c:b8:69:7b:21:31:cc:37:f3:
         03:b5:2b:d2:ce:c1:f1:c3:52:f8:28:b6:ad:a1:4f:4d:5b:f7:
         fc:82:8f:61:6b:52:97:4b:1c:a0:65:44:0d:4d:f2:fa:70:ce:
         4e:51:a3:8d:36:6d:18:64:33:57:e0:87:7a:1c:bf:1b:29:09:
         ce:97:7d:8d:9a:89:c2:3e:b1:91:b0:5f:3b:d7:af:17:75:6a:
         f1:79:8c:37:51:f0:7e:d4:05:13:b5:07:30:be:58:7b:81:e4:
         ae:52:89:f5:62:59:55:db:5a:73:59:05:4a:bc:09:2e:c5:d8:
         f9:a3:df:41:76:24:37:8a:bd:c7:32:85:a6:59:5c:e4:aa:ec:
         6d:b5:7a:55:db:0a:6e:57:d1:13:96:53:90:30:38:e4:1e:8f:
         b3:d2:cd:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQf3yVoY0xUn99D6M6/SF1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZmFkNTFiZmFkZDI0NTMyMWJlMDkyZTY4MWQ4ZGU2ZTJk
Mjc1YzMwHhcNMjYwOTIzMjMwMDEwWhcNMjYwOTI0MjMwMDEwWjAzMTEwLwYDVQQD
EygyODhhNTNmNzQwNjllOGFlNGU5OWY4NWM1NzBkZDE1Yjk2NGFiZDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aR1yfR4GAZK2zDvvipJskkkmtXJ
M+cZ4dZSs7QFND3RJ68vhVtwI/oIETomCKWV3uk8aby7zRsuM1kRjtUN3N679rtM
uWlLWYjv9vJ15lm+jlqqbn9jbODi1D2A6Qng76bq6SxMGC213P1Z67CUnnXcFh+K
0lEVppOW0Z2KnrrAaMdlFPdsDn6eyddfoGnD+W2XADdgNHWAxwQPNZ7vbm5e1aWv
N95Zl6eBy7Fdtkk7fuB2o+AZTpvvodzQYRS2/g92u9Rp32hFB0/iNPbbpQd4oOPQ
ozGOrlXRz5C6NOKpR81nPr8cHUN8mX9P3ewkGBnH5c3/QbYRzb14dYEscwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCiKU/dAaeiuTpn4XFcN0VuWSr10MB8GA1UdIwQY
MBaAFOX61Rv63SRTIb4JLmgdjebi0nXDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWZyVkdfcmRKRk1odmdrdWFCMk41dUxTZGNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wMjBiN2EtNzRhMy00NTk0LTljNDYt
ZDViZGI2MzlmYmNhLzEvNWZyVkdfcmRKRk1odmdrdWFCMk41dUxTZGNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8wMjBiN2EtNzRhMy00NTk0LTljNDYtZDViZGI2MzlmYmNh
LzEvNWZyVkdfcmRKRk1odmdrdWFCMk41dUxTZGNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASt8QC6QN
hb5pyKxpX+EkwtOYFwpNpb6/xqqWbrQ8BQ8XWQ40q4JHmoFdX/V7vd2vHoLzKnn7
TrKqhqKHfQqR7Ue7PsNDa49mKSh5APfGjEemVzlMi6wMmwcjUaoPsPs03/gXfLhp
eyExzDfzA7Ur0s7B8cNS+Ci2raFPTVv3/IKPYWtSl0scoGVEDU3y+nDOTlGjjTZt
GGQzV+CHehy/GykJzpd9jZqJwj6xkbBfO9evF3Vq8XmMN1HwftQFE7UHML5Ye4Hk
rlKJ9WJZVdtac1kFSrwJLsXY+aPfQXYkN4q9xzKFpllc5KrsbbV6VdsKblfRE5ZT
kDA45B6Ps9LN2Q==
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:23:09 2026 by rpki-client