Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft
File:                     5i7oJCK3hJkSKWNhQEZJp__smOU.mft (raw, json)
Hash identifier:          7IAWVEzsV0UfVTibxZlE4ttoM/7WbjlzV8qBMsEity8=
Subject key identifier:   F7:C2:74:E8:58:AD:DC:BD:71:31:C7:E0:F2:F5:E8:B8:83:0E:FC:9E
Authority key identifier: E6:2E:E8:24:22:B7:84:99:12:29:63:61:40:46:49:A7:FF:EC:98:E5
Certificate issuer:       /CN=e62ee82422b7849912296361404649a7ffec98e5
Certificate serial:       01A0CBC7EA45176B30365B4F4610368F10B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5i7oJCK3hJkSKWNhQEZJp__smOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft
Manifest number:          1129
Signing time:             Wed 23 Sep 2026 01:01:11 +0000
Manifest this update:     Wed 23 Sep 2026 01:01:11 +0000
Manifest next update:     Thu 24 Sep 2026 01:01:11 +0000
Files and hashes:         1: 5i7oJCK3hJkSKWNhQEZJp__smOU.crl (hash: 57gEm9naqqBe6o7UH5gOlJgsfwFnGA1dNz3KTeR3Ptg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5i7oJCK3hJkSKWNhQEZJp__smOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:c7:ea:45:17:6b:30:36:5b:4f:46:10:36:8f:10:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e62ee82422b7849912296361404649a7ffec98e5
        Validity
            Not Before: Sep 23 01:01:11 2026 GMT
            Not After : Sep 24 01:01:11 2026 GMT
        Subject: CN=f7c274e858addcbd7131c7e0f2f5e8b8830efc9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ed:51:2a:48:db:5e:78:5b:07:6d:e2:f5:b2:
                    6b:ae:bf:d7:41:29:35:4a:41:fa:4a:a9:86:98:97:
                    51:16:b9:b2:7f:99:9e:46:d9:56:bf:06:27:ee:b6:
                    db:67:cc:ab:b5:c5:73:8d:be:0a:07:27:da:e0:29:
                    b0:30:a0:8e:4e:0d:24:e6:a2:29:ff:22:68:cc:7b:
                    0d:a1:06:f7:3d:2e:d2:10:da:6c:6c:0b:c2:7a:0d:
                    ff:b8:d7:c1:44:9b:56:4a:7d:71:00:ce:d6:ee:ad:
                    1f:42:f2:c0:77:8c:06:bf:c7:fd:a7:25:8a:8c:75:
                    45:57:a1:24:36:df:90:42:91:b9:cb:55:73:17:ff:
                    24:8e:bc:b5:d6:95:cf:ca:23:d3:ae:d4:46:f8:3c:
                    07:04:b5:0f:cd:19:b4:3b:9e:06:cf:12:f7:cc:b3:
                    b5:32:23:9f:bd:19:04:92:ee:ec:58:8c:a4:92:73:
                    ea:ae:6b:e1:da:75:9c:a9:b9:93:49:bb:19:84:ff:
                    c1:f1:6f:56:a4:8a:e8:ba:60:f6:ea:2d:ff:1f:cd:
                    fc:2c:5c:06:da:9f:74:57:d5:9a:a0:e7:15:c2:7b:
                    ab:73:6b:c1:c3:d3:44:fc:bd:f2:82:07:14:27:16:
                    27:84:b0:a0:ed:72:c3:db:e5:37:6a:b0:f0:0e:a2:
                    62:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C2:74:E8:58:AD:DC:BD:71:31:C7:E0:F2:F5:E8:B8:83:0E:FC:9E
            X509v3 Authority Key Identifier:
                keyid:E6:2E:E8:24:22:B7:84:99:12:29:63:61:40:46:49:A7:FF:EC:98:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5i7oJCK3hJkSKWNhQEZJp__smOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:b0:1f:d2:29:26:44:71:81:53:5f:d6:d6:b6:03:eb:e9:fa:
         c7:e3:f0:97:a2:77:a2:ad:f3:5d:97:c5:10:87:08:be:f8:1d:
         89:b8:68:5a:ad:97:3a:8c:95:e5:f9:8d:64:fd:0b:48:0e:3f:
         d9:2e:67:df:a9:b8:fb:2f:7b:89:a8:56:47:87:a9:f1:af:b7:
         43:61:d5:d6:1b:ed:e9:7a:8a:a8:7d:9f:44:7b:18:82:9f:1d:
         e4:b8:55:b3:37:34:20:e7:7b:b3:8f:0c:ab:1b:d1:59:9f:15:
         00:ed:bf:07:22:6d:d7:32:df:cb:1d:d4:9b:45:6c:da:2c:c7:
         24:45:12:7a:c4:ce:d6:fd:18:9d:6d:a2:7e:ba:18:fb:e3:3a:
         cc:b6:70:85:8e:1e:f9:0c:52:f1:0d:00:b7:d3:11:f0:d7:45:
         5b:da:9e:1c:70:22:87:62:2b:dd:bd:06:6e:05:f1:d2:0b:57:
         78:72:b0:f5:4d:a9:59:36:54:bf:e6:1f:48:7a:74:41:e6:8a:
         59:e4:f7:f5:5d:b1:06:78:2e:9f:15:2d:11:2a:04:3b:ff:42:
         e2:cb:f6:0a:db:71:18:c6:f6:b0:fa:95:dc:79:f4:27:38:41:
         ed:70:85:52:84:80:86:fd:c8:28:4d:b7:03:05:23:02:c8:48:
         aa:ff:15:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLx+pFF2swNltPRhA2jxC0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MmVlODI0MjJiNzg0OTkxMjI5NjM2MTQwNDY0OWE3ZmZl
Yzk4ZTUwHhcNMjYwOTIzMDEwMTExWhcNMjYwOTI0MDEwMTExWjAzMTEwLwYDVQQD
EyhmN2MyNzRlODU4YWRkY2JkNzEzMWM3ZTBmMmY1ZThiODgzMGVmYzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApe1RKkjbXnhbB23i9bJrrr/XQSk1
SkH6SqmGmJdRFrmyf5meRtlWvwYn7rbbZ8yrtcVzjb4KByfa4CmwMKCOTg0k5qIp
/yJozHsNoQb3PS7SENpsbAvCeg3/uNfBRJtWSn1xAM7W7q0fQvLAd4wGv8f9pyWK
jHVFV6EkNt+QQpG5y1VzF/8kjry11pXPyiPTrtRG+DwHBLUPzRm0O54GzxL3zLO1
MiOfvRkEku7sWIykknPqrmvh2nWcqbmTSbsZhP/B8W9WpIroumD26i3/H838LFwG
2p90V9WaoOcVwnurc2vBw9NE/L3yggcUJxYnhLCg7XLD2+U3arDwDqJiIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPfCdOhYrdy9cTHH4PL16LiDDvyeMB8GA1UdIwQY
MBaAFOYu6CQit4SZEiljYUBGSaf/7JjlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWk3b0pDSzNoSmtTS1dOaFFFWkpwX19zbU9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9iZDMxMWUtYzkwMS00YWVmLWIxODUt
ZmZiMWJlYzMyNzIxLzEvNWk3b0pDSzNoSmtTS1dOaFFFWkpwX19zbU9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9iZDMxMWUtYzkwMS00YWVmLWIxODUtZmZiMWJlYzMyNzIx
LzEvNWk3b0pDSzNoSmtTS1dOaFFFWkpwX19zbU9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHbAf0ikm
RHGBU1/W1rYD6+n6x+Pwl6J3oq3zXZfFEIcIvvgdibhoWq2XOoyV5fmNZP0LSA4/
2S5n36m4+y97iahWR4ep8a+3Q2HV1hvt6XqKqH2fRHsYgp8d5LhVszc0IOd7s48M
qxvRWZ8VAO2/ByJt1zLfyx3Um0Vs2izHJEUSesTO1v0YnW2ifroY++M6zLZwhY4e
+QxS8Q0At9MR8NdFW9qeHHAih2Ir3b0GbgXx0gtXeHKw9U2pWTZUv+YfSHp0QeaK
WeT39V2xBngunxUtESoEO/9C4sv2CttxGMb2sPqV3Hn0JzhB7XCFUoSAhv3IKE23
AwUjAshIqv8Vyg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 07:26:24 2026 by rpki-client