Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/56lS7y1xM0iHgHhFONttuGLsBAg.mft
File:                     56lS7y1xM0iHgHhFONttuGLsBAg.mft (raw, json)
Hash identifier:          o0XF0qjnwTnMOR2HCnvqKCzxA87vhrZizMO2GrdgSY8=
Subject key identifier:   CF:9F:7A:31:9E:EC:F3:FD:FB:73:77:38:A5:F7:E7:54:A9:CD:6B:8C
Authority key identifier: E7:A9:52:EF:2D:71:33:48:87:80:78:45:38:DB:6D:B8:62:EC:04:08
Certificate issuer:       /CN=e7a952ef2d7133488780784538db6db862ec0408
Certificate serial:       01A0D9BACBC5CA75589BF938C8BDD2005B31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/56lS7y1xM0iHgHhFONttuGLsBAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/56lS7y1xM0iHgHhFONttuGLsBAg.mft
Manifest number:          EA
Signing time:             Fri 25 Sep 2026 18:01:32 +0000
Manifest this update:     Fri 25 Sep 2026 18:01:32 +0000
Manifest next update:     Sat 26 Sep 2026 18:01:32 +0000
Files and hashes:         1: 56lS7y1xM0iHgHhFONttuGLsBAg.crl (hash: HAIW3WUqsZ/wJZM2hfv6EoFDu59h/vvV7Yog1hlHl0I=)
                          2: f1R_KVw6pDr-4luASuZxDgTRs54.roa (hash: pyivi44WDU8Xyy/kj2UqLPdU3p7h7jqHwHgFp3gleyc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/56lS7y1xM0iHgHhFONttuGLsBAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/56lS7y1xM0iHgHhFONttuGLsBAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/56lS7y1xM0iHgHhFONttuGLsBAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:ba:cb:c5:ca:75:58:9b:f9:38:c8:bd:d2:00:5b:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a952ef2d7133488780784538db6db862ec0408
        Validity
            Not Before: Sep 25 18:01:32 2026 GMT
            Not After : Sep 26 18:01:32 2026 GMT
        Subject: CN=cf9f7a319eecf3fdfb737738a5f7e754a9cd6b8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:90:6e:5b:4f:47:e2:90:64:dc:f3:52:21:86:
                    42:e3:de:af:82:27:51:fe:9e:ff:e2:77:be:d5:d2:
                    99:f0:34:5e:1b:78:94:68:9b:84:59:bf:fc:da:08:
                    4c:e5:3b:eb:88:4f:8f:5b:83:7d:66:a2:60:bf:44:
                    0a:12:36:e0:d1:3b:86:26:6c:46:22:b0:d7:6e:db:
                    46:22:ef:12:73:0b:c3:0d:bc:23:84:e0:ea:bf:f3:
                    28:9d:12:2e:c8:b6:eb:d5:44:31:24:51:31:c4:aa:
                    ca:0a:09:b8:62:17:e8:86:55:db:af:c7:f0:19:09:
                    b8:99:c4:cd:58:93:cb:90:5d:bd:88:a2:f6:a6:a0:
                    59:5f:47:06:8f:a3:84:2a:06:fa:0d:44:71:31:ce:
                    9d:82:f1:84:96:d8:f0:fc:0f:3a:32:48:d0:72:80:
                    4f:01:9b:81:e5:c1:78:19:67:df:f8:3e:12:df:50:
                    13:fc:b1:a3:fc:7c:ad:fc:38:e2:5f:32:16:5c:38:
                    da:85:95:f9:9b:64:48:b5:b6:7b:10:2f:6d:14:32:
                    57:a7:dc:41:db:39:9f:38:3f:4c:54:11:a3:39:0a:
                    c5:03:65:cc:d6:c0:1b:64:56:a0:69:cc:b3:ff:95:
                    80:20:9a:08:7c:04:e8:02:e0:15:aa:c7:1b:12:63:
                    3f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9F:7A:31:9E:EC:F3:FD:FB:73:77:38:A5:F7:E7:54:A9:CD:6B:8C
            X509v3 Authority Key Identifier:
                keyid:E7:A9:52:EF:2D:71:33:48:87:80:78:45:38:DB:6D:B8:62:EC:04:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/56lS7y1xM0iHgHhFONttuGLsBAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/56lS7y1xM0iHgHhFONttuGLsBAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/56lS7y1xM0iHgHhFONttuGLsBAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:a0:f4:d8:20:05:48:ef:9f:aa:f7:15:46:99:d2:38:f5:c6:
         77:48:7e:3d:2e:31:c4:f7:84:e3:df:08:7c:92:75:93:68:75:
         1e:ee:ea:a7:54:b2:a8:4d:7f:86:f2:ac:80:10:9b:93:0f:f5:
         85:df:bc:05:d5:ad:db:fe:7c:eb:63:3f:a1:14:c5:1f:78:52:
         00:48:d1:c4:0a:39:0a:2c:4a:a6:27:71:f3:2d:e5:27:a4:22:
         40:6b:ed:bb:fc:82:e6:c3:8a:c2:c4:d5:76:92:56:f5:8e:9b:
         c5:8a:ff:7a:79:2c:2f:f2:7f:61:30:da:0e:a8:0f:23:45:1a:
         f8:13:28:10:6c:b7:85:50:f0:13:0a:ce:af:2a:78:3d:b9:8c:
         12:5e:66:90:d4:c0:b3:bd:01:4f:ab:cc:1c:77:bf:36:62:04:
         f5:e5:2a:b5:76:4f:b7:d7:1a:13:78:10:63:38:5f:0d:19:ba:
         16:14:21:b5:f8:7b:88:22:f1:0b:66:67:b0:d4:ad:d1:55:12:
         f7:a7:eb:ba:7d:45:d8:ea:c7:0f:6d:a5:e8:64:9e:b3:82:a8:
         d7:dc:c9:0f:75:0c:59:a6:46:a4:ff:38:13:88:83:2c:2d:ca:
         00:0e:30:f3:60:51:7f:a2:59:66:26:f2:53:8c:e7:f0:64:c9:
         d1:d3:f7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:26:37 2026 by rpki-client