Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/1a59c9-1446-4779-be0a-d50f29308464/1/5weSQnGbdzi4P0kUerH1gp93ahU.mft
File:                     5weSQnGbdzi4P0kUerH1gp93ahU.mft (raw, json)
Hash identifier:          nx6m1ckOapeT9XYp5Dy0zO/QO63iMv2v5mdCzGl0XSY=
Subject key identifier:   39:D2:B1:E4:4D:17:3F:9D:C7:39:5D:D3:86:03:EA:77:22:00:97:07
Authority key identifier: E7:07:92:42:71:9B:77:38:B8:3F:49:14:7A:B1:F5:82:9F:77:6A:15
Certificate issuer:       /CN=e7079242719b7738b83f49147ab1f5829f776a15
Certificate serial:       01A0D26E358495B939632320863F0FD2406D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5weSQnGbdzi4P0kUerH1gp93ahU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/1a59c9-1446-4779-be0a-d50f29308464/1/5weSQnGbdzi4P0kUerH1gp93ahU.mft
Manifest number:          0437
Signing time:             Thu 24 Sep 2026 08:00:33 +0000
Manifest this update:     Thu 24 Sep 2026 08:00:33 +0000
Manifest next update:     Fri 25 Sep 2026 08:00:33 +0000
Files and hashes:         1: 5weSQnGbdzi4P0kUerH1gp93ahU.crl (hash: cqnmqSMzP84R6lpJ9RO74xj3kw881ixzKJAgzTAeSNw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/1a59c9-1446-4779-be0a-d50f29308464/1/5weSQnGbdzi4P0kUerH1gp93ahU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/1a59c9-1446-4779-be0a-d50f29308464/1/5weSQnGbdzi4P0kUerH1gp93ahU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5weSQnGbdzi4P0kUerH1gp93ahU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 08:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:6e:35:84:95:b9:39:63:23:20:86:3f:0f:d2:40:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7079242719b7738b83f49147ab1f5829f776a15
        Validity
            Not Before: Sep 24 08:00:33 2026 GMT
            Not After : Sep 25 08:00:33 2026 GMT
        Subject: CN=39d2b1e44d173f9dc7395dd38603ea7722009707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:32:4d:09:02:60:06:c1:fc:31:12:8c:c7:d5:
                    df:df:9c:39:01:af:8e:a2:a3:b2:65:05:52:4d:81:
                    a4:a9:f8:6a:7b:2a:c3:5c:90:70:33:20:a8:64:15:
                    74:8e:c3:c2:57:f4:4e:4c:e1:aa:3d:4f:23:7d:5c:
                    6a:d3:95:b4:82:d0:bf:1a:02:4d:0d:89:b3:fc:bc:
                    7c:10:c0:37:6c:58:0e:6f:2e:a7:e0:e1:a3:d1:a5:
                    b7:d0:12:35:da:32:76:86:ca:38:39:85:6a:73:3d:
                    17:81:8a:f5:bb:c2:65:9a:5e:73:c3:a1:09:ac:65:
                    99:90:f8:28:d1:9d:ff:43:02:bc:17:81:44:82:13:
                    46:a9:a9:da:09:74:ef:fe:b0:17:5a:51:90:16:81:
                    a2:a1:c9:a0:fb:3a:5f:6e:39:ba:85:c8:74:63:96:
                    e2:07:d8:47:6c:c2:a4:0b:d2:28:13:9c:1e:3d:11:
                    f6:19:e8:00:26:35:57:db:be:8d:a9:4b:3f:47:df:
                    00:33:00:51:a8:95:fd:2a:bf:3d:53:dd:9d:4a:51:
                    fc:2c:39:c0:5f:d3:15:69:44:79:af:38:7f:b8:d3:
                    0a:b9:79:86:23:33:ab:48:dd:0c:08:e3:3e:97:cd:
                    78:d9:38:77:fc:c1:2c:f6:0f:a9:6b:9c:a7:5f:56:
                    27:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D2:B1:E4:4D:17:3F:9D:C7:39:5D:D3:86:03:EA:77:22:00:97:07
            X509v3 Authority Key Identifier:
                keyid:E7:07:92:42:71:9B:77:38:B8:3F:49:14:7A:B1:F5:82:9F:77:6A:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5weSQnGbdzi4P0kUerH1gp93ahU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1a59c9-1446-4779-be0a-d50f29308464/1/5weSQnGbdzi4P0kUerH1gp93ahU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1a59c9-1446-4779-be0a-d50f29308464/1/5weSQnGbdzi4P0kUerH1gp93ahU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:48:63:0d:64:af:ef:3a:d2:3e:e4:de:cf:5d:d5:59:28:a6:
         53:3c:04:b9:02:22:c3:53:f2:08:75:38:36:f0:4b:5c:59:28:
         83:08:b7:05:96:4a:53:fc:06:1b:5b:4d:69:49:86:97:cc:25:
         13:13:85:68:5b:19:f3:56:15:cf:60:94:06:6e:48:fb:0d:7b:
         13:10:c1:1c:ff:26:17:43:38:3d:e7:f3:45:2b:85:8b:9b:80:
         ee:fd:f4:41:75:3b:fc:a9:be:d3:66:01:94:a8:8b:45:6a:98:
         b3:bf:82:6e:01:a7:80:38:66:89:95:2e:e2:52:d1:fb:d3:00:
         16:58:e1:cf:51:87:c8:b7:e3:57:4e:b9:48:63:24:7b:9a:92:
         39:1f:7a:42:a3:71:1c:d3:3f:21:eb:ee:ba:7d:61:04:94:55:
         9d:a3:0a:11:27:f8:c4:6a:cc:f7:bf:32:59:3b:f1:b5:ad:e9:
         77:df:78:77:6d:23:29:dd:b8:e6:cb:89:c8:cf:be:48:f0:dc:
         d5:7a:0e:fe:74:8a:2c:c0:07:46:94:e9:63:b6:ef:22:c3:66:
         61:e8:5c:67:4f:2d:62:41:88:f6:7b:14:dd:90:62:0e:15:a2:
         9c:dd:5a:a4:33:10:60:09:2d:d0:d3:c5:cf:ca:34:13:d9:35:
         26:24:e1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:30:01 2026 by rpki-client