Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.mft
File:                     E-37kQ__5H1RrZ0PiDsbZJZp4TU.mft (raw, json)
Hash identifier:          RQgTqkKIGk8f8Qih1H9qnKhvNbpDMc3uzYpEk5jSLHg=
Subject key identifier:   53:D1:E5:C4:B0:22:70:EB:1D:DE:64:39:A3:54:78:5A:FD:2B:9A:1F
Authority key identifier: 13:ED:FB:91:0F:FF:E4:7D:51:AD:9D:0F:88:3B:1B:64:96:69:E1:35
Certificate issuer:       /CN=13edfb910fffe47d51ad9d0f883b1b649669e135
Certificate serial:       01A0DC4D8FD29F4E440B550B30355EA920DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-37kQ__5H1RrZ0PiDsbZJZp4TU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.mft
Manifest number:          0C08
Signing time:             Sat 26 Sep 2026 06:01:05 +0000
Manifest this update:     Sat 26 Sep 2026 06:01:05 +0000
Manifest next update:     Sun 27 Sep 2026 06:01:05 +0000
Files and hashes:         1: E-37kQ__5H1RrZ0PiDsbZJZp4TU.crl (hash: J7SK589K979uIDK34U1UtNJWjZW59M/h1yIdVVD9GLc=)
                          2: ab_dcmnUNV-XBfTtK_tKTbZqwjI.roa (hash: xavsN1HJdLi+aPkdFObLI236THGttyRtSD4R0FVRKWY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-37kQ__5H1RrZ0PiDsbZJZp4TU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:4d:8f:d2:9f:4e:44:0b:55:0b:30:35:5e:a9:20:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13edfb910fffe47d51ad9d0f883b1b649669e135
        Validity
            Not Before: Sep 26 06:01:05 2026 GMT
            Not After : Sep 27 06:01:05 2026 GMT
        Subject: CN=53d1e5c4b02270eb1dde6439a354785afd2b9a1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:79:cc:ec:f1:49:49:63:37:a7:57:0c:9d:ed:
                    1f:2d:4f:49:12:fc:c9:e5:d4:a5:7c:0c:81:4a:14:
                    0f:1c:56:a9:63:40:2e:e1:c7:8c:09:54:3a:73:dc:
                    4d:ce:50:1a:98:d6:2a:e6:5a:45:0e:dd:cb:0a:07:
                    4b:62:ff:3d:e4:4a:a2:3d:a3:8e:dc:f2:30:a1:54:
                    ce:f4:58:03:f3:a7:4f:da:63:b3:c1:c6:af:49:92:
                    d8:95:9c:f6:1d:cd:f1:81:9d:25:df:fc:c5:67:27:
                    de:1c:b8:0b:97:41:08:39:eb:69:a1:b6:28:7f:a9:
                    f3:2c:28:74:30:92:0d:ba:af:e1:aa:62:d1:c1:d3:
                    21:d2:65:b1:a0:f4:8e:07:cf:07:8e:99:52:6c:54:
                    a7:cc:c6:3b:19:fd:06:56:02:c7:70:25:a0:c8:35:
                    56:78:c8:50:aa:1e:3a:d1:8b:0c:e9:ff:f1:49:8b:
                    f2:46:45:48:70:93:de:af:01:d5:ee:1a:d6:ca:c7:
                    5a:96:da:ed:89:f7:ba:60:5b:0a:07:72:d1:09:6f:
                    cf:df:89:e4:50:a1:8b:7a:b0:e8:9b:83:f9:d4:f2:
                    bb:e5:29:46:cd:cb:7f:68:0d:3f:71:ec:32:53:80:
                    57:31:33:86:fd:b7:e7:71:8d:d9:57:d3:60:ef:ad:
                    20:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D1:E5:C4:B0:22:70:EB:1D:DE:64:39:A3:54:78:5A:FD:2B:9A:1F
            X509v3 Authority Key Identifier:
                keyid:13:ED:FB:91:0F:FF:E4:7D:51:AD:9D:0F:88:3B:1B:64:96:69:E1:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-37kQ__5H1RrZ0PiDsbZJZp4TU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:10:ec:de:a9:bd:dd:3f:ad:ba:64:56:ba:60:13:da:4c:4c:
         52:44:63:52:54:a8:a5:62:c4:9d:12:7b:b2:7d:88:ee:0a:fa:
         c6:2c:f5:99:b5:20:62:74:08:f6:90:35:d3:5e:f6:c9:b7:24:
         39:95:c2:62:7d:fd:d6:73:cb:02:89:c7:ff:bd:4a:1d:c4:72:
         e7:7e:3a:25:26:5b:35:8e:50:3e:00:5c:16:f2:fb:da:90:0b:
         d9:83:5a:5a:f8:de:c0:d9:d8:24:a2:78:4a:a0:0b:a9:3f:71:
         c1:d0:17:cb:1f:fc:f8:d5:96:5b:21:24:b1:c4:9d:ea:f1:69:
         11:13:37:54:b3:a9:0b:9c:cf:18:4a:fa:41:a6:89:f5:c3:a0:
         b1:0d:cb:08:e7:6e:69:1a:40:15:ff:2f:d6:11:f9:bc:f8:97:
         4d:10:fe:ab:e9:03:c7:9b:46:58:43:3e:f2:f5:8f:1f:0a:71:
         05:22:f4:28:1f:49:18:db:1c:ba:35:c5:05:ec:b7:eb:0d:f8:
         4c:0a:b6:00:c3:32:fb:22:50:f5:86:b8:4d:49:6c:7c:cd:1c:
         e1:92:29:b2:52:eb:db:47:f9:64:65:bc:95:c5:b9:c2:eb:7f:
         94:41:41:37:f8:2f:ce:c6:4c:cb:ed:3a:e6:da:94:1b:d0:3d:
         2f:91:bc:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDcTY/Sn05EC1ULMDVeqSDfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZWRmYjkxMGZmZmU0N2Q1MWFkOWQwZjg4M2IxYjY0OTY2
OWUxMzUwHhcNMjYwOTI2MDYwMTA1WhcNMjYwOTI3MDYwMTA1WjAzMTEwLwYDVQQD
Eyg1M2QxZTVjNGIwMjI3MGViMWRkZTY0MzlhMzU0Nzg1YWZkMmI5YTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXnM7PFJSWM3p1cMne0fLU9JEvzJ
5dSlfAyBShQPHFapY0Au4ceMCVQ6c9xNzlAamNYq5lpFDt3LCgdLYv895EqiPaOO
3PIwoVTO9FgD86dP2mOzwcavSZLYlZz2Hc3xgZ0l3/zFZyfeHLgLl0EIOetpobYo
f6nzLCh0MJINuq/hqmLRwdMh0mWxoPSOB88HjplSbFSnzMY7Gf0GVgLHcCWgyDVW
eMhQqh460YsM6f/xSYvyRkVIcJPerwHV7hrWysdaltrtife6YFsKB3LRCW/P34nk
UKGLerDom4P51PK75SlGzct/aA0/cewyU4BXMTOG/bfncY3ZV9Ng760gYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFPR5cSwInDrHd5kOaNUeFr9K5ofMB8GA1UdIwQY
MBaAFBPt+5EP/+R9Ua2dD4g7G2SWaeE1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS0zN2tRX181SDFSclowUGlEc2JaSlpwNFRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xNDNiNWMtYzVhYi00ZDk4LWFlNGIt
ZDE0MWE4NjkyMDM5LzEvRS0zN2tRX181SDFSclowUGlEc2JaSlpwNFRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8xNDNiNWMtYzVhYi00ZDk4LWFlNGItZDE0MWE4NjkyMDM5
LzEvRS0zN2tRX181SDFSclowUGlEc2JaSlpwNFRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASxDs3qm9
3T+tumRWumAT2kxMUkRjUlSopWLEnRJ7sn2I7gr6xiz1mbUgYnQI9pA10172ybck
OZXCYn391nPLAonH/71KHcRy5346JSZbNY5QPgBcFvL72pAL2YNaWvjewNnYJKJ4
SqALqT9xwdAXyx/8+NWWWyEkscSd6vFpERM3VLOpC5zPGEr6QaaJ9cOgsQ3LCOdu
aRpAFf8v1hH5vPiXTRD+q+kDx5tGWEM+8vWPHwpxBSL0KB9JGNscujXFBey36w34
TAq2AMMy+yJQ9Ya4TUlsfM0c4ZIpslLr20f5ZGW8lcW5wut/lEFBN/gvzsZMy+06
5tqUG9A9L5G8hw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 12:50:01 2026 by rpki-client