Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
File:                     5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft (raw, json)
Hash identifier:          w1cnPS4v6b6Pyv9YgddqRE9gf480ZjiTj5uME4aSpJ4=
Subject key identifier:   F9:3D:72:47:02:F1:2D:A0:6E:53:83:83:88:90:81:91:DE:BE:CF:60
Authority key identifier: E4:18:CD:DC:39:D3:47:56:3C:6D:C1:E5:EC:5E:59:62:1E:40:E4:D9
Certificate issuer:       /CN=e418cddc39d347563c6dc1e5ec5e59621e40e4d9
Certificate serial:       01A0DF18975961400E0B27987A4B4E8529C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
Manifest number:          0857
Signing time:             Sat 26 Sep 2026 19:02:05 +0000
Manifest this update:     Sat 26 Sep 2026 19:02:05 +0000
Manifest next update:     Sun 27 Sep 2026 19:02:05 +0000
Files and hashes:         1: 5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.crl (hash: YIOiQ2EJ3+iolPHvcA4XuTx8ZFoC0kqSoizfF8N8NYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:18:97:59:61:40:0e:0b:27:98:7a:4b:4e:85:29:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e418cddc39d347563c6dc1e5ec5e59621e40e4d9
        Validity
            Not Before: Sep 26 19:02:05 2026 GMT
            Not After : Sep 27 19:02:05 2026 GMT
        Subject: CN=f93d724702f12da06e53838388908191debecf60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c5:05:b7:fd:db:5c:2a:dd:f0:33:08:46:d3:
                    f3:7f:4e:5b:b7:c3:22:c1:8b:0e:57:90:0a:ab:99:
                    43:cf:37:55:19:96:05:24:df:33:c4:f4:2b:76:04:
                    cf:87:a4:53:90:92:5f:44:a1:1a:eb:95:50:4f:9f:
                    13:a0:2f:b2:7c:b9:62:36:e8:dc:6d:f7:7f:98:cd:
                    45:69:eb:e6:d0:42:ea:df:f0:0e:39:bf:de:7a:90:
                    a9:07:ab:ab:4a:ec:65:a1:e8:42:29:03:32:52:b5:
                    34:fb:a6:8c:ca:ee:d4:ab:dc:08:a5:b1:16:87:aa:
                    e5:71:0a:a6:b2:e1:c0:94:e6:1d:43:76:9a:4a:b3:
                    73:0a:2c:8a:c4:7c:45:23:af:b4:59:48:41:dc:ea:
                    e8:23:7c:0d:67:8d:99:af:cd:5d:6e:3b:56:fa:46:
                    71:9b:d5:57:d4:f4:26:c4:6b:7a:ac:eb:6b:0d:ad:
                    d8:4f:79:3e:76:2c:cd:bb:80:b1:ef:91:f4:2f:f9:
                    af:a9:1c:e0:27:19:dc:05:4c:43:0a:94:78:af:a1:
                    35:29:94:67:fe:fe:e7:bb:2a:34:c7:92:f7:95:f5:
                    d8:ea:1c:16:cf:06:f6:36:1f:82:4c:8f:83:b8:af:
                    75:fd:50:c4:6c:b3:5c:3d:dc:f5:b9:a7:45:09:cf:
                    0b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3D:72:47:02:F1:2D:A0:6E:53:83:83:88:90:81:91:DE:BE:CF:60
            X509v3 Authority Key Identifier:
                keyid:E4:18:CD:DC:39:D3:47:56:3C:6D:C1:E5:EC:5E:59:62:1E:40:E4:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:57:79:ab:8d:7e:2c:ce:b6:a3:2d:f7:6a:f8:da:51:c1:1b:
         03:f8:d5:e3:45:e9:2f:ec:1a:75:fb:38:f3:09:b3:cf:1e:2e:
         02:45:12:20:5c:f8:11:99:5e:fb:a4:12:80:30:cd:79:b7:94:
         40:2c:6a:f9:20:a3:38:6d:9e:f9:d2:e7:46:4b:8d:03:d5:85:
         9d:4d:19:86:8c:1d:89:1e:9d:74:6c:69:c0:61:93:25:c7:38:
         e0:54:af:1a:cf:87:ca:d4:ed:02:41:2d:18:25:4f:c9:c3:8c:
         c4:fb:15:06:9e:78:6e:a1:93:60:6b:1e:af:d7:ca:eb:3c:7a:
         f3:6f:ec:0e:6f:b8:eb:a9:fd:96:f0:d8:8a:1f:80:d3:0b:b8:
         dc:38:0f:9c:1b:c8:74:13:e3:74:81:c1:4d:dc:41:3d:ed:41:
         2e:50:ad:65:1e:79:10:08:53:cb:03:79:e0:61:f2:3e:39:1e:
         12:72:81:18:8c:ec:88:93:e2:45:48:64:60:59:a5:d7:97:a0:
         18:18:a6:f2:49:86:40:80:32:1f:e8:38:cd:97:9e:c1:16:83:
         cd:e8:ae:9b:42:43:44:7b:31:a7:75:71:78:f0:0c:04:cc:8c:
         45:7b:44:60:e2:6a:30:e7:15:5e:69:1e:b1:d6:59:d0:be:b8:
         71:a0:82:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:52:46 2026 by rpki-client