Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
File:                     1EZzVsX7atsuunE8gBkUsvTX860.mft (raw, json)
Hash identifier:          69AefgbAKWbehsnLmUCFqvGW4+Sz2v++tIrruIqjyL8=
Subject key identifier:   95:51:1E:E0:1E:3C:AC:07:60:BF:0B:8E:60:57:3D:55:47:3E:4F:08
Authority key identifier: D4:46:73:56:C5:FB:6A:DB:2E:BA:71:3C:80:19:14:B2:F4:D7:F3:AD
Certificate issuer:       /CN=d4467356c5fb6adb2eba713c801914b2f4d7f3ad
Certificate serial:       01A0D5A6AE2B4B2F7F56BCE952CE1B0FAEE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
Manifest number:          0580
Signing time:             Thu 24 Sep 2026 23:01:05 +0000
Manifest this update:     Thu 24 Sep 2026 23:01:05 +0000
Manifest next update:     Fri 25 Sep 2026 23:01:05 +0000
Files and hashes:         1: 1EZzVsX7atsuunE8gBkUsvTX860.crl (hash: PyJAjGmK7EoAqF6FlCx62I0lNHliovNh9RFCYhIFLDY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:a6:ae:2b:4b:2f:7f:56:bc:e9:52:ce:1b:0f:ae:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4467356c5fb6adb2eba713c801914b2f4d7f3ad
        Validity
            Not Before: Sep 24 23:01:05 2026 GMT
            Not After : Sep 25 23:01:05 2026 GMT
        Subject: CN=95511ee01e3cac0760bf0b8e60573d55473e4f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0c:e7:0e:94:17:a9:48:be:c1:f3:6d:0c:bc:
                    54:88:d5:99:e5:5e:07:e9:2d:b4:71:15:5e:28:1e:
                    c6:0b:30:a7:48:2d:06:1c:42:0a:cc:27:4c:d1:90:
                    64:1d:98:64:74:a3:2b:8a:9a:7b:47:84:0b:fa:52:
                    10:8f:ab:3c:00:07:fc:64:46:d6:3c:da:a6:c8:32:
                    d0:e6:86:14:8d:8e:bd:f8:a0:aa:ff:f7:cd:12:33:
                    6d:63:3e:74:76:e2:79:ae:6f:b2:87:99:6e:4d:9f:
                    37:51:77:a3:70:76:11:eb:3f:87:75:91:bd:63:5f:
                    69:a2:19:33:cb:c2:29:ca:63:f5:0b:e0:eb:95:d0:
                    a6:29:69:ef:40:0e:6f:73:ba:45:4a:a2:19:8b:f0:
                    04:9d:d5:d3:c2:ac:ef:43:40:ed:08:61:f4:c1:bd:
                    ae:72:70:4c:c8:ef:fc:b9:0d:32:00:11:58:79:7e:
                    31:1e:5a:4c:3b:12:58:04:fa:72:39:c4:37:c3:cb:
                    db:8c:fe:c7:20:4c:c9:b1:16:97:05:de:25:ba:b6:
                    94:73:a1:21:3c:43:76:1a:13:4e:b5:9b:1d:9d:4d:
                    0e:69:2e:70:ac:0b:2e:72:ed:db:ca:f6:ca:5e:f6:
                    5b:e6:d1:a6:e3:65:f8:8c:c2:eb:08:56:b1:d6:cd:
                    b8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:51:1E:E0:1E:3C:AC:07:60:BF:0B:8E:60:57:3D:55:47:3E:4F:08
            X509v3 Authority Key Identifier:
                keyid:D4:46:73:56:C5:FB:6A:DB:2E:BA:71:3C:80:19:14:B2:F4:D7:F3:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:80:18:cc:fe:30:55:f6:02:a3:ce:79:b5:dd:5b:87:07:ff:
         12:fa:9b:db:89:0a:3c:41:07:2e:3a:e6:ce:1e:44:f6:24:1e:
         bf:e1:22:d4:31:36:f0:cf:21:ae:02:5e:ad:5a:59:b0:3e:1d:
         d3:35:70:70:00:ad:5b:75:14:5f:c1:82:48:24:e8:91:cc:01:
         71:c8:cf:63:5d:1b:01:90:06:b2:15:06:df:2a:22:46:b1:9c:
         5c:a8:70:1a:cb:db:dd:93:b8:8b:48:70:3e:32:dd:7e:22:37:
         74:1b:92:0b:49:e2:50:39:db:23:db:08:be:f0:9e:66:be:b7:
         88:24:29:23:c1:b6:5e:5a:28:5e:44:81:31:42:9b:58:34:01:
         9b:2a:39:59:4f:df:ee:87:5a:c5:3d:0f:51:41:1d:1f:82:08:
         eb:a4:ca:ec:47:12:39:9f:13:6a:b1:e9:d0:d1:54:dc:e7:ac:
         85:80:c4:54:a6:89:60:49:50:02:6c:3f:07:f0:2d:52:b4:f5:
         83:cd:a2:70:73:89:2b:d6:6a:31:ad:c6:9b:69:31:aa:fc:9c:
         8b:b7:21:c9:58:d7:cc:62:de:49:91:76:43:6e:d6:cb:b0:4f:
         ac:8f:84:63:83:c4:50:a2:c4:90:48:14:34:76:dc:3c:7b:4a:
         ae:a0:1d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:22:40 2026 by rpki-client