Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.mft
File:                     1T5Pyhar83QtTaK_nD2abpHpbuU.mft (raw, json)
Hash identifier:          A0Z6HMwGjxF13cC4du19rXMVVvmvXyV2N9aBvGu5WPs=
Subject key identifier:   B7:F2:53:AE:77:C4:A1:AE:F5:BB:9D:57:5F:96:42:35:61:C1:6B:63
Authority key identifier: D5:3E:4F:CA:16:AB:F3:74:2D:4D:A2:BF:9C:3D:9A:6E:91:E9:6E:E5
Certificate issuer:       /CN=d53e4fca16abf3742d4da2bf9c3d9a6e91e96ee5
Certificate serial:       01A0D45CFA5D0D402FD341A83BD2A14F98B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1T5Pyhar83QtTaK_nD2abpHpbuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.mft
Manifest number:          1780
Signing time:             Thu 24 Sep 2026 17:00:57 +0000
Manifest this update:     Thu 24 Sep 2026 17:00:57 +0000
Manifest next update:     Fri 25 Sep 2026 17:00:57 +0000
Files and hashes:         1: 1T5Pyhar83QtTaK_nD2abpHpbuU.crl (hash: tCG6H6EEcdcnulje7sSJ7P4VWeLCat0ziWAsEd7bTAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1T5Pyhar83QtTaK_nD2abpHpbuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 17:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:5c:fa:5d:0d:40:2f:d3:41:a8:3b:d2:a1:4f:98:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d53e4fca16abf3742d4da2bf9c3d9a6e91e96ee5
        Validity
            Not Before: Sep 24 17:00:57 2026 GMT
            Not After : Sep 25 17:00:57 2026 GMT
        Subject: CN=b7f253ae77c4a1aef5bb9d575f96423561c16b63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c6:31:d3:be:51:6d:72:4a:85:b1:b7:92:c0:
                    a3:35:c0:6b:24:2f:71:92:5d:af:77:68:81:d2:a7:
                    a3:46:d8:e7:2f:02:3e:fa:d0:8c:24:37:70:6f:25:
                    fb:a4:00:f6:62:03:d7:35:8c:3f:e7:a1:36:62:ca:
                    b0:63:e1:c3:90:ee:e3:e7:f2:e6:af:30:a4:82:09:
                    de:68:aa:9a:d6:ec:23:e6:9e:7a:8e:e3:24:1c:98:
                    42:68:63:95:21:17:9b:65:e5:88:aa:96:d7:f8:ce:
                    a6:48:9c:fe:f2:ed:7e:88:ef:7d:5c:94:ce:e8:74:
                    77:03:ca:77:28:e6:6b:cf:b9:2e:44:1e:52:22:1c:
                    ed:99:5f:4a:49:40:4a:d8:90:ca:64:c8:cf:85:92:
                    ed:23:66:32:6d:99:45:a6:df:a5:e9:7d:47:0d:72:
                    62:c2:f6:be:d2:5b:5f:a4:7e:8c:53:be:c3:af:ff:
                    3f:b1:68:62:4e:8f:cc:7a:0f:12:86:37:0e:97:c0:
                    ac:54:69:04:14:6a:38:c2:75:83:67:89:c1:6a:2d:
                    11:f7:91:a9:03:93:27:33:13:4e:db:1f:30:d8:ad:
                    56:bd:2d:b4:0e:26:7f:ac:4f:92:80:f7:bc:22:71:
                    37:36:24:50:27:6a:1f:07:b5:a9:88:e4:d7:eb:50:
                    d3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F2:53:AE:77:C4:A1:AE:F5:BB:9D:57:5F:96:42:35:61:C1:6B:63
            X509v3 Authority Key Identifier:
                keyid:D5:3E:4F:CA:16:AB:F3:74:2D:4D:A2:BF:9C:3D:9A:6E:91:E9:6E:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T5Pyhar83QtTaK_nD2abpHpbuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:ba:d6:51:c2:f1:0a:1e:15:81:20:89:52:8c:ff:b4:b3:3e:
         50:38:e8:46:44:4a:1b:aa:d1:8a:a0:63:20:55:8f:60:a2:2f:
         4e:91:f4:69:d4:ff:f8:11:2b:3e:31:1a:1d:ac:2e:f5:dc:99:
         42:c8:a6:98:c0:d9:99:36:9e:92:87:04:c9:0e:12:46:e2:8e:
         3a:1a:b4:c2:d8:54:f3:4e:b4:c9:7e:5b:19:fc:8f:09:2d:61:
         63:bb:33:1f:59:e5:de:29:82:7b:62:72:cd:f0:10:6f:d2:2f:
         3f:6e:5b:da:c1:1a:c3:6b:e8:6d:f1:d1:c6:ac:5f:36:c1:18:
         4e:e6:f4:a5:e8:ca:01:4c:5c:d0:bd:55:45:47:13:03:7e:ce:
         47:b5:da:b0:8e:bd:1e:2d:e3:93:31:93:10:64:31:d7:d9:df:
         04:15:40:9c:5c:8a:f8:80:3c:c4:f8:7e:e1:00:72:b9:67:75:
         da:ad:aa:15:f1:92:5e:c9:18:9c:06:1c:c6:02:80:d8:59:f3:
         cc:37:3a:dd:4e:2d:cf:b3:39:77:79:62:25:24:cf:44:e8:27:
         a9:e2:3b:26:96:05:51:e6:d7:23:c8:b4:dd:79:1e:f6:3f:82:
         a8:67:b7:0a:da:06:48:a1:48:3b:0d:df:cb:13:9b:ee:68:8b:
         dd:2f:d7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:06:05 2026 by rpki-client