Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
File:                     54z133frZmwE77frs8o0BK3sNPs.mft (raw, json)
Hash identifier:          voCJJZI8iPKBgmjbtBm8z4a3INUbBe4rVaHDlE6mrIo=
Subject key identifier:   64:3F:9B:21:20:DD:1B:49:69:DD:64:66:A6:98:55:19:B0:B8:23:4F
Authority key identifier: E7:8C:F5:DF:77:EB:66:6C:04:EF:B7:EB:B3:CA:34:04:AD:EC:34:FB
Certificate issuer:       /CN=e78cf5df77eb666c04efb7ebb3ca3404adec34fb
Certificate serial:       019E1F10A6B4FA9EDEC05A3BAB32674E16A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
Manifest number:          0FE6
Signing time:             Wed 13 May 2026 02:00:45 +0000
Manifest this update:     Wed 13 May 2026 02:00:45 +0000
Manifest next update:     Thu 14 May 2026 02:00:45 +0000
Files and hashes:         1: 54z133frZmwE77frs8o0BK3sNPs.crl (hash: Qc01DocgCkHxQ+mM/za+LPvJ1zURMb6UFFbLKhospEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:a6:b4:fa:9e:de:c0:5a:3b:ab:32:67:4e:16:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e78cf5df77eb666c04efb7ebb3ca3404adec34fb
        Validity
            Not Before: May 13 02:00:45 2026 GMT
            Not After : May 14 02:00:45 2026 GMT
        Subject: CN=643f9b2120dd1b4969dd6466a6985519b0b8234f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:65:71:ff:82:78:de:42:3b:df:ea:4d:6f:aa:
                    4f:49:3d:f7:39:cd:fb:c5:df:b7:31:11:0c:d4:d1:
                    ce:86:59:48:12:e0:13:75:b4:9e:f6:c2:ce:66:4d:
                    14:35:70:29:43:52:31:e1:be:68:60:f4:aa:b4:f7:
                    f8:65:b0:b3:35:7b:55:1e:e5:ad:d1:54:79:17:6e:
                    91:be:f9:43:05:8b:27:37:26:8b:2c:11:0e:87:6b:
                    7b:4a:d6:f4:e3:0b:e9:7f:64:62:67:9a:f5:e3:4c:
                    60:a1:f1:ea:cf:98:76:7c:5b:1f:88:56:1d:a5:dd:
                    13:01:ed:1e:da:94:ca:4c:ad:bd:0a:54:a4:e0:0e:
                    7e:e5:56:b4:16:30:52:72:de:4b:c1:da:72:a6:10:
                    e2:11:89:9e:9a:d4:0c:65:75:86:d1:fb:0f:d2:13:
                    1c:67:00:b6:b0:1d:ee:b7:31:0a:ed:35:5b:5b:07:
                    cf:3e:bc:69:0e:e5:d3:b2:03:9d:48:b1:8d:5f:5e:
                    97:3e:ec:e9:64:84:24:51:21:52:8b:a3:8f:2c:1d:
                    52:85:4a:0e:c9:16:0e:0e:e8:fd:b8:da:bc:3c:8f:
                    e3:c4:91:d0:1c:a6:7c:9e:4e:63:47:d7:28:c1:52:
                    89:04:bc:d4:9e:a1:d2:ca:91:c8:be:2e:a1:23:ef:
                    f0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:3F:9B:21:20:DD:1B:49:69:DD:64:66:A6:98:55:19:B0:B8:23:4F
            X509v3 Authority Key Identifier:
                keyid:E7:8C:F5:DF:77:EB:66:6C:04:EF:B7:EB:B3:CA:34:04:AD:EC:34:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:4a:28:19:44:ea:eb:e1:60:65:02:f0:26:de:31:c3:cc:c8:
         19:e1:58:54:60:0f:14:64:0c:08:f7:bb:ea:90:69:f8:7a:b4:
         d2:ba:7b:c5:e8:92:5f:6b:ec:28:7f:30:af:a6:f3:3f:cd:25:
         ec:5b:0b:d0:3a:78:8b:17:a3:c4:a9:d2:a9:94:0b:d0:b1:e9:
         b5:8d:d2:b6:1b:e1:c4:bd:a9:f9:b7:dd:60:88:35:dd:d5:de:
         29:32:66:7a:10:63:69:89:4b:9a:40:63:21:44:a2:4a:fb:e8:
         08:3b:b8:25:bc:4a:3c:af:2b:f7:f9:e6:0e:2e:91:e9:ec:a7:
         39:75:be:48:ae:df:18:b6:59:41:dc:0c:fe:d5:87:2f:b2:f5:
         86:93:99:a9:8b:45:fc:f4:3e:48:f4:aa:79:b7:56:a1:45:8a:
         38:a7:73:a7:3d:59:58:77:c5:73:da:dc:3c:de:3d:fa:58:07:
         f0:3c:65:7d:75:0e:f6:d5:75:34:e1:37:11:48:75:cf:e1:b9:
         f1:0c:19:f7:f3:f2:e0:6e:d0:f4:e0:02:e9:f3:19:78:b6:44:
         01:3a:08:d8:f7:57:28:a7:4f:0f:65:fc:4d:b1:e9:2a:03:5b:
         86:91:84:16:cc:24:a1:48:5d:31:4e:54:f2:37:e9:4b:bd:90:
         cf:a5:b3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:52:14 2026 by rpki-client