Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/5ZWF90rqxil-5epmYmZV7R_ej-c.mft
File:                     5ZWF90rqxil-5epmYmZV7R_ej-c.mft (raw, json)
Hash identifier:          2GytFXYNOBK4mQzTvmDVXxab6FqzDGrfgqjWuJtyEjU=
Subject key identifier:   99:50:B7:AF:3F:18:C0:EE:5D:28:4C:D8:C3:29:BD:49:1A:22:CF:A1
Authority key identifier: E5:95:85:F7:4A:EA:C6:29:7E:E5:EA:66:62:66:55:ED:1F:DE:8F:E7
Certificate issuer:       /CN=e59585f74aeac6297ee5ea66626655ed1fde8fe7
Certificate serial:       01A0FD901F760089F5903657522079BFCBFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5ZWF90rqxil-5epmYmZV7R_ej-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/5ZWF90rqxil-5epmYmZV7R_ej-c.mft
Manifest number:          FC
Signing time:             Fri 02 Oct 2026 17:01:15 +0000
Manifest this update:     Fri 02 Oct 2026 17:01:15 +0000
Manifest next update:     Sat 03 Oct 2026 17:01:15 +0000
Files and hashes:         1: 5ZWF90rqxil-5epmYmZV7R_ej-c.crl (hash: Jsn6bHeyRQu35VFm4Ft4dN6dgkK90A4Cc1u7SNUG4JU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/5ZWF90rqxil-5epmYmZV7R_ej-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/5ZWF90rqxil-5epmYmZV7R_ej-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5ZWF90rqxil-5epmYmZV7R_ej-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 17:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fd:90:1f:76:00:89:f5:90:36:57:52:20:79:bf:cb:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e59585f74aeac6297ee5ea66626655ed1fde8fe7
        Validity
            Not Before: Oct  2 17:01:15 2026 GMT
            Not After : Oct  3 17:01:15 2026 GMT
        Subject: CN=9950b7af3f18c0ee5d284cd8c329bd491a22cfa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e0:64:87:8f:32:8b:16:04:0c:95:a0:f5:b7:
                    bb:21:36:74:d1:96:bf:47:3b:8b:6a:3f:2a:05:5c:
                    9f:1f:d0:51:5b:9b:3f:f6:53:c9:44:57:30:ea:53:
                    09:ed:62:40:36:25:88:55:a9:b9:79:41:01:aa:d4:
                    14:89:a8:54:05:6f:00:a3:4f:e1:17:33:33:de:91:
                    57:6c:fd:62:99:72:f3:d4:00:e5:84:40:c4:32:63:
                    da:d2:bc:7b:ae:79:71:91:13:6c:04:57:d4:c5:34:
                    c9:f1:7e:de:9d:0a:33:a0:d7:91:6b:a5:b3:8c:31:
                    38:a1:45:21:0d:5f:b4:1a:1a:8f:d9:b0:2e:78:09:
                    bd:8e:22:c5:ca:90:f5:3d:85:c8:60:96:86:dd:38:
                    07:7b:33:1e:04:6c:13:ef:60:89:a6:ac:ac:a9:e2:
                    58:bf:d4:c2:97:86:f2:f1:80:91:24:5e:33:2e:d3:
                    95:2a:ce:83:1a:35:42:e1:88:2c:33:ac:dc:56:24:
                    f3:85:6e:c0:c0:ff:ea:51:52:28:d0:26:f1:61:84:
                    ce:5c:38:ab:22:0b:fd:00:fe:64:43:f3:98:df:60:
                    fc:21:2f:4d:5c:c5:6e:29:61:f9:ae:67:07:5e:34:
                    d4:48:16:9f:0b:c5:dc:eb:f1:a7:4c:77:0c:7e:83:
                    02:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:50:B7:AF:3F:18:C0:EE:5D:28:4C:D8:C3:29:BD:49:1A:22:CF:A1
            X509v3 Authority Key Identifier:
                keyid:E5:95:85:F7:4A:EA:C6:29:7E:E5:EA:66:62:66:55:ED:1F:DE:8F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ZWF90rqxil-5epmYmZV7R_ej-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/5ZWF90rqxil-5epmYmZV7R_ej-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/5ZWF90rqxil-5epmYmZV7R_ej-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:c2:6b:7e:f2:bb:ad:7a:c3:a7:e2:8f:ee:14:3f:8f:52:7a:
         ad:2e:be:26:f0:43:45:b3:bc:25:8e:54:a5:7d:28:14:fc:5b:
         09:40:5a:13:82:ec:c2:5f:e4:4a:d5:ef:bc:ca:2c:0d:09:6e:
         4e:90:2a:5c:ce:e8:04:b4:08:da:10:e3:d9:e8:ec:0f:18:1d:
         b5:3c:6f:ad:62:cb:90:1a:83:f3:93:24:5c:10:11:08:cc:db:
         12:b4:6f:da:01:b3:a3:47:61:89:de:76:db:e6:7f:5b:15:6c:
         e3:81:cb:85:a8:82:c0:3b:ff:3c:42:c8:c1:67:b8:d2:93:3e:
         46:5b:bd:b4:4d:46:10:cc:82:7a:0d:d1:01:76:6a:37:d1:2c:
         33:75:38:8b:27:5b:50:93:f0:83:9a:01:74:d9:ef:8a:5c:74:
         51:bc:4e:c2:ba:6a:df:17:65:45:64:f0:c6:f7:03:6a:ea:5b:
         54:14:82:14:0c:ea:3b:79:e5:0b:39:b2:b0:6a:f2:6e:75:98:
         40:ad:58:74:af:a1:d0:6f:71:dc:b6:17:e6:ff:3c:ad:a9:0b:
         4e:57:23:fc:14:f5:28:46:e1:d3:22:2f:b2:27:8d:9b:53:f7:
         12:21:b2:ba:90:fa:be:db:cc:6f:ab:28:8d:5d:da:4b:54:f1:
         5f:8f:da:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 05:49:11 2026 by rpki-client