Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
File:                     D1pCPdyX3TDeyLhnPCSWjic3JnY.mft (raw, json)
Hash identifier:          FDPsRF7BLMp5FPu7dMezz89ZmpXcWHMkbbXQemUsDSM=
Subject key identifier:   55:CF:8F:BA:81:3A:C7:F1:26:2B:33:CA:72:9F:95:43:63:2A:F0:13
Authority key identifier: 0F:5A:42:3D:DC:97:DD:30:DE:C8:B8:67:3C:24:96:8E:27:37:26:76
Certificate issuer:       /CN=0f5a423ddc97dd30dec8b8673c24968e27372676
Certificate serial:       01A0CB90A79A0D69A9E7704B085A86EA554F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D1pCPdyX3TDeyLhnPCSWjic3JnY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
Manifest number:          052F
Signing time:             Wed 23 Sep 2026 00:00:49 +0000
Manifest this update:     Wed 23 Sep 2026 00:00:49 +0000
Manifest next update:     Thu 24 Sep 2026 00:00:49 +0000
Files and hashes:         1: D1pCPdyX3TDeyLhnPCSWjic3JnY.crl (hash: ws879ULjq4Kkb3AfdNY9jaRd9AyRQcpLlF5A691t8xY=)
                          2: tZXFhCda9QhyEl0l4dUGgw3-aFI.asa (hash: ojPBN8xQtJDNsaPuMNz7OBORmpao2SEolkZFks4hcs8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D1pCPdyX3TDeyLhnPCSWjic3JnY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:90:a7:9a:0d:69:a9:e7:70:4b:08:5a:86:ea:55:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f5a423ddc97dd30dec8b8673c24968e27372676
        Validity
            Not Before: Sep 23 00:00:49 2026 GMT
            Not After : Sep 24 00:00:49 2026 GMT
        Subject: CN=55cf8fba813ac7f1262b33ca729f9543632af013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:94:13:a9:5a:d9:4d:44:9b:f7:a1:23:25:72:
                    81:bf:0f:68:7f:b4:44:77:d2:8b:0d:86:e8:01:4b:
                    7b:68:a9:96:ba:85:ac:78:dd:d2:6a:c4:d2:c3:c3:
                    63:a8:de:04:66:4f:e8:c9:44:e3:d1:75:02:a2:bb:
                    a4:cd:97:c5:ce:58:02:b4:66:b5:70:90:4c:64:29:
                    fd:9e:b5:86:83:10:9b:d2:d7:2c:2c:33:92:06:35:
                    d5:bb:b3:81:34:35:f2:c3:58:9c:5a:19:c7:ef:68:
                    8f:8d:5f:4e:8b:d0:32:c3:db:c1:92:c7:57:bc:65:
                    91:dd:9c:4a:53:5b:98:94:5a:f3:5f:46:2b:b9:b1:
                    6c:d0:d4:05:14:2d:8e:ba:85:ad:16:27:4a:46:8a:
                    6c:d6:63:dc:88:57:25:eb:db:f9:5f:8a:74:7c:06:
                    4c:2b:d9:4d:ab:1d:40:c6:31:0e:dd:97:be:32:4f:
                    84:18:22:67:e7:29:d2:30:a2:b2:cc:7b:60:8c:49:
                    45:e7:88:5a:25:39:0b:2f:4f:33:eb:1c:e3:bd:28:
                    98:4d:d2:1f:28:dd:c8:b2:75:f9:5c:d0:25:57:8e:
                    b0:2b:88:7e:ba:4d:1b:1d:5c:21:ee:e7:66:b5:f3:
                    d0:21:2c:d6:91:ec:ef:88:19:65:c0:b4:e4:63:16:
                    0a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CF:8F:BA:81:3A:C7:F1:26:2B:33:CA:72:9F:95:43:63:2A:F0:13
            X509v3 Authority Key Identifier:
                keyid:0F:5A:42:3D:DC:97:DD:30:DE:C8:B8:67:3C:24:96:8E:27:37:26:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1pCPdyX3TDeyLhnPCSWjic3JnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:fd:f2:f7:c4:64:7d:3f:ac:38:c1:7f:c0:c4:97:b4:73:2d:
         e5:0e:2a:85:03:83:d1:13:b5:3c:c0:ef:81:8a:96:b1:f6:85:
         16:c6:0a:47:0d:38:c7:66:39:53:23:af:cb:dd:ff:7d:48:48:
         ac:c8:cf:02:40:7f:16:5b:2e:6c:db:e4:09:09:13:cc:73:f4:
         1f:68:96:41:b5:05:4d:d1:71:f0:10:40:ec:62:b5:b1:2e:f8:
         fd:d3:9a:f3:3a:fc:eb:c3:53:f3:ce:00:71:04:99:27:88:b9:
         40:82:a2:1c:4b:98:a8:02:e8:cf:a9:f7:82:2c:2d:09:93:f4:
         58:4d:39:3e:99:77:db:d5:18:cc:f4:42:96:d1:37:43:db:75:
         0d:99:ea:13:9d:2b:2c:47:ac:f6:b8:6d:1b:26:41:d5:9a:91:
         7c:1b:83:40:f0:b6:a3:86:4c:7f:2c:2f:c3:b7:4a:4a:70:68:
         e4:d0:ee:91:9f:0f:0b:a7:0e:79:ed:a8:89:f7:55:87:99:65:
         d7:22:05:24:40:38:7f:41:7f:f8:a7:40:c4:aa:bc:7d:61:94:
         92:d2:9a:d0:bc:cb:df:37:a1:a4:17:cb:e6:bf:37:05:88:f3:
         ba:9d:0d:3d:38:20:79:3d:7c:03:2b:67:5c:1e:9a:8f:1e:74:
         cf:1f:09:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:11:01 2026 by rpki-client