Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
File:                     5gRDG1VUd8GaP0xcttEHNljVs-M.mft (raw, json)
Hash identifier:          33GYn2FpiZ1mqQhyuUQBgM9RiW55VTSDCIDp9L+zUis=
Subject key identifier:   AB:2C:FE:15:A0:02:1A:0A:F1:8A:E0:E5:61:E0:4A:F0:47:0C:D9:60
Authority key identifier: E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3
Certificate issuer:       /CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3
Certificate serial:       01A0D426DDF4433EA7D189BD8494552BAD7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
Manifest number:          10AF
Signing time:             Thu 24 Sep 2026 16:01:51 +0000
Manifest this update:     Thu 24 Sep 2026 16:01:51 +0000
Manifest next update:     Fri 25 Sep 2026 16:01:51 +0000
Files and hashes:         1: 5gRDG1VUd8GaP0xcttEHNljVs-M.crl (hash: zsM1ZVgedUr8/103TMqiTbAnDGrWimzHvHv3XjUt/1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:26:dd:f4:43:3e:a7:d1:89:bd:84:94:55:2b:ad:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3
        Validity
            Not Before: Sep 24 16:01:51 2026 GMT
            Not After : Sep 25 16:01:51 2026 GMT
        Subject: CN=ab2cfe15a0021a0af18ae0e561e04af0470cd960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d6:78:38:4c:00:17:ff:e1:b9:65:42:6b:e9:
                    8f:05:8b:1b:ef:b4:1d:56:48:bb:a1:72:07:27:8f:
                    50:75:ae:07:ec:79:38:a6:ab:1e:11:ad:95:35:67:
                    15:48:bb:8e:c6:d9:ee:f8:b4:54:01:67:87:27:77:
                    21:1d:0e:c8:fc:db:16:83:61:b0:4d:56:fa:2b:1d:
                    a6:01:e3:68:dd:4e:dd:d4:8c:66:83:ad:30:02:84:
                    d8:82:6f:25:43:ea:a0:75:de:4a:f9:44:97:2e:08:
                    46:27:65:f1:ed:62:4e:64:e9:b1:7d:f5:b2:09:f7:
                    ef:85:6e:34:03:c3:0c:d4:94:68:e0:95:79:3b:9f:
                    a7:eb:cb:c0:af:e6:ec:ef:4b:5f:5e:4e:ce:c4:46:
                    86:37:fc:70:95:f2:ce:16:7b:7b:5a:41:3b:35:44:
                    05:87:20:c7:cb:e2:44:2b:e5:5d:e7:04:24:7b:95:
                    70:b4:d5:3e:61:44:95:b4:74:38:86:6c:d6:54:16:
                    07:0f:c5:bf:c8:28:b5:80:15:2e:5f:f3:a8:dd:f4:
                    85:58:6c:51:11:dc:53:82:71:8a:fa:33:a0:80:ec:
                    9c:cc:f6:79:07:d0:41:79:99:e8:d6:d4:d9:23:99:
                    ec:0a:b8:7d:06:27:ef:17:e2:9f:1c:9b:9e:13:04:
                    e5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2C:FE:15:A0:02:1A:0A:F1:8A:E0:E5:61:E0:4A:F0:47:0C:D9:60
            X509v3 Authority Key Identifier:
                keyid:E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:9c:76:3b:4e:ce:b5:9b:35:fe:2a:d6:6b:23:c2:4e:4b:54:
         c2:c2:2d:2e:64:13:64:ab:b7:73:53:17:9d:b2:35:43:98:8e:
         27:89:65:e7:d8:9e:4b:4b:3a:65:c9:8f:a4:c1:b8:55:f7:77:
         9a:39:53:91:c5:69:05:81:66:89:1d:8e:15:42:57:e6:2c:68:
         48:67:51:cb:69:6b:af:53:fc:16:d7:d6:d1:7d:66:2f:ec:2f:
         8c:12:5f:09:af:3b:b5:75:ef:47:67:12:41:e1:9f:dd:94:85:
         8c:32:bb:b0:fc:f7:47:c6:c0:15:7a:51:08:1a:39:66:f7:91:
         37:7a:22:5a:64:9d:b1:4f:b8:06:5b:93:1b:bc:c9:ee:06:84:
         02:4d:d7:b1:7c:b3:4f:98:83:6f:c3:16:25:6b:31:4e:2b:5d:
         f7:88:9a:44:bf:8f:33:59:bd:69:0c:8b:d7:cc:a1:a2:ac:5f:
         f1:66:48:d2:5b:fa:10:9f:09:d3:0f:4e:a2:84:d8:be:0f:f5:
         15:e0:ed:a7:c5:d2:17:1f:5a:ac:a1:a6:e7:27:a1:e8:59:73:
         ea:13:88:53:10:b3:ce:d3:cf:76:46:b2:76:c5:38:54:7e:8a:
         7d:6d:21:57:0c:7b:11:2b:cf:82:04:aa:6c:73:6f:22:85:8a:
         5d:f7:93:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:15:08 2026 by rpki-client