Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
File:                     5JlaSpG8KcjX7RBKA4QBmk_lng4.mft (raw, json)
Hash identifier:          VIth/UrgwaYtsjHnCwxLaRsPFbKnSIB6bK1ihmbkzrY=
Subject key identifier:   B8:31:BB:F2:93:51:4F:56:95:CC:57:75:8A:57:15:F6:1C:CC:75:0E
Authority key identifier: E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E
Certificate issuer:       /CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
Certificate serial:       01A0D19273A76B97D4B109422FA36C87B416
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
Manifest number:          0DB3
Signing time:             Thu 24 Sep 2026 04:00:31 +0000
Manifest this update:     Thu 24 Sep 2026 04:00:31 +0000
Manifest next update:     Fri 25 Sep 2026 04:00:31 +0000
Files and hashes:         1: 5JlaSpG8KcjX7RBKA4QBmk_lng4.crl (hash: ROzDwxwGZNdGiD3A2kInHf2sj4FGwA7digaj21Clh2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:92:73:a7:6b:97:d4:b1:09:42:2f:a3:6c:87:b4:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
        Validity
            Not Before: Sep 24 04:00:31 2026 GMT
            Not After : Sep 25 04:00:31 2026 GMT
        Subject: CN=b831bbf293514f5695cc57758a5715f61ccc750e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4a:07:75:58:20:94:34:3a:83:66:c9:90:65:
                    ea:75:d9:59:af:ae:e0:8f:93:c3:7a:c9:b6:9b:d9:
                    a3:49:25:ac:a1:aa:0d:e5:00:67:de:24:ce:2c:7a:
                    14:8c:48:2d:02:0b:5c:87:ae:ad:fa:ff:9d:80:9b:
                    da:f1:3e:b1:b7:8e:3e:a1:20:fc:28:35:40:63:88:
                    e3:51:f4:50:da:53:ed:c9:87:03:54:bb:d7:cc:d5:
                    83:b9:a4:a3:fb:35:3f:b9:a0:d1:47:2e:36:c7:56:
                    20:69:13:2b:d3:44:0e:9a:f9:8e:75:8f:b1:e9:4e:
                    31:75:a5:b4:f5:3f:fb:75:f1:2c:1a:60:a8:dc:9a:
                    bb:7c:37:a2:de:e1:19:e0:e7:a2:89:c7:d4:18:96:
                    f6:8c:fb:02:ce:0f:88:82:eb:d4:7a:d9:96:20:c5:
                    23:53:48:6e:9b:47:c3:e2:31:c8:cc:bd:a5:ac:92:
                    bf:f8:38:df:1d:aa:80:f4:3f:c1:7d:66:cf:6f:a5:
                    38:d4:5f:6c:d9:13:9f:fb:36:ed:23:70:dd:ce:72:
                    ef:03:73:a7:2c:96:a2:dc:4f:a6:7d:7b:b9:75:f4:
                    05:d5:69:1e:9f:cb:a2:6c:3e:12:16:33:69:d9:35:
                    48:5b:d8:18:ee:2b:fa:da:71:e5:a5:57:18:8e:81:
                    df:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:31:BB:F2:93:51:4F:56:95:CC:57:75:8A:57:15:F6:1C:CC:75:0E
            X509v3 Authority Key Identifier:
                keyid:E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:0b:1c:b4:ff:f6:bc:68:da:33:d6:79:84:eb:19:8a:79:61:
         1f:7f:47:4d:84:9e:87:fd:f1:2a:9b:99:4c:31:51:3d:14:e4:
         ee:75:9e:cf:ec:93:69:7d:83:53:79:cd:81:a7:4b:67:31:d3:
         e1:08:9a:a1:ee:be:68:5f:82:9d:d2:c1:d0:26:42:70:68:46:
         e5:6d:3d:88:37:0b:3a:30:db:ac:c8:33:9d:ad:89:be:00:b4:
         ed:79:1d:9b:a0:7d:6a:3c:50:94:6d:b1:a7:dc:81:6e:96:0b:
         6b:a1:6c:c3:3b:34:a1:bc:71:fc:8e:9d:b6:4b:7c:16:60:8c:
         95:2b:73:1b:88:0a:3c:53:a9:a3:16:7f:f6:ab:c4:35:05:86:
         88:ba:0b:2e:db:a1:93:f7:87:be:88:1d:63:a4:bc:a7:e4:44:
         1c:cd:ce:54:42:75:45:ec:4a:9e:3c:c3:5e:5e:b7:bb:cd:7f:
         d1:5a:06:f4:0c:cb:e6:a6:0d:9a:df:21:f5:18:21:07:0e:dc:
         2b:bd:e5:9b:be:e8:e9:cc:9b:dd:c8:27:22:ad:10:19:69:d9:
         60:5d:4d:f4:e5:ee:d2:51:d2:13:e2:ef:24:6b:cc:5e:8b:ba:
         84:fa:08:70:71:d6:a5:05:5e:ce:12:17:34:d3:fb:26:84:a3:
         a5:2b:8e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:25:03 2026 by rpki-client