Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/35nVPUR4O91NiUjEU0rLsA9xtac.mft
File:                     35nVPUR4O91NiUjEU0rLsA9xtac.mft (raw, json)
Hash identifier:          tWbzY/+Sr0sRJ8WZ3z+NbP0C2yYbz/PvOCFv/Ho5Yzs=
Subject key identifier:   82:60:13:43:18:56:97:47:B8:33:BA:7F:F3:26:B4:BF:51:69:EC:B2
Authority key identifier: DF:99:D5:3D:44:78:3B:DD:4D:89:48:C4:53:4A:CB:B0:0F:71:B5:A7
Certificate issuer:       /CN=df99d53d44783bdd4d8948c4534acbb00f71b5a7
Certificate serial:       01A0D124F2381F0F2A0F5F4AEA2B5583ED0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/35nVPUR4O91NiUjEU0rLsA9xtac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/35nVPUR4O91NiUjEU0rLsA9xtac.mft
Manifest number:          E5
Signing time:             Thu 24 Sep 2026 02:00:54 +0000
Manifest this update:     Thu 24 Sep 2026 02:00:54 +0000
Manifest next update:     Fri 25 Sep 2026 02:00:54 +0000
Files and hashes:         1: 35nVPUR4O91NiUjEU0rLsA9xtac.crl (hash: EWrcI+Ekh2fkqgzomu+7QSI7z07twRO2fu8fIAKQq20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/35nVPUR4O91NiUjEU0rLsA9xtac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/35nVPUR4O91NiUjEU0rLsA9xtac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/35nVPUR4O91NiUjEU0rLsA9xtac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:24:f2:38:1f:0f:2a:0f:5f:4a:ea:2b:55:83:ed:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df99d53d44783bdd4d8948c4534acbb00f71b5a7
        Validity
            Not Before: Sep 24 02:00:54 2026 GMT
            Not After : Sep 25 02:00:54 2026 GMT
        Subject: CN=8260134318569747b833ba7ff326b4bf5169ecb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d1:a4:c4:1a:16:c0:c7:76:42:e0:47:78:80:
                    28:eb:40:f7:86:e2:f1:4e:22:4c:cf:38:c2:ef:88:
                    f0:6c:73:f1:24:e2:20:0c:b6:de:7f:b7:19:29:c7:
                    be:04:1b:b3:e5:5d:76:6f:a9:ee:e0:6f:c6:e0:56:
                    b0:03:39:33:32:db:22:97:f6:38:a4:e4:66:c5:c3:
                    48:0b:3c:58:93:34:e4:53:4f:2f:cd:1c:6e:95:0f:
                    dd:21:f6:10:95:3c:d0:c7:fe:f0:90:3c:ed:db:dc:
                    d7:14:79:ee:f8:9d:7f:f8:40:6e:eb:dc:7e:59:06:
                    69:70:e2:f1:67:b4:7c:be:7a:34:5b:4a:34:e9:ee:
                    74:d5:50:16:fa:aa:8c:43:97:42:d8:7c:cb:17:e5:
                    f3:9b:9e:eb:bd:bf:60:be:fa:8d:05:56:08:36:9a:
                    2d:ae:9d:36:9f:4e:7b:5e:85:63:0c:dd:f1:86:72:
                    41:e6:c9:d8:f0:78:4d:56:51:26:92:58:b3:cf:c5:
                    42:dc:29:6a:65:27:71:15:f1:fc:d1:41:f9:bd:c9:
                    54:e9:a8:a3:fa:12:7d:99:8e:cd:fe:18:b2:18:65:
                    59:23:11:f4:22:56:33:4e:2b:4b:82:42:42:e6:b2:
                    46:1e:ac:8a:30:dc:f6:a0:b0:53:23:51:a7:d9:0a:
                    be:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:60:13:43:18:56:97:47:B8:33:BA:7F:F3:26:B4:BF:51:69:EC:B2
            X509v3 Authority Key Identifier:
                keyid:DF:99:D5:3D:44:78:3B:DD:4D:89:48:C4:53:4A:CB:B0:0F:71:B5:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35nVPUR4O91NiUjEU0rLsA9xtac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/35nVPUR4O91NiUjEU0rLsA9xtac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/35nVPUR4O91NiUjEU0rLsA9xtac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:b1:59:bc:bd:76:c5:a7:c4:77:c7:64:0f:03:80:db:9e:3e:
         0f:61:20:58:eb:ab:bd:ac:1e:b4:b7:1b:aa:cd:9f:9a:d3:13:
         69:27:22:a5:32:31:12:5b:29:3a:a8:89:d9:12:ea:70:93:f5:
         bb:80:08:52:02:00:8d:9b:43:ae:6f:78:1e:86:05:2d:57:3c:
         c5:e8:ec:7f:cf:8e:46:a1:41:03:bd:dd:8d:cf:73:6a:1f:ec:
         55:72:ba:f6:da:ee:42:27:d2:f8:26:66:1a:b9:1f:07:f4:7d:
         fc:65:06:09:a7:46:0f:b4:2a:58:f1:fe:0b:26:46:37:90:4f:
         d8:37:2c:68:2f:ed:ff:01:6f:03:3e:93:03:f1:fc:e0:21:c2:
         f5:2a:2b:71:0d:c4:45:be:5e:12:e7:f1:1e:fc:da:f3:5b:81:
         7f:d8:c4:95:b5:56:46:56:e5:09:30:71:05:f2:ca:0d:d0:04:
         72:c0:6f:a1:08:e9:44:b7:c4:c2:3c:76:7c:6c:e9:4d:a9:e0:
         ba:8f:df:a3:3e:87:ca:87:90:89:16:86:42:45:63:23:e0:04:
         df:dc:13:31:e2:ae:eb:62:bd:37:ff:88:48:94:cb:23:02:21:
         bd:cd:07:89:d8:94:ae:e2:8d:70:6c:bb:72:21:87:f8:8c:65:
         00:40:12:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRJPI4Hw8qD19K6itVg+0OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmOTlkNTNkNDQ3ODNiZGQ0ZDg5NDhjNDUzNGFjYmIwMGY3
MWI1YTcwHhcNMjYwOTI0MDIwMDU0WhcNMjYwOTI1MDIwMDU0WjAzMTEwLwYDVQQD
Eyg4MjYwMTM0MzE4NTY5NzQ3YjgzM2JhN2ZmMzI2YjRiZjUxNjllY2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtGkxBoWwMd2QuBHeIAo60D3huLx
TiJMzzjC74jwbHPxJOIgDLbef7cZKce+BBuz5V12b6nu4G/G4FawAzkzMtsil/Y4
pORmxcNICzxYkzTkU08vzRxulQ/dIfYQlTzQx/7wkDzt29zXFHnu+J1/+EBu69x+
WQZpcOLxZ7R8vno0W0o06e501VAW+qqMQ5dC2HzLF+Xzm57rvb9gvvqNBVYINpot
rp02n057XoVjDN3xhnJB5snY8HhNVlEmklizz8VC3ClqZSdxFfH80UH5vclU6aij
+hJ9mY7N/hiyGGVZIxH0IlYzTitLgkJC5rJGHqyKMNz2oLBTI1Gn2Qq+8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJgE0MYVpdHuDO6f/MmtL9RaeyyMB8GA1UdIwQY
MBaAFN+Z1T1EeDvdTYlIxFNKy7APcbWnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzVuVlBVUjRPOTFOaVVqRVUwckxzQTl4dGFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8wZWY2MjItOWMyNy00NjczLTliM2It
ZWEyOWMxYTI4YzVkLzEvMzVuVlBVUjRPOTFOaVVqRVUwckxzQTl4dGFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8wZWY2MjItOWMyNy00NjczLTliM2ItZWEyOWMxYTI4YzVk
LzEvMzVuVlBVUjRPOTFOaVVqRVUwckxzQTl4dGFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKrFZvL12
xafEd8dkDwOA254+D2EgWOurvawetLcbqs2fmtMTaScipTIxElspOqiJ2RLqcJP1
u4AIUgIAjZtDrm94HoYFLVc8xejsf8+ORqFBA73djc9zah/sVXK69truQifS+CZm
GrkfB/R9/GUGCadGD7QqWPH+CyZGN5BP2DcsaC/t/wFvAz6TA/H84CHC9SorcQ3E
Rb5eEufxHvza81uBf9jElbVWRlblCTBxBfLKDdAEcsBvoQjpRLfEwjx2fGzpTang
uo/foz6HyoeQiRaGQkVjI+AE39wTMeKu62K9N/+ISJTLIwIhvc0HidiUruKNcGy7
ciGH+IxlAEASmA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 04:56:03 2026 by rpki-client