Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft
File:                     5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft (raw, json)
Hash identifier:          MoR2K8xBDx04w7RTh/cd1XYckx9eIBIcpyV47uxd8uc=
Subject key identifier:   78:34:7B:42:44:59:83:3A:84:73:38:92:35:BC:66:9D:C6:54:CC:C8
Authority key identifier: E5:2C:B8:5C:A7:93:FA:D5:65:B4:60:8E:26:D8:2A:6A:E2:7D:C2:32
Certificate issuer:       /CN=e52cb85ca793fad565b4608e26d82a6ae27dc232
Certificate serial:       01A0F29EE641950980FEB019D12F7925919D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Sy4XKeT-tVltGCOJtgqauJ9wjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft
Manifest number:          1102
Signing time:             Wed 30 Sep 2026 14:01:34 +0000
Manifest this update:     Wed 30 Sep 2026 14:01:34 +0000
Manifest next update:     Thu 01 Oct 2026 14:01:34 +0000
Files and hashes:         1: 5Sy4XKeT-tVltGCOJtgqauJ9wjI.crl (hash: Om6D+Lp76x4i77wOUGNQ9rzqdCxqt9Zl+e4fsKzxNIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Sy4XKeT-tVltGCOJtgqauJ9wjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 11:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f2:9e:e6:41:95:09:80:fe:b0:19:d1:2f:79:25:91:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e52cb85ca793fad565b4608e26d82a6ae27dc232
        Validity
            Not Before: Sep 30 14:01:34 2026 GMT
            Not After : Oct  1 14:01:34 2026 GMT
        Subject: CN=78347b424459833a8473389235bc669dc654ccc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:41:95:f1:78:da:4d:e7:c9:f6:6f:36:11:a0:
                    0a:53:07:2f:50:45:f9:a4:63:f8:10:ef:15:d4:4f:
                    39:ed:ff:cd:3a:2b:8c:b3:15:0c:21:a4:53:ab:d9:
                    5c:b9:08:19:d6:13:9d:bd:96:ad:df:42:19:f8:ac:
                    54:20:05:fc:04:76:55:ec:5a:72:ce:51:05:f8:ac:
                    a0:5a:1b:0d:96:45:9a:12:be:44:21:4e:90:2e:6e:
                    8a:03:95:85:c8:e3:5a:5e:6b:64:18:bb:f9:12:b8:
                    3f:f8:30:13:d6:e5:ba:41:59:38:20:4b:99:66:4d:
                    d8:75:5f:b9:35:e3:6d:f6:bd:02:cf:6d:59:37:21:
                    15:9f:d1:39:0c:59:4f:46:c6:86:31:92:17:73:f5:
                    ae:7e:60:4e:1c:d0:1a:05:eb:78:7b:3a:da:49:3d:
                    9d:b7:6a:04:4a:36:ec:42:24:9f:9b:68:a4:5c:dc:
                    64:8a:15:c6:21:3b:74:c2:02:54:14:1b:47:64:7a:
                    b8:89:1f:8c:85:f7:91:03:5a:ec:e4:c4:e4:36:b9:
                    f3:b9:ee:5b:76:f2:9a:b6:56:61:dc:5c:a7:1f:8f:
                    3a:8f:4b:6a:34:f7:4c:a1:d4:ff:05:3d:4c:ea:11:
                    9b:cd:87:cf:b6:e9:3a:a1:b2:6d:d1:1d:e0:99:03:
                    62:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:34:7B:42:44:59:83:3A:84:73:38:92:35:BC:66:9D:C6:54:CC:C8
            X509v3 Authority Key Identifier:
                keyid:E5:2C:B8:5C:A7:93:FA:D5:65:B4:60:8E:26:D8:2A:6A:E2:7D:C2:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Sy4XKeT-tVltGCOJtgqauJ9wjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:da:8f:47:38:90:4f:26:7b:c4:d9:6b:3f:eb:75:80:47:4f:
         b0:7d:12:9e:b2:fa:8f:9a:01:2a:b2:52:9b:22:52:8f:2e:e0:
         f7:36:1c:ee:df:0e:33:53:3b:4e:15:a7:87:a3:3f:91:98:6b:
         83:e3:d5:02:da:a4:1a:d0:2e:d9:dd:74:b4:59:d9:a9:ae:52:
         3e:5f:3b:29:4b:7e:9f:42:ba:59:19:35:21:34:a3:97:dd:40:
         26:ea:ac:b2:fa:c4:ff:e2:f5:83:e2:2b:76:25:1e:17:f2:ea:
         7e:9a:fa:c4:48:8c:55:7c:f7:e3:d7:4c:a7:b8:2c:06:c9:05:
         1f:00:1b:b5:f9:10:ef:b1:42:76:86:7a:62:a6:7c:4a:7c:39:
         c2:e6:c0:3c:3e:ef:26:6a:3f:49:09:59:7d:1c:10:48:de:ff:
         e9:d4:55:86:7a:95:a3:ea:81:82:80:e1:3a:ce:ef:8e:9e:0b:
         be:8a:5f:62:a0:ae:a3:b6:45:34:36:02:d8:2d:29:3a:c9:5c:
         68:c1:d0:ab:42:3b:7c:f5:00:f1:b2:f9:ee:dc:9e:0a:a0:bc:
         f3:20:19:78:ee:8f:a7:b9:cc:be:d4:e9:11:f2:04:a7:56:a4:
         f2:10:5b:b4:20:6c:e7:a1:23:47:b7:ba:09:10:6a:c6:d6:2c:
         8c:ab:7f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:27:39 2026 by rpki-client