Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
File:                     54CVVajwXwQLRfmuycPvVaG6kz0.mft (raw, json)
Hash identifier:          YrRgyHQ2yYFlp3gv/InBTC1Mu+yU8/LOfIyNXp6rSHk=
Subject key identifier:   32:98:2C:66:8D:DF:A0:4C:1E:11:83:52:F3:2C:B5:15:E5:75:73:18
Authority key identifier: E7:80:95:55:A8:F0:5F:04:0B:45:F9:AE:C9:C3:EF:55:A1:BA:93:3D
Certificate issuer:       /CN=e7809555a8f05f040b45f9aec9c3ef55a1ba933d
Certificate serial:       01A0C70EB426CB52886019BEC14C8B30D33F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
Manifest number:          083B
Signing time:             Tue 22 Sep 2026 03:00:24 +0000
Manifest this update:     Tue 22 Sep 2026 03:00:24 +0000
Manifest next update:     Wed 23 Sep 2026 03:00:24 +0000
Files and hashes:         1: 54CVVajwXwQLRfmuycPvVaG6kz0.crl (hash: D0IMGi/97Aguu7F3F36jGtRZldrazEPq5wmZ8v1gs9U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:0e:b4:26:cb:52:88:60:19:be:c1:4c:8b:30:d3:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7809555a8f05f040b45f9aec9c3ef55a1ba933d
        Validity
            Not Before: Sep 22 03:00:24 2026 GMT
            Not After : Sep 23 03:00:24 2026 GMT
        Subject: CN=32982c668ddfa04c1e118352f32cb515e5757318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0e:fe:12:7e:58:93:65:e7:d7:8b:5e:6c:16:
                    4f:a2:78:78:7a:0e:00:14:7e:a6:ed:7c:51:33:d1:
                    96:25:c6:4a:c9:87:f5:ce:78:a5:99:e5:d7:08:7c:
                    e8:a3:f0:79:e8:7e:d1:33:8c:9c:b6:68:c3:c5:79:
                    d0:ea:2f:8f:93:c3:83:55:7e:c7:13:ce:e9:b3:04:
                    bd:05:eb:2e:57:ed:bc:56:3e:e8:ea:27:a4:70:89:
                    10:21:3e:6e:96:e9:98:c6:4d:be:ca:e9:55:cb:e0:
                    02:3c:9c:9f:c0:cc:37:6c:13:90:c9:cf:12:1c:b1:
                    aa:3a:18:30:47:09:7c:d8:a1:48:cd:8c:93:c5:f0:
                    80:3f:e9:7d:64:ff:fe:41:73:2b:47:5a:d6:25:a0:
                    e4:92:7f:d1:c4:af:ee:ac:8d:66:81:e1:d6:c8:17:
                    dc:6c:07:0b:7d:4e:c3:8c:6a:f9:9f:c4:58:62:6b:
                    69:07:d6:f1:b3:15:a3:9c:ab:89:28:63:28:97:ea:
                    a4:9f:3b:61:12:2e:3e:e6:2b:e5:35:89:f7:fd:0a:
                    aa:92:00:de:62:26:af:05:e3:46:55:df:23:c0:41:
                    a9:f0:64:9d:aa:00:84:a9:85:1b:df:5c:13:36:5e:
                    28:de:f8:c3:0d:8f:9a:9a:d5:1e:03:b8:ec:f0:d5:
                    62:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:98:2C:66:8D:DF:A0:4C:1E:11:83:52:F3:2C:B5:15:E5:75:73:18
            X509v3 Authority Key Identifier:
                keyid:E7:80:95:55:A8:F0:5F:04:0B:45:F9:AE:C9:C3:EF:55:A1:BA:93:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:4e:ec:d0:05:36:1d:90:d9:a2:e6:07:bd:90:ea:73:01:dc:
         20:d0:ae:d1:63:35:a5:88:3f:e8:26:e5:68:5d:64:85:ba:1b:
         4b:1a:f5:a6:eb:f3:d7:68:26:07:ba:5c:b0:89:23:92:1d:ae:
         4a:03:eb:7d:21:a5:fc:b3:4b:f5:d5:f3:3c:97:77:cf:25:42:
         ab:2a:f7:2e:81:80:85:f2:78:3a:30:df:47:cb:b5:26:dd:24:
         6b:48:f7:ee:4a:f7:22:03:76:f4:1b:c2:35:a7:86:82:12:d0:
         4e:11:3f:a9:b2:f1:65:f7:b7:ea:9e:99:9f:bf:6e:1f:fc:5c:
         1b:5a:45:24:14:97:66:04:eb:96:4f:e3:e1:f6:a0:08:09:05:
         f7:e9:1e:ec:ca:97:89:34:dd:4e:54:80:ce:3d:34:79:da:6e:
         72:c1:d1:17:b0:a1:9d:e5:03:1e:f0:ce:92:5b:34:60:24:21:
         ef:a6:3f:0c:93:db:f6:c5:cf:b5:68:62:01:e9:31:f2:9a:ef:
         31:ec:76:0d:0a:81:08:29:95:ac:ff:57:a4:10:17:af:76:85:
         32:ec:21:9b:ab:f5:32:c6:d4:71:03:c5:b2:db:a4:c5:c4:44:
         7d:b8:69:b7:fb:21:a3:49:e7:48:6c:2d:7a:4d:1a:f6:42:05:
         88:64:cf:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:09:40 2026 by rpki-client