Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
File:                     5llE5PrhnBWib8tfJzL_G6I9NU0.mft (raw, json)
Hash identifier:          NaJ/WcrjJFWoM/PB2p7gSs5nXC0y8DwgkG8zhX2ozzE=
Subject key identifier:   FA:59:DA:EF:88:01:BF:FA:24:00:0E:B4:E5:2D:70:91:F7:FC:59:1F
Authority key identifier: E6:59:44:E4:FA:E1:9C:15:A2:6F:CB:5F:27:32:FF:1B:A2:3D:35:4D
Certificate issuer:       /CN=e65944e4fae19c15a26fcb5f2732ff1ba23d354d
Certificate serial:       01A1347ED9C2FBE238839E1E8C7E061B6AA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
Manifest number:          075E
Signing time:             Tue 13 Oct 2026 09:01:30 +0000
Manifest this update:     Tue 13 Oct 2026 09:01:30 +0000
Manifest next update:     Wed 14 Oct 2026 09:01:30 +0000
Files and hashes:         1: 5llE5PrhnBWib8tfJzL_G6I9NU0.crl (hash: OiGVN+znpJUFllIsNmHdABQ/U9Fg6b0p+7YkYvQaPic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 09:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:34:7e:d9:c2:fb:e2:38:83:9e:1e:8c:7e:06:1b:6a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e65944e4fae19c15a26fcb5f2732ff1ba23d354d
        Validity
            Not Before: Oct 13 09:01:30 2026 GMT
            Not After : Oct 14 09:01:30 2026 GMT
        Subject: CN=fa59daef8801bffa24000eb4e52d7091f7fc591f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0f:69:af:9c:cf:a5:d6:a2:5c:67:59:46:dc:
                    89:55:17:31:38:a9:c5:0e:96:c1:37:f3:6f:2d:ff:
                    ec:d1:85:50:1d:98:2b:df:2b:f1:32:a3:69:ca:ad:
                    95:0b:57:31:5c:be:e6:46:e6:4b:ea:76:80:2d:09:
                    fe:96:0b:e4:6d:46:a0:3b:80:6d:3a:a2:6a:52:15:
                    d2:9a:24:81:e6:f0:7f:3f:ee:61:ac:cd:61:30:cb:
                    f8:c4:be:c3:4f:79:03:d1:b9:f7:a5:ec:b6:e1:5e:
                    fb:2c:8b:21:5c:cf:a3:ed:8b:a4:27:09:f2:8d:fd:
                    84:99:16:36:e6:66:46:29:5e:22:a3:0b:9b:53:ab:
                    5c:67:2e:17:6e:10:c2:eb:af:50:76:83:c1:2b:6b:
                    86:a1:d5:b0:ee:97:2a:91:e1:36:28:9a:32:37:f3:
                    a2:f3:b6:9a:e6:4c:da:f4:6d:8b:31:52:96:1e:92:
                    cb:72:dd:da:4b:f4:39:eb:b5:55:c4:af:c0:c0:53:
                    ed:20:50:b4:d8:31:31:be:75:6c:e6:ab:8f:0d:df:
                    b4:f7:9d:db:c2:ca:8e:c5:39:e3:65:fc:0b:f4:04:
                    2d:53:9a:91:26:4f:ef:85:c5:40:c4:69:d1:3e:d7:
                    37:27:34:4c:a5:4b:14:26:3c:b6:56:c5:e5:d1:2d:
                    ed:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:59:DA:EF:88:01:BF:FA:24:00:0E:B4:E5:2D:70:91:F7:FC:59:1F
            X509v3 Authority Key Identifier:
                keyid:E6:59:44:E4:FA:E1:9C:15:A2:6F:CB:5F:27:32:FF:1B:A2:3D:35:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:d3:66:68:73:b6:c8:2c:c4:08:4b:fd:67:3c:f0:01:dd:4c:
         3b:a5:a8:3d:4a:2b:d4:30:99:fe:4b:cc:d5:03:bf:fb:5a:89:
         9a:70:3b:39:1f:07:c5:a3:2e:d8:88:76:4e:96:49:a0:57:95:
         d0:95:7f:68:55:dc:24:a4:61:dd:36:8e:4c:25:9d:bd:fb:6f:
         c8:93:54:11:7a:46:68:41:54:68:d7:19:62:4e:c2:67:4d:85:
         5a:03:0d:b2:4f:8e:25:f4:27:e6:dc:e3:73:45:7b:f6:54:5c:
         27:d6:61:d7:be:f8:ed:fe:03:02:39:74:9e:13:cf:f9:fc:0a:
         70:bf:4c:8e:2f:33:c3:5a:e6:d8:00:bd:41:54:fc:d0:e5:73:
         4a:79:14:d0:80:2a:6e:b6:ec:6e:ba:58:2c:ad:54:c1:35:8a:
         5a:fe:e8:a4:55:f9:f8:5c:84:82:55:c6:cd:c2:f7:58:27:5d:
         5c:17:62:ce:5b:c6:21:39:9c:25:e9:ce:f5:41:a9:39:93:03:
         16:07:ce:e4:08:96:66:46:0f:f2:e4:d6:67:75:5c:dc:40:e6:
         61:24:44:93:40:2b:b1:c3:14:80:13:7d:9a:80:8c:79:c6:be:
         03:52:d6:0e:3a:c3:dd:d4:9f:1c:e3:0e:de:4b:83:64:21:d1:
         8b:dc:47:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:33:04 2026 by rpki-client