Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
File:                     55rcKmJwJwixoO4N87TPkiiW3NY.mft (raw, json)
Hash identifier:          A3cDU6JG2Qhr+WgdvfPsatfN7ebshN1u6X6sDaJPD6w=
Subject key identifier:   4D:65:F6:38:44:18:6E:92:80:42:89:EA:67:A2:E7:9A:1F:FF:31:E2
Authority key identifier: E7:9A:DC:2A:62:70:27:08:B1:A0:EE:0D:F3:B4:CF:92:28:96:DC:D6
Certificate issuer:       /CN=e79adc2a62702708b1a0ee0df3b4cf922896dcd6
Certificate serial:       01A12A9F4C49DBCC0AB97B3103FAB5788E0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
Manifest number:          07E9
Signing time:             Sun 11 Oct 2026 11:00:45 +0000
Manifest this update:     Sun 11 Oct 2026 11:00:45 +0000
Manifest next update:     Mon 12 Oct 2026 11:00:45 +0000
Files and hashes:         1: 55rcKmJwJwixoO4N87TPkiiW3NY.crl (hash: AmeG8yb0l1s5+G4qRVAD2qGenGNBUhabxPHeIpFhpbA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 11:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2a:9f:4c:49:db:cc:0a:b9:7b:31:03:fa:b5:78:8e:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e79adc2a62702708b1a0ee0df3b4cf922896dcd6
        Validity
            Not Before: Oct 11 11:00:45 2026 GMT
            Not After : Oct 12 11:00:45 2026 GMT
        Subject: CN=4d65f63844186e92804289ea67a2e79a1fff31e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:67:6e:b0:7f:d2:fb:0c:86:fb:f8:36:8a:b7:
                    e2:36:2c:25:7d:1e:07:83:15:bf:0a:77:af:1d:7f:
                    d6:f1:07:f0:4e:6f:7b:5a:2e:60:60:d9:9c:e4:8e:
                    cd:b9:ea:2e:a0:52:9c:0e:f0:00:b1:0c:cc:28:25:
                    6c:75:54:eb:3b:68:b8:e2:2c:08:2b:23:f1:f5:31:
                    a8:b8:66:61:ee:07:f8:f5:54:2b:ed:aa:b8:65:a8:
                    f3:c8:77:96:e0:33:12:58:b5:97:17:0e:88:cb:85:
                    bf:af:12:2c:08:29:7b:05:29:8d:1a:c2:f8:fb:7f:
                    be:d0:c8:e3:40:5f:63:a1:24:2d:d1:f9:fc:91:61:
                    2a:bc:d8:b3:22:fa:7f:4f:2b:bf:8a:14:90:2a:d0:
                    df:63:3e:2e:c0:ae:4d:7c:32:36:a1:03:be:cb:9f:
                    ed:58:28:a6:34:00:ff:80:6a:d5:42:b4:71:37:39:
                    24:17:72:e7:a8:97:fe:db:a1:25:c2:fb:53:5c:e3:
                    b0:13:d0:a5:2e:26:55:e2:7c:80:0d:3b:44:e7:29:
                    30:11:2b:2d:ec:cb:ac:2b:dd:d0:c7:65:1f:6b:bd:
                    b8:fb:b3:4b:5e:3b:f3:38:cf:e8:21:61:1e:e0:c5:
                    8f:bd:58:1f:e3:e4:2d:aa:ad:97:8b:29:60:cf:29:
                    2b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:65:F6:38:44:18:6E:92:80:42:89:EA:67:A2:E7:9A:1F:FF:31:E2
            X509v3 Authority Key Identifier:
                keyid:E7:9A:DC:2A:62:70:27:08:B1:A0:EE:0D:F3:B4:CF:92:28:96:DC:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:44:95:5c:dc:a4:1f:48:d8:62:67:e0:0c:ce:d0:71:9c:9e:
         fa:25:be:55:b5:b2:f1:12:cd:b6:19:51:6c:d8:a3:9c:6d:a4:
         f9:ec:2f:47:4e:38:96:06:f8:6e:c2:f8:ba:9c:eb:4f:71:4f:
         7e:24:a1:42:0e:a9:63:9a:5e:8f:fa:9f:1b:05:36:6b:bd:77:
         cb:1d:64:3c:dd:91:78:d5:0d:86:67:9f:9f:b0:fc:b4:12:06:
         9a:c4:a9:8a:84:3d:ba:9e:a7:86:77:21:bf:7a:26:86:80:81:
         cd:33:93:f8:ec:33:7b:38:b1:e5:3e:1b:72:e7:de:c0:56:3f:
         70:7f:94:1c:56:e6:8c:a5:02:03:86:b4:4d:b4:d7:f9:ca:74:
         2f:2f:1a:d2:a4:99:88:9f:01:49:82:7a:89:0a:2f:35:f9:2a:
         ca:b4:df:e6:08:d0:22:88:e3:4d:1a:7e:08:71:c9:0a:cf:2a:
         26:dd:1e:00:ed:ff:48:a0:9c:a2:d7:53:6a:2a:a4:7d:ef:11:
         da:76:22:37:fc:d4:c6:0e:c5:35:d4:8d:c2:87:fb:ab:37:d3:
         36:b3:8b:19:76:e2:46:fb:dc:a9:50:80:6f:93:c7:2c:77:c0:
         0f:2f:d6:f9:43:fd:9c:24:4c:6b:c5:14:53:ea:eb:4d:a5:38:
         34:b2:11:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:41:29 2026 by rpki-client