Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft
File:                     5i7oJCK3hJkSKWNhQEZJp__smOU.mft (raw, json)
Hash identifier:          l1fmMDpXYNUSh5r5om4XfK/RQwf/nOrLqE+v/44Y76E=
Subject key identifier:   AC:12:27:92:D9:A5:8C:61:A0:12:A4:2A:88:4F:D4:8B:A4:56:9B:9A
Authority key identifier: E6:2E:E8:24:22:B7:84:99:12:29:63:61:40:46:49:A7:FF:EC:98:E5
Certificate issuer:       /CN=e62ee82422b7849912296361404649a7ffec98e5
Certificate serial:       01A0C9D97AB6760DC09179EC4EF4FF4938DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5i7oJCK3hJkSKWNhQEZJp__smOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft
Manifest number:          1128
Signing time:             Tue 22 Sep 2026 16:01:08 +0000
Manifest this update:     Tue 22 Sep 2026 16:01:08 +0000
Manifest next update:     Wed 23 Sep 2026 16:01:08 +0000
Files and hashes:         1: 5i7oJCK3hJkSKWNhQEZJp__smOU.crl (hash: /fMhO5EZh04oAqNlUnZxY0L2Sh5+yNuh0aW+E73WHt0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5i7oJCK3hJkSKWNhQEZJp__smOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:d9:7a:b6:76:0d:c0:91:79:ec:4e:f4:ff:49:38:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e62ee82422b7849912296361404649a7ffec98e5
        Validity
            Not Before: Sep 22 16:01:08 2026 GMT
            Not After : Sep 23 16:01:08 2026 GMT
        Subject: CN=ac122792d9a58c61a012a42a884fd48ba4569b9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6a:24:a9:db:57:91:9b:fe:d2:58:f7:87:7b:
                    52:25:ca:ab:18:eb:f4:ad:0a:af:d8:a3:63:d9:2c:
                    6a:96:1b:d6:6f:ac:93:32:72:57:23:20:af:44:f4:
                    61:72:a5:54:a5:d2:18:0e:34:8c:7f:dd:a9:f0:5f:
                    cf:84:3b:ae:48:df:d5:8e:29:5a:fb:29:71:81:66:
                    7a:b1:56:45:b2:b3:39:ff:f8:3e:28:c5:b7:10:60:
                    19:79:2e:e3:83:d5:fa:b3:9c:8e:e1:f7:cc:e2:1e:
                    f9:f9:b7:02:99:74:b0:69:65:1a:9e:7d:12:f3:2e:
                    4b:22:6d:77:57:71:2c:d6:94:66:aa:e6:ff:7d:d0:
                    6b:22:ef:87:9a:23:a1:4d:ea:ec:30:97:cb:77:33:
                    ce:21:c3:c0:8c:fa:9f:b9:c6:4b:f8:bc:e3:e4:c4:
                    55:5e:28:a3:d0:66:d8:b7:b7:6b:37:3d:67:94:d9:
                    29:e5:e2:25:33:d8:c5:05:25:c9:05:92:1e:00:f1:
                    19:84:8f:0e:0e:5f:1f:42:34:1d:bf:e0:c1:06:d6:
                    78:2b:c3:a5:e6:90:d7:cb:34:36:04:de:c2:ff:a4:
                    7a:c0:fb:76:ad:a1:40:a9:65:2d:e0:23:b7:29:6f:
                    e8:cf:ed:15:de:51:b3:b1:e1:21:8e:66:f8:3f:5d:
                    9b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:12:27:92:D9:A5:8C:61:A0:12:A4:2A:88:4F:D4:8B:A4:56:9B:9A
            X509v3 Authority Key Identifier:
                keyid:E6:2E:E8:24:22:B7:84:99:12:29:63:61:40:46:49:A7:FF:EC:98:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5i7oJCK3hJkSKWNhQEZJp__smOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:3d:2f:2b:2e:9f:e6:54:fc:3b:a0:e9:fe:3d:7b:2a:f0:29:
         a3:28:cf:8c:e4:18:44:7d:a3:6b:ba:39:4a:a0:c2:a5:14:3e:
         58:01:29:d0:66:8f:20:35:df:61:97:81:63:b4:11:3e:7e:e2:
         3d:1d:cc:ae:6b:80:f3:9c:47:f6:33:72:fd:eb:fe:95:32:a3:
         81:23:a1:df:98:31:e0:be:0c:15:c2:a1:21:a2:51:94:8e:20:
         e2:30:79:91:b7:81:0a:6a:03:02:75:97:a0:16:39:11:cc:f7:
         4a:4d:5b:7c:8b:fc:e3:3d:95:76:67:90:a6:45:b5:f9:6b:5a:
         3b:0f:cb:94:e7:d9:d7:21:c1:39:2c:9e:98:d4:77:c5:cd:af:
         14:3a:89:3e:f4:c5:9b:37:bd:3d:55:6b:35:e0:e5:09:ae:76:
         1b:40:31:b4:dc:ee:31:bb:a6:ea:68:ac:19:a8:00:fd:9b:8d:
         12:48:b3:a9:ac:ba:c9:6c:f3:6b:61:45:f7:3e:b5:45:e5:a2:
         0c:9c:82:d3:64:e5:ea:6a:eb:cc:d8:7a:16:95:30:cb:cb:28:
         bb:ee:70:1a:11:0e:db:26:9c:b1:d7:ff:e4:e8:bb:e2:45:c9:
         73:94:64:8a:f9:8a:17:e1:f8:9a:91:14:81:67:b9:7d:f5:3a:
         9c:6a:76:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:54:30 2026 by rpki-client