Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
File:                     5318qB7lnVNFA7L3tj22K11ExW4.mft (raw, json)
Hash identifier:          ARPUi50CC8b2CXjGiPw6kPJcchsAi4N/B1HtApS/YyQ=
Subject key identifier:   A9:2A:F8:2B:C8:09:6D:D0:77:4C:B6:78:1D:B2:71:A5:65:59:C9:CA
Authority key identifier: E7:7D:7C:A8:1E:E5:9D:53:45:03:B2:F7:B6:3D:B6:2B:5D:44:C5:6E
Certificate issuer:       /CN=e77d7ca81ee59d534503b2f7b63db62b5d44c56e
Certificate serial:       01A0C40DC732F4FD6FD02CF44CC37C9DDC62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
Manifest number:          12CD
Signing time:             Mon 21 Sep 2026 13:00:32 +0000
Manifest this update:     Mon 21 Sep 2026 13:00:32 +0000
Manifest next update:     Tue 22 Sep 2026 13:00:32 +0000
Files and hashes:         1: 5318qB7lnVNFA7L3tj22K11ExW4.crl (hash: t01yTdEJ2ccrupBU4oXU+fcAu+YNK1mnFyAHAOvZhd8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:0d:c7:32:f4:fd:6f:d0:2c:f4:4c:c3:7c:9d:dc:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e77d7ca81ee59d534503b2f7b63db62b5d44c56e
        Validity
            Not Before: Sep 21 13:00:32 2026 GMT
            Not After : Sep 22 13:00:32 2026 GMT
        Subject: CN=a92af82bc8096dd0774cb6781db271a56559c9ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:eb:7c:4f:36:90:18:e7:85:6f:9e:e4:01:9b:
                    7b:ef:72:74:e2:f9:73:f8:7d:e0:d1:ee:fb:b7:65:
                    bb:6c:d2:8c:a7:73:50:4f:63:3d:35:d0:f4:be:63:
                    64:27:7c:f3:ca:cf:69:e2:80:38:04:f6:5c:d1:ee:
                    a8:8c:42:b8:ae:40:6c:e1:bc:0c:5f:b7:1a:8f:49:
                    01:4f:f2:f4:bd:8f:ce:70:51:82:8f:80:7d:00:c1:
                    2b:52:48:01:df:9c:23:27:32:c0:23:e3:2a:eb:4d:
                    45:5b:37:c1:56:ac:3e:a5:b2:21:83:41:7a:5f:1d:
                    54:80:b2:d4:9a:61:d0:3a:d9:5b:f6:ec:ea:a6:bd:
                    03:1e:66:87:33:8c:0f:89:2d:f9:cf:97:60:f4:cb:
                    69:7e:5d:26:6c:1a:02:c7:d6:83:ec:42:1e:5b:c4:
                    e2:11:cf:74:5d:f3:92:ae:dc:dd:5d:e3:a1:c7:2f:
                    c1:1a:99:a7:7a:96:7c:5f:e4:21:ff:de:bc:59:ee:
                    4a:1c:e0:9d:9d:14:cc:64:3d:08:35:54:80:51:f5:
                    32:bb:9f:5e:04:f5:00:b7:e5:8a:06:a7:34:6d:09:
                    82:62:dc:04:a6:39:a2:e7:73:f2:ff:40:ec:ef:b9:
                    23:22:16:a6:64:13:b1:e0:bc:8f:56:fb:a0:49:1e:
                    eb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:2A:F8:2B:C8:09:6D:D0:77:4C:B6:78:1D:B2:71:A5:65:59:C9:CA
            X509v3 Authority Key Identifier:
                keyid:E7:7D:7C:A8:1E:E5:9D:53:45:03:B2:F7:B6:3D:B6:2B:5D:44:C5:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:b7:01:b3:70:5a:e0:4f:42:fa:3a:e3:54:41:6c:31:6d:2b:
         ca:80:a4:af:dd:77:4e:83:af:75:07:86:64:f1:3c:30:80:f6:
         d9:f7:fe:4a:5a:93:e8:96:eb:17:67:21:c3:81:80:29:3c:dc:
         51:70:e0:11:4e:46:30:89:93:12:46:f1:c3:4a:14:fc:23:5a:
         a7:e0:b4:2c:74:a6:cf:61:7f:aa:38:2a:04:39:3e:ef:f5:d9:
         1d:21:7a:ab:a7:e0:6e:fa:91:c0:c3:d5:3d:33:b5:5c:a3:86:
         50:c0:28:01:26:7d:ff:12:e3:51:56:5f:cf:33:af:be:88:45:
         b4:0e:c7:25:65:59:f6:93:cc:81:08:5b:5a:c3:f7:8c:c6:4c:
         c4:a7:26:92:c2:17:46:28:81:d1:66:d8:de:fe:61:3a:9a:67:
         5f:3f:ca:e4:51:23:17:71:01:72:cc:9f:68:3c:95:95:be:0a:
         2f:33:d8:d2:43:91:f8:19:a4:2a:18:e9:3e:b5:2b:c7:68:84:
         ed:01:fc:af:b7:d1:42:ac:73:32:30:dd:53:b4:8e:47:85:9a:
         97:c2:6f:15:4a:49:cb:b4:a4:a9:f8:86:00:20:d7:ee:eb:0c:
         60:58:70:d7:da:3d:67:f3:79:d3:ec:a1:6d:9a:96:8b:0c:c8:
         a4:9a:22:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:58:08 2026 by rpki-client