Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/56lS7y1xM0iHgHhFONttuGLsBAg.mft
File:                     56lS7y1xM0iHgHhFONttuGLsBAg.mft (raw, json)
Hash identifier:          b5Wk6ooy04Hz8+gF07MRa8vpuUNBfiHslRw4volp9AE=
Subject key identifier:   98:74:D0:18:0E:71:0F:10:C6:C4:4C:97:D7:EB:03:65:8E:54:7B:31
Authority key identifier: E7:A9:52:EF:2D:71:33:48:87:80:78:45:38:DB:6D:B8:62:EC:04:08
Certificate issuer:       /CN=e7a952ef2d7133488780784538db6db862ec0408
Certificate serial:       01A0DD9794125F9019A50611635FF3E2870E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/56lS7y1xM0iHgHhFONttuGLsBAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/56lS7y1xM0iHgHhFONttuGLsBAg.mft
Manifest number:          EC
Signing time:             Sat 26 Sep 2026 12:01:33 +0000
Manifest this update:     Sat 26 Sep 2026 12:01:33 +0000
Manifest next update:     Sun 27 Sep 2026 12:01:33 +0000
Files and hashes:         1: 56lS7y1xM0iHgHhFONttuGLsBAg.crl (hash: xJ/i8urAVfiU0KCgXeQ5zI2Vr+K/r6LsP7HcLoLdtF8=)
                          2: f1R_KVw6pDr-4luASuZxDgTRs54.roa (hash: pyivi44WDU8Xyy/kj2UqLPdU3p7h7jqHwHgFp3gleyc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/56lS7y1xM0iHgHhFONttuGLsBAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/56lS7y1xM0iHgHhFONttuGLsBAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/56lS7y1xM0iHgHhFONttuGLsBAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dd:97:94:12:5f:90:19:a5:06:11:63:5f:f3:e2:87:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a952ef2d7133488780784538db6db862ec0408
        Validity
            Not Before: Sep 26 12:01:33 2026 GMT
            Not After : Sep 27 12:01:33 2026 GMT
        Subject: CN=9874d0180e710f10c6c44c97d7eb03658e547b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ce:ef:45:70:27:34:84:25:16:79:04:ad:68:
                    d3:0a:b2:b4:35:5f:54:9b:49:4b:7b:cc:18:8c:cc:
                    39:42:a4:cd:73:2d:f4:66:9e:a9:7d:79:ee:b6:8f:
                    09:0a:d7:0d:99:9a:50:f5:83:aa:b0:7b:ae:6d:8f:
                    e5:7a:91:6b:31:56:53:ce:bd:63:4a:ea:df:12:f0:
                    8a:85:06:a3:9e:eb:ba:e9:e7:0e:42:11:bf:9a:a3:
                    d1:30:33:b5:17:b0:ff:cb:c1:c6:aa:c0:7b:00:e4:
                    72:77:d1:66:ef:90:3e:50:53:52:a8:bd:cc:30:9b:
                    73:a0:79:3b:bc:de:c7:89:28:95:32:91:a5:bb:7b:
                    dc:c1:9e:e0:b7:c2:25:d3:fc:4e:e8:fc:a4:98:3a:
                    52:54:14:e7:61:61:2d:c6:fc:c5:ab:45:f1:fc:10:
                    db:f7:95:5a:1e:78:e5:bf:3a:93:0f:e8:61:6a:e0:
                    66:89:31:58:ba:6a:ca:52:e0:d7:11:a2:d2:7d:74:
                    28:79:14:fc:a4:60:01:76:f8:24:e2:1d:04:c7:99:
                    c1:19:40:65:70:df:e5:19:8b:da:a3:16:ea:c6:3b:
                    23:a3:f9:37:7f:d6:ac:9a:bb:68:86:96:f6:f7:84:
                    36:02:1a:e2:0b:f0:c8:1d:9c:95:97:68:37:db:c8:
                    8a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:74:D0:18:0E:71:0F:10:C6:C4:4C:97:D7:EB:03:65:8E:54:7B:31
            X509v3 Authority Key Identifier:
                keyid:E7:A9:52:EF:2D:71:33:48:87:80:78:45:38:DB:6D:B8:62:EC:04:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/56lS7y1xM0iHgHhFONttuGLsBAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/56lS7y1xM0iHgHhFONttuGLsBAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/56lS7y1xM0iHgHhFONttuGLsBAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:73:6a:39:e9:0e:1c:2c:56:76:39:88:6f:2f:95:68:ac:47:
         7a:b6:8b:cf:9f:3d:84:41:5c:12:0f:4c:dc:66:23:05:79:7a:
         5d:46:40:15:ce:d9:3f:7b:d4:f9:0a:21:ab:78:3d:f6:d6:1c:
         4d:0b:b3:32:53:c0:f5:7f:ee:c0:af:d8:df:1f:74:54:b4:5e:
         e0:96:10:62:ea:ae:0f:0a:b3:d9:0f:dd:88:5d:5b:2b:81:25:
         35:45:f6:7f:d6:2c:cb:fc:7d:ce:7e:c3:01:1b:41:7e:a5:62:
         c4:20:c7:9f:16:60:9f:7b:1d:11:a3:17:b7:00:e9:3b:4f:1a:
         80:fa:3a:d3:72:2e:9d:09:fb:d4:85:8d:f1:ab:61:e3:fe:d7:
         7c:db:1c:fc:c4:b4:52:73:0c:47:a6:c4:f3:66:f8:14:de:07:
         91:34:59:c9:72:7a:bb:27:bd:bb:1f:20:8d:7d:47:60:73:91:
         52:e2:a9:48:fa:77:dd:91:1d:75:59:f3:fa:e3:8c:bf:3e:76:
         b0:09:b6:c7:a9:5d:1e:ea:c5:c7:35:58:50:2a:c4:04:bc:2b:
         53:89:9b:e2:99:ab:06:27:e6:fa:e8:9f:d7:27:b9:dc:3a:d2:
         a2:38:55:f5:19:cc:d2:63:ac:9e:a7:55:fb:94:a9:88:44:8d:
         0d:12:3b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:00:44 2026 by rpki-client