Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/19ebc7-5782-4c63-8814-74061fd36dc9/1/e25aru9TlinMasqMmqETMUq4UUU.mft
File:                     e25aru9TlinMasqMmqETMUq4UUU.mft (raw, json)
Hash identifier:          PDEv3yZiTSaG/XRKNfASAoVDZXfomGq2buiB4nUqOBo=
Subject key identifier:   96:43:9A:56:C8:0D:91:61:FD:CE:B6:D5:9E:87:08:5C:66:43:FE:0E
Authority key identifier: 7B:6E:5A:AE:EF:53:96:29:CC:6A:CA:8C:9A:A1:13:31:4A:B8:51:45
Certificate issuer:       /CN=7b6e5aaeef539629cc6aca8c9aa113314ab85145
Certificate serial:       01A0BD2FE79AD6C122BA2A0787F0FFDB5BB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e25aru9TlinMasqMmqETMUq4UUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/19ebc7-5782-4c63-8814-74061fd36dc9/1/e25aru9TlinMasqMmqETMUq4UUU.mft
Manifest number:          01FB
Signing time:             Sun 20 Sep 2026 05:00:28 +0000
Manifest this update:     Sun 20 Sep 2026 05:00:28 +0000
Manifest next update:     Mon 21 Sep 2026 05:00:28 +0000
Files and hashes:         1: e25aru9TlinMasqMmqETMUq4UUU.crl (hash: nqfGUxvGh+wfPCdvIG7b/f30BnomChz6Fq67UczdRvo=)
                          2: lzBvt8j7QjYQ1ElEK6XgDejWB_s.asa (hash: 5pT8OsSJlMwgdW//vHQ4jVWkbC26ni2BfE6UrfKD9fM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/19ebc7-5782-4c63-8814-74061fd36dc9/1/e25aru9TlinMasqMmqETMUq4UUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/19ebc7-5782-4c63-8814-74061fd36dc9/1/e25aru9TlinMasqMmqETMUq4UUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e25aru9TlinMasqMmqETMUq4UUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bd:2f:e7:9a:d6:c1:22:ba:2a:07:87:f0:ff:db:5b:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b6e5aaeef539629cc6aca8c9aa113314ab85145
        Validity
            Not Before: Sep 20 05:00:28 2026 GMT
            Not After : Sep 21 05:00:28 2026 GMT
        Subject: CN=96439a56c80d9161fdceb6d59e87085c6643fe0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ce:15:3f:74:8a:4e:cd:19:28:6f:64:cc:3f:
                    bd:8a:79:b9:af:e9:fb:49:38:87:20:82:48:01:9c:
                    d2:4d:13:dd:74:78:2d:4f:79:99:f7:4b:c2:29:41:
                    ba:51:cb:e9:d2:d3:4f:ef:f0:75:45:59:e6:e1:ce:
                    f4:fb:cb:30:20:76:09:15:dc:f4:b6:5f:3b:1b:db:
                    23:ee:a6:90:87:a2:c6:b3:3e:61:ac:5d:2c:55:26:
                    aa:c6:37:c4:92:d7:18:cd:97:51:97:4d:d2:00:cd:
                    c9:80:89:89:a8:20:a6:7b:44:b5:ef:89:55:70:eb:
                    95:32:4e:e2:80:db:0f:22:23:f2:78:b5:2e:3d:8e:
                    20:96:66:65:38:a9:09:a3:d5:cb:c7:f0:ad:0f:b3:
                    f3:9b:a0:10:d9:11:21:3b:b2:ca:90:b8:af:04:6b:
                    f5:d5:11:a2:a6:ff:c1:8c:ba:2a:a5:df:89:4d:a1:
                    69:93:ec:5a:36:0c:5b:70:83:41:17:7b:8c:eb:2b:
                    67:0c:28:28:ec:b8:6a:b6:2a:d8:5a:53:95:89:1a:
                    3c:ec:27:e5:22:49:07:18:a0:bf:86:39:c3:ad:5b:
                    5f:54:c3:cf:6b:b9:fa:41:fe:a3:59:0b:a2:64:e4:
                    51:d0:42:a4:ea:70:30:bb:ed:cd:00:e8:81:e8:76:
                    25:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:43:9A:56:C8:0D:91:61:FD:CE:B6:D5:9E:87:08:5C:66:43:FE:0E
            X509v3 Authority Key Identifier:
                keyid:7B:6E:5A:AE:EF:53:96:29:CC:6A:CA:8C:9A:A1:13:31:4A:B8:51:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e25aru9TlinMasqMmqETMUq4UUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/19ebc7-5782-4c63-8814-74061fd36dc9/1/e25aru9TlinMasqMmqETMUq4UUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/19ebc7-5782-4c63-8814-74061fd36dc9/1/e25aru9TlinMasqMmqETMUq4UUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:04:96:26:af:e3:46:5f:a6:7b:f9:6d:f5:77:69:cd:09:d0:
         27:18:be:8d:a4:ce:34:6a:ce:7a:b2:30:6c:11:f9:af:d4:1f:
         e4:c6:16:7a:64:69:8b:01:b1:55:9a:83:55:7d:33:2e:db:80:
         51:eb:26:39:6b:c9:d2:18:ad:37:74:34:ad:5d:56:44:d5:ac:
         6c:93:0b:fe:f3:a3:f7:51:c3:3b:32:97:ef:c7:84:13:d3:6b:
         8c:97:35:da:3e:1d:47:25:7b:86:05:ed:dc:09:5c:81:31:a3:
         24:58:ca:08:3f:5e:9f:43:9c:07:ac:58:91:1b:3c:df:48:1e:
         23:9e:54:57:28:7b:5c:9d:5a:0e:eb:aa:59:dc:13:82:6c:26:
         af:28:b4:bd:a5:91:ba:95:11:b4:e7:0e:91:d3:fa:61:29:e4:
         3e:8d:ce:62:3e:16:fc:63:48:a5:44:f5:d1:bf:86:3a:f4:03:
         07:8c:98:94:60:05:ce:ea:1d:a6:9a:1d:90:d6:8f:ea:80:ac:
         97:1c:83:3e:1b:d6:21:ed:54:21:06:e3:a2:df:25:b5:0c:26:
         cb:98:a7:06:9c:01:81:13:72:9a:53:ae:00:4a:7d:bb:d2:38:
         df:15:26:bd:c0:81:c4:60:63:88:49:e0:ac:de:69:d7:bf:b8:
         d3:01:70:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:20:35 2026 by rpki-client