Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
File:                     5_X6RuHGsFy_7JdpIQyxUUer4jE.mft (raw, json)
Hash identifier:          DcPwpm8kEMkId6ESLm+UJ0tz5bdt2JFZjuVAVwFw1mY=
Subject key identifier:   3D:FB:3E:E5:52:27:92:B4:0F:4B:E8:DF:E1:FD:EA:E0:92:B3:91:2F
Authority key identifier: E7:F5:FA:46:E1:C6:B0:5C:BF:EC:97:69:21:0C:B1:51:47:AB:E2:31
Certificate issuer:       /CN=e7f5fa46e1c6b05cbfec9769210cb15147abe231
Certificate serial:       01A0C5FBC976020BE3A507A0DBDE93ADBFDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
Manifest number:          19F4
Signing time:             Mon 21 Sep 2026 22:00:07 +0000
Manifest this update:     Mon 21 Sep 2026 22:00:07 +0000
Manifest next update:     Tue 22 Sep 2026 22:00:07 +0000
Files and hashes:         1: 5_X6RuHGsFy_7JdpIQyxUUer4jE.crl (hash: 39aPO3J3FeC+qSX0uB7ykX9uu0hA7Ctwd8McAp1enQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 22:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:fb:c9:76:02:0b:e3:a5:07:a0:db:de:93:ad:bf:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f5fa46e1c6b05cbfec9769210cb15147abe231
        Validity
            Not Before: Sep 21 22:00:07 2026 GMT
            Not After : Sep 22 22:00:07 2026 GMT
        Subject: CN=3dfb3ee5522792b40f4be8dfe1fdeae092b3912f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:33:6d:8e:4f:7b:ca:8d:4c:ce:85:25:4e:54:
                    d5:f1:17:61:61:03:82:fd:72:b6:b3:8a:da:9a:9a:
                    7c:84:9d:53:38:86:bf:54:c9:b0:3d:1d:8a:b4:40:
                    4f:55:47:45:5c:60:9f:bb:e5:49:e3:90:f6:45:54:
                    5f:5d:bc:62:a0:15:f8:2b:5b:4b:73:f5:94:e4:06:
                    10:69:79:bd:b1:3f:fc:ce:54:95:10:f1:0a:25:4a:
                    b3:3f:73:48:e3:1b:54:99:24:30:b4:ba:bd:21:10:
                    56:62:50:07:9d:38:32:cb:0c:6a:5f:2b:2a:2c:2a:
                    86:28:1e:d6:24:9f:df:90:57:27:6f:5a:e8:aa:e3:
                    ea:7a:a1:c1:6f:fa:32:64:32:51:fe:a6:47:cf:7c:
                    ad:88:df:40:33:58:f1:98:df:7e:97:5d:3a:0f:13:
                    ec:cf:9c:0a:4d:b2:40:c1:94:36:2c:51:49:36:19:
                    e1:ff:85:3f:4c:91:71:a3:05:ff:01:99:a8:65:56:
                    7c:25:fe:b6:50:56:ea:d4:a5:14:0f:e3:20:b0:d2:
                    b1:c5:50:51:1d:e7:44:5b:b9:a9:8f:99:c8:08:b2:
                    21:cd:a4:dd:e5:d6:b5:e9:69:0b:4d:64:e3:b6:f0:
                    00:d8:ad:ce:75:48:f1:92:1c:0a:65:3f:3f:10:be:
                    1b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:FB:3E:E5:52:27:92:B4:0F:4B:E8:DF:E1:FD:EA:E0:92:B3:91:2F
            X509v3 Authority Key Identifier:
                keyid:E7:F5:FA:46:E1:C6:B0:5C:BF:EC:97:69:21:0C:B1:51:47:AB:E2:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:f3:61:54:0e:5f:f6:a2:0d:df:5b:4a:c7:08:a8:d4:57:4c:
         fa:11:bc:23:3d:a9:c4:57:ee:db:9e:86:fa:7c:6f:eb:2d:8e:
         49:a9:f3:af:70:7f:5b:e4:90:26:1d:78:76:4d:92:e0:04:d6:
         ba:09:fa:be:34:0c:af:d9:d1:15:27:80:4d:70:2f:7d:8b:b9:
         cb:d4:9a:86:d9:03:ec:39:ff:81:ab:11:9d:1a:63:90:cf:72:
         65:2c:92:58:8b:f6:76:9b:41:7f:58:1d:3a:79:8c:c2:9c:8c:
         4e:22:4a:fd:fb:90:0a:b9:78:6b:32:ba:b1:bc:33:e8:cd:8e:
         41:b9:9d:4d:03:7b:cd:f7:fc:85:be:eb:58:df:bf:58:1e:18:
         0a:02:af:fb:18:c1:94:2d:52:72:ae:1e:17:27:5c:5f:c8:e6:
         f9:09:ba:c3:bc:55:08:91:0b:d6:0a:6a:73:dd:1c:0a:95:35:
         41:24:d0:cd:f0:5c:1c:c2:99:9a:d0:a3:aa:6b:e9:d3:9e:01:
         45:5a:18:6a:22:73:ed:5a:9a:78:5f:08:92:35:4d:22:b9:4e:
         7a:ed:50:e7:b3:17:16:45:67:64:d1:12:80:29:83:ab:91:1e:
         cc:56:43:e6:de:79:aa:4b:6b:8b:73:fd:f2:b7:f6:bc:cc:d3:
         e3:04:68:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:34:42 2026 by rpki-client