Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
File:                     5gRDG1VUd8GaP0xcttEHNljVs-M.mft (raw, json)
Hash identifier:          J2w7wIe9T57pBhhTJ9gTtrsU1VIGn7w5XGAryYWcgMc=
Subject key identifier:   A1:36:A2:7B:BB:8C:20:46:BE:57:EA:DC:DC:59:A4:BD:B0:20:F1:7A
Authority key identifier: E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3
Certificate issuer:       /CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3
Certificate serial:       01A0C6A162B85A02A8462003FC44F2031E9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
Manifest number:          10A8
Signing time:             Tue 22 Sep 2026 01:01:00 +0000
Manifest this update:     Tue 22 Sep 2026 01:01:00 +0000
Manifest next update:     Wed 23 Sep 2026 01:01:00 +0000
Files and hashes:         1: 5gRDG1VUd8GaP0xcttEHNljVs-M.crl (hash: RBQaXD8wStWPifzoaMKDU7i9Uggc9byx0ssxXinbuQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:a1:62:b8:5a:02:a8:46:20:03:fc:44:f2:03:1e:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3
        Validity
            Not Before: Sep 22 01:01:00 2026 GMT
            Not After : Sep 23 01:01:00 2026 GMT
        Subject: CN=a136a27bbb8c2046be57eadcdc59a4bdb020f17a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:da:38:ef:e3:b8:1a:7e:7a:80:13:eb:5a:55:
                    93:4d:e6:12:7a:3c:c6:e0:19:44:ed:47:28:22:9b:
                    db:30:10:5c:46:56:cd:f4:eb:d8:e6:ba:fb:84:2d:
                    ca:4c:35:d3:16:45:38:3d:05:a3:6f:74:15:00:08:
                    a7:79:0a:f7:6f:b7:27:c5:f1:e3:b6:90:d7:44:04:
                    b2:ee:da:3f:9e:3b:e8:1c:3b:46:83:46:65:95:da:
                    e0:59:16:05:d0:7c:b4:e8:27:91:5b:d3:eb:b8:e6:
                    3c:b3:22:22:e3:ed:7d:54:e7:63:ff:1a:be:98:c4:
                    87:f1:96:b3:de:75:6e:f9:d6:92:79:72:7c:17:c2:
                    9b:c9:70:2d:dd:37:28:89:a9:1f:42:81:46:09:de:
                    48:6a:a8:c6:53:09:ef:46:7e:ff:39:1b:6e:d6:c7:
                    d9:e1:31:fe:f3:6e:4d:8f:98:a1:77:6b:d2:ea:e0:
                    37:d0:5c:f6:67:bd:ac:2c:cd:d0:ae:e9:27:d1:28:
                    d8:1d:3d:e2:d3:fe:5e:aa:a6:e0:04:29:60:37:55:
                    e3:6e:20:22:f7:dc:37:3a:d8:45:f5:8e:d1:a4:34:
                    55:4c:58:f9:2e:f8:e7:d1:5c:46:33:a6:6e:cd:7b:
                    7d:bd:47:b4:e9:21:20:e5:2d:89:d6:7c:a3:35:16:
                    49:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:36:A2:7B:BB:8C:20:46:BE:57:EA:DC:DC:59:A4:BD:B0:20:F1:7A
            X509v3 Authority Key Identifier:
                keyid:E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:d3:95:ff:b1:30:96:c4:c4:2b:b1:d2:12:da:78:21:b7:09:
         cf:0b:3c:a6:82:1a:ca:86:fa:06:48:44:51:b6:c7:ef:93:e2:
         17:ad:71:25:a0:55:0d:c2:3e:60:b4:8f:1c:93:86:c3:e4:b5:
         c4:61:b6:10:23:db:5f:dc:f8:c9:58:72:50:c0:f7:39:89:45:
         ab:ff:c4:39:56:17:ac:06:27:46:6f:a0:ea:e5:6b:89:a4:ed:
         98:b6:43:4c:3d:9c:74:19:c5:1c:29:42:83:a0:51:3b:92:81:
         78:74:86:72:55:a9:c8:ab:3f:ce:3b:98:a4:17:9d:e2:10:5f:
         37:5f:a6:be:ef:16:a0:6e:18:d0:31:f1:2e:50:5d:95:49:28:
         16:ce:bf:cd:f5:eb:17:34:e9:3c:1e:27:96:91:13:69:c2:d5:
         40:61:3d:ba:3f:be:e7:0d:1b:d1:18:4c:7a:9a:5f:51:6a:99:
         3f:da:68:f3:ff:d9:8a:21:59:6d:44:d0:4a:95:59:ef:2b:0d:
         6a:8f:34:1c:2d:45:ad:49:a8:eb:e2:3a:af:b6:ad:04:fa:a8:
         3c:b9:b4:39:90:c4:c5:b9:88:60:59:d6:e6:72:fd:4f:2c:8d:
         0c:07:f9:3a:4a:94:ea:e3:cf:c9:66:de:4b:98:46:a1:3c:fe:
         f1:82:e6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:48:01 2026 by rpki-client