Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
File:                     5JlaSpG8KcjX7RBKA4QBmk_lng4.mft (raw, json)
Hash identifier:          CeA42ldq6EITm37Ffq5paLJqbzJ09H7Yn5SOzxNb6tI=
Subject key identifier:   81:36:15:60:5B:98:F0:13:47:79:AF:30:D6:1C:E2:83:A4:F3:98:1E
Authority key identifier: E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E
Certificate issuer:       /CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
Certificate serial:       01A0C7EA7A372ACBF46A13BD0AD6D0072BDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
Manifest number:          0DAE
Signing time:             Tue 22 Sep 2026 07:00:27 +0000
Manifest this update:     Tue 22 Sep 2026 07:00:27 +0000
Manifest next update:     Wed 23 Sep 2026 07:00:27 +0000
Files and hashes:         1: 5JlaSpG8KcjX7RBKA4QBmk_lng4.crl (hash: hlRhMDbgHvZ0zTbrq7vvulVAxn+r5XID6DoDvK8BmZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:ea:7a:37:2a:cb:f4:6a:13:bd:0a:d6:d0:07:2b:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
        Validity
            Not Before: Sep 22 07:00:27 2026 GMT
            Not After : Sep 23 07:00:27 2026 GMT
        Subject: CN=813615605b98f0134779af30d61ce283a4f3981e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:50:1c:30:68:ef:41:01:65:a9:65:da:9e:3b:
                    ae:eb:ee:59:0d:6f:75:75:8e:41:9b:48:2d:df:59:
                    cc:f2:02:7a:fd:69:95:4f:90:cf:2d:48:d7:77:01:
                    51:8d:df:5a:9b:c1:7e:7f:64:cb:a0:bc:d6:32:39:
                    57:3f:45:67:1b:0b:6c:5f:79:7f:65:a5:bd:dd:a5:
                    d3:93:7a:6c:c9:ca:28:ea:75:c2:d0:48:db:ea:47:
                    9f:a3:8b:76:c1:9c:f5:41:ee:6f:93:e4:ef:d9:75:
                    0f:fe:2c:cc:83:73:63:c2:84:74:8a:da:28:75:44:
                    b7:ae:19:db:d4:42:c2:ee:56:3f:21:fd:f5:3d:db:
                    84:9d:62:88:6e:13:18:44:fd:11:6b:fb:47:06:81:
                    90:b3:63:a8:71:b1:98:05:6c:a5:e1:dc:d0:ad:0d:
                    63:01:64:ba:a0:1a:2e:be:87:cc:e8:c0:9e:05:5c:
                    0b:a5:d9:a6:c6:97:05:02:dd:ee:6b:df:cf:d9:ba:
                    b4:f1:f3:dc:27:2c:8d:15:96:41:0d:a5:5f:d7:50:
                    81:ea:15:0b:8b:d6:87:7d:f6:8f:fb:45:fc:42:cc:
                    4f:fc:a0:96:61:58:ed:2e:9e:52:66:93:73:23:40:
                    d5:91:e9:e6:df:da:aa:52:b6:07:42:62:91:7d:38:
                    28:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:36:15:60:5B:98:F0:13:47:79:AF:30:D6:1C:E2:83:A4:F3:98:1E
            X509v3 Authority Key Identifier:
                keyid:E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:24:40:31:35:d6:8b:fd:67:b6:c2:c6:5f:6b:5e:8f:e7:af:
         27:b4:35:88:f6:55:48:ff:4e:92:c1:d8:98:ce:95:8e:ef:e6:
         02:bf:c6:17:72:7b:8a:9f:b0:f4:1d:90:5b:f3:10:8c:6d:35:
         cd:51:73:ab:d2:b0:94:01:bf:9d:dd:29:cc:75:12:25:2f:56:
         b2:f9:76:cb:9f:ab:3c:5b:77:0e:23:e2:bc:27:13:b6:49:8c:
         d9:9a:ff:af:00:98:31:bf:8f:90:8e:27:0a:7b:7e:44:d0:76:
         e5:57:9b:9d:b1:c3:01:e1:76:76:01:78:40:32:3c:c0:f9:a1:
         f1:99:74:0d:fb:da:d3:d5:1f:43:c1:12:58:1a:4b:73:a8:a8:
         94:20:70:48:35:ca:33:a6:c3:73:ee:1d:57:2d:94:5f:5e:a9:
         7c:1d:eb:bc:21:26:e0:6e:c0:ce:8e:79:2e:76:2d:39:00:4e:
         c9:2f:2c:90:c0:2b:50:58:c4:d1:cc:f0:b3:72:bb:75:0a:12:
         a1:ec:81:a2:9e:28:ed:db:5f:93:e1:d9:48:46:2a:5a:74:32:
         b8:cf:90:15:73:99:77:63:41:9c:f1:62:f3:85:7f:73:85:ad:
         32:5d:27:a8:30:47:ff:d0:f2:61:c1:cf:62:85:33:b3:e6:52:
         56:27:ed:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDH6no3Ksv0ahO9CtbQByvbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0OTk1YTRhOTFiYzI5YzhkN2VkMTA0YTAzODQwMTlhNGZl
NTllMGUwHhcNMjYwOTIyMDcwMDI3WhcNMjYwOTIzMDcwMDI3WjAzMTEwLwYDVQQD
Eyg4MTM2MTU2MDViOThmMDEzNDc3OWFmMzBkNjFjZTI4M2E0ZjM5ODFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31AcMGjvQQFlqWXanjuu6+5ZDW91
dY5Bm0gt31nM8gJ6/WmVT5DPLUjXdwFRjd9am8F+f2TLoLzWMjlXP0VnGwtsX3l/
ZaW93aXTk3psycoo6nXC0Ejb6kefo4t2wZz1Qe5vk+Tv2XUP/izMg3NjwoR0itoo
dUS3rhnb1ELC7lY/If31PduEnWKIbhMYRP0Ra/tHBoGQs2OocbGYBWyl4dzQrQ1j
AWS6oBouvofM6MCeBVwLpdmmxpcFAt3ua9/P2bq08fPcJyyNFZZBDaVf11CB6hUL
i9aHffaP+0X8QsxP/KCWYVjtLp5SZpNzI0DVkenm39qqUrYHQmKRfTgoHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIE2FWBbmPATR3mvMNYc4oOk85geMB8GA1UdIwQY
MBaAFOSZWkqRvCnI1+0QSgOEAZpP5Z4OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUpsYVNwRzhLY2pYN1JCS0E0UUJta19sbmc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9kZWY5YzctZjNlNS00MmY3LThkZWYt
OWRmNGJiMThmYjA2LzEvNUpsYVNwRzhLY2pYN1JCS0E0UUJta19sbmc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9kZWY5YzctZjNlNS00MmY3LThkZWYtOWRmNGJiMThmYjA2
LzEvNUpsYVNwRzhLY2pYN1JCS0E0UUJta19sbmc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArCRAMTXW
i/1ntsLGX2tej+evJ7Q1iPZVSP9OksHYmM6Vju/mAr/GF3J7ip+w9B2QW/MQjG01
zVFzq9KwlAG/nd0pzHUSJS9Wsvl2y5+rPFt3DiPivCcTtkmM2Zr/rwCYMb+PkI4n
Cnt+RNB25VebnbHDAeF2dgF4QDI8wPmh8Zl0Dfva09UfQ8ESWBpLc6iolCBwSDXK
M6bDc+4dVy2UX16pfB3rvCEm4G7Azo55LnYtOQBOyS8skMArUFjE0czws3K7dQoS
oeyBop4o7dtfk+HZSEYqWnQyuM+QFXOZd2NBnPFi84V/c4WtMl0nqDBH/9DyYcHP
YoUzs+ZSViftNA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:31:38 2026 by rpki-client