Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/5HbpsSF9PIXySHce9G2zprVr-EY.mft
File:                     5HbpsSF9PIXySHce9G2zprVr-EY.mft (raw, json)
Hash identifier:          kGrVWGTZDnNCmar4rXxbAvnDypP0TPD2EmIhsXfvszM=
Subject key identifier:   1E:B9:0A:C3:B6:F1:5C:96:73:7F:DA:C4:0A:FC:CA:E5:C1:C4:DA:4B
Authority key identifier: E4:76:E9:B1:21:7D:3C:85:F2:48:77:1E:F4:6D:B3:A6:B5:6B:F8:46
Certificate issuer:       /CN=e476e9b1217d3c85f248771ef46db3a6b56bf846
Certificate serial:       01A040F348B8B0CE8F14620B4930AFD57150
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5HbpsSF9PIXySHce9G2zprVr-EY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/5HbpsSF9PIXySHce9G2zprVr-EY.mft
Manifest number:          01AD
Signing time:             Thu 27 Aug 2026 02:01:20 +0000
Manifest this update:     Thu 27 Aug 2026 02:01:20 +0000
Manifest next update:     Fri 28 Aug 2026 02:01:20 +0000
Files and hashes:         1: 5HbpsSF9PIXySHce9G2zprVr-EY.crl (hash: O3xPSURT9Es/HUytnp/OTu2ioSaL4jLBOP9s1rGWK0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/5HbpsSF9PIXySHce9G2zprVr-EY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/5HbpsSF9PIXySHce9G2zprVr-EY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5HbpsSF9PIXySHce9G2zprVr-EY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:f3:48:b8:b0:ce:8f:14:62:0b:49:30:af:d5:71:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e476e9b1217d3c85f248771ef46db3a6b56bf846
        Validity
            Not Before: Aug 27 02:01:20 2026 GMT
            Not After : Aug 28 02:01:20 2026 GMT
        Subject: CN=1eb90ac3b6f15c96737fdac40afccae5c1c4da4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:09:49:94:5c:18:6b:82:16:63:54:bb:22:6c:
                    70:06:8c:99:91:dc:46:8a:4c:56:d9:1c:66:c8:32:
                    f5:93:c2:29:e0:58:09:cd:7b:56:cc:ac:b7:97:54:
                    b8:75:37:35:fd:dc:1e:25:98:76:58:8b:53:50:8c:
                    38:20:ff:6d:09:3f:95:af:96:23:e9:f4:31:67:78:
                    07:c3:19:0f:cb:5f:23:54:a0:12:f1:d5:dd:5a:19:
                    46:99:2b:5e:68:6c:b8:9f:44:21:f8:14:2e:07:94:
                    7d:6f:3d:d6:a0:76:d0:a6:35:95:a8:bd:07:e8:fd:
                    72:01:61:bb:ec:18:70:2a:4f:14:f4:e7:d3:ba:57:
                    2b:d2:86:d5:24:79:f6:77:e6:9e:33:f5:5e:26:a5:
                    be:89:35:be:4a:ec:c3:59:d8:da:e9:ae:6e:40:e3:
                    77:d2:f7:ea:92:b4:40:7c:0a:90:f7:24:45:8c:15:
                    ea:e5:0a:1d:23:28:df:8e:0a:33:a2:9f:b9:52:93:
                    85:86:e9:1d:fa:d4:5c:34:bc:ac:11:1b:14:d5:fd:
                    a8:e7:6c:a5:c5:4f:09:70:d2:b7:d6:c5:57:79:36:
                    6e:57:39:21:3e:e2:e2:90:61:3c:5e:25:8d:09:dc:
                    0e:62:6f:e9:93:65:69:f0:cf:ae:ea:29:4a:ab:c7:
                    06:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B9:0A:C3:B6:F1:5C:96:73:7F:DA:C4:0A:FC:CA:E5:C1:C4:DA:4B
            X509v3 Authority Key Identifier:
                keyid:E4:76:E9:B1:21:7D:3C:85:F2:48:77:1E:F4:6D:B3:A6:B5:6B:F8:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HbpsSF9PIXySHce9G2zprVr-EY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/5HbpsSF9PIXySHce9G2zprVr-EY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/5HbpsSF9PIXySHce9G2zprVr-EY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:19:64:29:a4:58:f1:1b:64:8a:0e:06:d2:18:a7:9d:0c:76:
         a1:5b:70:8b:e7:12:c3:7a:23:e0:c4:86:aa:13:18:73:d1:3b:
         8e:01:7f:34:20:3f:de:67:bc:9d:d8:40:31:be:95:3c:54:eb:
         54:ee:7c:7f:6c:73:d4:83:0e:9d:0d:36:cf:59:98:b1:fe:87:
         04:08:f1:9f:e9:3f:83:3b:52:15:04:27:f1:75:be:d6:e7:e5:
         79:27:92:98:f4:3a:b3:d2:5e:59:ed:a2:42:b8:aa:bf:2b:2a:
         a3:f8:b2:03:32:a7:84:f4:b9:07:c9:05:3a:d2:e4:68:01:d0:
         35:63:8a:b1:8e:87:eb:2a:20:fd:a2:43:e4:2d:64:48:84:51:
         92:e1:7f:9f:b4:1f:20:f7:f1:27:7b:d7:cf:f6:ce:e3:88:f2:
         69:0c:cc:48:e8:ee:12:d3:f7:ed:95:fb:68:4d:ec:3e:6f:2a:
         2c:db:0b:2e:3f:2b:38:71:46:aa:98:50:2f:11:85:d7:98:67:
         9b:eb:e1:f0:0b:0f:e4:f5:ad:df:23:80:c6:a6:fb:65:cc:92:
         0b:2e:07:2b:ea:60:fc:b1:8a:fb:1b:7b:81:d7:ac:df:4d:27:
         8f:3d:dc:83:29:04:59:cb:05:81:20:0f:d7:1e:a6:8d:0b:c6:
         15:4d:42:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:51:34 2026 by rpki-client