Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
File:                     5UmH5s-8zliuDJbnZmqyGrPi4JA.mft (raw, json)
Hash identifier:          OpcY3SCYHYJIlkyl2o/VVeBObRFtjWZwIk0yUYhTOqI=
Subject key identifier:   81:13:5F:E7:6D:25:25:F2:1A:40:14:08:17:14:2E:37:7E:FA:46:74
Authority key identifier: E5:49:87:E6:CF:BC:CE:58:AE:0C:96:E7:66:6A:B2:1A:B3:E2:E0:90
Certificate issuer:       /CN=e54987e6cfbcce58ae0c96e7666ab21ab3e2e090
Certificate serial:       01A1408320F4D30383056DB32F59626C416A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
Manifest number:          0749
Signing time:             Thu 15 Oct 2026 17:01:37 +0000
Manifest this update:     Thu 15 Oct 2026 17:01:37 +0000
Manifest next update:     Fri 16 Oct 2026 17:01:37 +0000
Files and hashes:         1: 5UmH5s-8zliuDJbnZmqyGrPi4JA.crl (hash: HXViz9ThHN5IoKBRPglVqOdZAK08R8drOVJmWHSVwJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 16:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:83:20:f4:d3:03:83:05:6d:b3:2f:59:62:6c:41:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e54987e6cfbcce58ae0c96e7666ab21ab3e2e090
        Validity
            Not Before: Oct 15 17:01:37 2026 GMT
            Not After : Oct 16 17:01:37 2026 GMT
        Subject: CN=81135fe76d2525f21a40140817142e377efa4674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:92:b1:1a:03:b8:61:64:04:c4:7e:4a:2c:e8:
                    b1:66:7b:8d:0b:04:33:25:3c:b2:79:d2:b8:4b:32:
                    46:1f:99:3e:d9:75:10:1e:24:3f:b9:79:17:ae:3b:
                    db:6c:bf:ab:7e:3e:bc:3e:44:e4:23:f7:16:10:e7:
                    9e:35:0f:29:1b:37:9b:1b:60:d5:50:b3:e5:16:c7:
                    ca:f9:fc:89:87:ec:c2:0b:6c:41:6c:8d:33:4f:27:
                    4b:a5:a0:84:36:72:09:38:3a:d6:1e:15:1e:a9:c1:
                    b7:bb:17:05:a6:7a:5f:07:a6:46:6d:17:e6:00:62:
                    a5:99:5a:6b:d6:9f:14:54:bc:21:9f:3d:66:71:08:
                    2d:9b:2e:51:6a:ec:1f:df:40:b6:5a:1f:0d:9f:6e:
                    59:5c:b2:11:9f:6a:6a:87:3a:2b:a2:08:e7:11:ee:
                    6c:99:cb:3f:60:e7:46:05:64:9e:a6:5c:72:50:9c:
                    2a:74:a2:d6:c4:c7:7c:4a:68:be:b7:82:d3:be:d4:
                    7b:48:e1:31:ea:fc:21:c1:d1:6e:21:a3:cc:c8:ca:
                    ab:41:f1:ad:c5:44:23:d0:99:48:cf:a3:00:31:88:
                    a2:b7:2a:7e:7f:15:87:e5:7f:e2:f4:28:5f:84:cb:
                    37:64:77:7a:ef:19:35:7e:9e:13:31:6b:25:4f:ed:
                    60:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:13:5F:E7:6D:25:25:F2:1A:40:14:08:17:14:2E:37:7E:FA:46:74
            X509v3 Authority Key Identifier:
                keyid:E5:49:87:E6:CF:BC:CE:58:AE:0C:96:E7:66:6A:B2:1A:B3:E2:E0:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:44:a9:9d:37:79:44:4b:1b:33:3f:23:71:81:45:85:12:09:
         e5:2f:35:4d:84:52:26:22:18:94:80:33:db:91:98:9f:09:e1:
         65:3c:ce:f1:17:03:89:d2:2e:97:ca:a3:83:f1:2c:56:92:68:
         b9:af:a4:59:68:d7:8c:62:1c:0f:ae:3b:d2:d7:eb:ea:af:96:
         fc:f2:8e:b9:a2:4c:1d:28:92:a5:c8:ec:33:59:d2:97:6d:a2:
         e4:70:9c:44:2c:ec:05:83:ba:3d:42:d2:97:d2:b0:64:53:76:
         8a:48:9b:15:e2:14:87:d5:d2:03:7a:65:e9:4c:9a:ce:8b:2b:
         4a:af:e7:3d:e4:56:e0:ae:e8:d0:22:e7:11:88:29:36:6a:06:
         bb:bd:01:68:0a:58:54:7a:a7:55:bf:e2:75:55:5a:1b:93:93:
         02:6f:ee:e4:8b:3e:a4:30:68:1c:e1:74:54:2b:d0:42:33:c9:
         5c:37:92:32:04:da:ae:13:c5:aa:5e:99:8e:a0:a4:09:61:ab:
         e7:57:0b:49:09:0a:ed:5a:c3:8f:6c:a2:e9:a0:6d:a0:12:91:
         0b:e3:4a:08:9d:c9:f2:18:e1:15:6d:a8:8c:8a:ac:ea:f4:28:
         c3:2d:87:df:a2:09:df:a4:8e:b6:da:97:90:29:15:2e:d5:a8:
         0b:3f:d4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:57:50 2026 by rpki-client