Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
File:                     54CVVajwXwQLRfmuycPvVaG6kz0.mft (raw, json)
Hash identifier:          EtPUm0r8NoPm4nCRl7+mn5QtHTIa1EBQ3C7+YV4DH0g=
Subject key identifier:   E6:0A:B0:B6:FE:7D:0D:36:32:1F:7B:EE:F6:32:40:BE:BE:EA:F6:4B
Authority key identifier: E7:80:95:55:A8:F0:5F:04:0B:45:F9:AE:C9:C3:EF:55:A1:BA:93:3D
Certificate issuer:       /CN=e7809555a8f05f040b45f9aec9c3ef55a1ba933d
Certificate serial:       01A13ECB88F03232A3DFE3A40804454A8DFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
Manifest number:          0879
Signing time:             Thu 15 Oct 2026 09:01:28 +0000
Manifest this update:     Thu 15 Oct 2026 09:01:28 +0000
Manifest next update:     Fri 16 Oct 2026 09:01:28 +0000
Files and hashes:         1: 54CVVajwXwQLRfmuycPvVaG6kz0.crl (hash: gmTMAbaWM7DSBfuEG+GuMn8Mvi8FCn9efTc5/N48ckM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:cb:88:f0:32:32:a3:df:e3:a4:08:04:45:4a:8d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7809555a8f05f040b45f9aec9c3ef55a1ba933d
        Validity
            Not Before: Oct 15 09:01:28 2026 GMT
            Not After : Oct 16 09:01:28 2026 GMT
        Subject: CN=e60ab0b6fe7d0d36321f7beef63240bebeeaf64b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c6:2d:0e:46:8d:5f:ab:8e:5a:81:c2:21:1d:
                    83:16:87:a9:b8:3a:e1:5e:1b:b1:6a:f3:b5:f4:11:
                    fd:4a:3b:df:e6:94:73:d4:73:e2:af:35:53:0c:62:
                    12:41:8a:9b:31:89:5a:7f:58:cc:0b:35:a8:9b:a2:
                    00:ef:7f:af:b5:db:68:47:97:1a:18:ae:a2:bf:2d:
                    1a:5c:89:e6:75:df:2b:0b:a4:b7:42:a4:90:e1:b2:
                    60:ac:bc:2b:e5:e0:61:b6:c7:d7:bc:7b:8d:f4:62:
                    89:e4:ac:4c:27:5a:ab:79:96:b4:82:63:70:fd:a7:
                    e7:97:09:4a:0e:be:87:5a:4f:62:63:aa:c3:99:18:
                    8b:79:43:d8:2c:ec:d3:5c:f7:97:de:14:dc:df:22:
                    f5:df:df:5e:ba:ff:e1:e1:a2:fb:13:a6:b0:fe:67:
                    ed:87:40:5e:18:08:34:81:f6:45:5a:cc:98:c7:b6:
                    1e:8f:e2:19:0b:a6:d8:4b:11:79:d9:b5:8a:42:80:
                    59:c6:0c:4e:9c:a8:9a:c8:41:30:00:00:71:a9:79:
                    af:c4:7a:95:dd:87:91:4d:71:ce:65:79:2e:78:8a:
                    db:b8:85:22:2e:0f:e0:dd:d8:91:2f:a3:e7:7f:9d:
                    d1:68:df:0d:da:8c:68:2f:86:be:4f:d4:05:35:45:
                    4f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:0A:B0:B6:FE:7D:0D:36:32:1F:7B:EE:F6:32:40:BE:BE:EA:F6:4B
            X509v3 Authority Key Identifier:
                keyid:E7:80:95:55:A8:F0:5F:04:0B:45:F9:AE:C9:C3:EF:55:A1:BA:93:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:13:0d:46:99:82:11:ff:4c:ad:d7:bf:7c:03:e5:de:df:84:
         1a:3f:11:d1:03:5c:e4:d1:1f:f5:0b:f9:ce:83:60:0b:98:6a:
         19:2f:ef:84:da:d5:88:6f:63:c8:d8:44:bf:f5:44:a4:db:40:
         d6:e4:5d:31:73:b6:44:32:22:80:35:31:6d:11:a5:9c:d1:14:
         86:c5:3c:38:05:4d:c8:4f:26:21:1d:c1:d8:ae:36:38:8f:00:
         c1:a1:75:07:02:51:9f:ad:56:e2:9e:cd:9f:50:e0:6a:3b:3e:
         90:dc:1d:f2:ef:f0:41:9f:4a:78:c7:25:b8:c4:ec:c7:56:fe:
         62:54:b6:51:59:a8:40:eb:ea:9a:ac:f4:e6:00:ee:a5:5b:45:
         84:43:aa:cb:6b:92:55:a4:dd:e3:5b:f1:8a:cf:e4:ce:75:95:
         1d:b6:07:36:56:43:45:01:99:b5:bb:55:dc:29:d7:1f:7f:fb:
         8f:ed:e0:cd:67:b1:16:4b:1b:69:37:fb:e2:5f:e1:33:9a:e0:
         bc:a6:e1:e6:e5:22:fc:15:b4:ef:61:3a:92:56:c5:0e:d9:58:
         fb:8e:1b:4f:da:e5:ec:44:1b:27:d8:13:e7:10:ce:ef:db:22:
         a0:bf:d9:a7:70:c1:00:c9:15:bf:b8:ad:99:ce:90:7b:af:84:
         f4:ae:c5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:46:54 2026 by rpki-client