Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
File:                     5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft (raw, json)
Hash identifier:          /05bSRtULjHBFKwreAk31eB11V7DZVcpQO4sH/Pac+0=
Subject key identifier:   81:1B:D3:E3:7D:2D:26:A3:7B:90:43:50:10:2D:BA:30:B7:EF:73:52
Authority key identifier: E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
Certificate issuer:       /CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Certificate serial:       01A0024A90DAF0F062951F822B34B6DC7299
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
Manifest number:          0F23
Signing time:             Fri 14 Aug 2026 22:00:36 +0000
Manifest this update:     Fri 14 Aug 2026 22:00:36 +0000
Manifest next update:     Sat 15 Aug 2026 22:00:36 +0000
Files and hashes:         1: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl (hash: Ec8gDvJbgDE8dsSGgl86DR2PpgyXHoshsJf+2QrdMMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4a:90:da:f0:f0:62:95:1f:82:2b:34:b6:dc:72:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
        Validity
            Not Before: Aug 14 22:00:36 2026 GMT
            Not After : Aug 15 22:00:36 2026 GMT
        Subject: CN=811bd3e37d2d26a37b904350102dba30b7ef7352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bf:ed:44:9a:3a:05:24:9f:f8:3d:a0:00:2d:
                    2d:57:d0:f0:12:4d:fe:94:e5:e3:85:57:2d:92:64:
                    b9:32:35:a9:e4:f7:5e:c9:2d:36:81:57:df:26:c9:
                    9e:72:b7:75:3c:dc:fb:27:c3:79:7e:f3:93:27:a9:
                    f5:45:59:7e:ad:62:ad:95:77:aa:d0:39:e0:9d:fb:
                    cb:d7:9d:0f:aa:55:e1:3f:5e:47:29:ca:5c:26:3f:
                    03:e7:6c:fe:58:ae:f8:51:aa:ae:a1:98:66:73:47:
                    0c:47:85:8d:97:2e:6b:78:93:27:20:88:18:cb:8e:
                    0f:12:93:48:39:55:82:7b:ff:5e:88:d7:c2:a7:ce:
                    12:8d:0f:2e:26:f1:dc:f5:f1:db:b7:6f:64:c1:d3:
                    e7:e0:c7:6b:7a:76:bb:da:17:d9:5c:70:66:d5:11:
                    42:05:7d:d1:41:e8:7f:cd:65:3a:a2:b1:48:71:55:
                    bd:3f:6a:73:88:d4:05:32:04:cf:9b:65:e0:dc:f8:
                    81:ab:9c:b4:fd:19:85:7e:51:ae:ce:02:0a:1e:41:
                    43:a2:bb:b9:04:f2:7c:d0:b6:83:14:7f:c5:83:41:
                    39:26:cd:4d:0b:bc:08:5b:b2:7e:ae:1e:0e:db:54:
                    6f:e0:ff:cd:f6:8f:04:55:07:1a:8d:03:5a:91:61:
                    4f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:1B:D3:E3:7D:2D:26:A3:7B:90:43:50:10:2D:BA:30:B7:EF:73:52
            X509v3 Authority Key Identifier:
                keyid:E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:a0:97:42:15:61:c3:48:db:79:94:36:23:b1:d4:6f:6e:a5:
         e8:e6:14:c4:a6:c7:13:79:bd:bb:80:ab:bb:95:a4:32:d8:eb:
         22:ee:e9:0e:4b:1c:93:1c:77:1c:53:f5:9a:1b:74:ac:52:19:
         d6:76:4c:ee:09:c1:bb:80:f2:d8:53:60:67:3e:1d:36:c0:60:
         7a:72:13:33:9c:d2:e1:ad:54:65:ad:a0:00:bf:88:30:b0:99:
         72:dd:c1:3a:bc:8d:58:05:34:dd:28:9c:6a:be:cb:cd:7c:f9:
         18:a0:ff:ac:3f:a0:a7:63:80:a2:3e:3b:44:13:89:7c:bd:09:
         de:de:80:20:dd:b4:74:77:06:8b:3f:ee:54:10:56:2d:9d:8d:
         00:94:19:4f:69:ec:0d:fd:6a:c8:c8:06:23:d1:ef:29:0c:f8:
         54:04:80:19:7f:af:77:65:8c:d3:23:9a:cd:2b:4f:94:81:46:
         e7:3a:cd:19:5d:ad:93:fe:11:f3:84:07:33:ab:d3:32:88:01:
         47:76:e2:01:b2:fb:a6:0d:49:a7:c0:f1:52:b8:2b:2a:ce:9c:
         77:5a:b7:11:5e:96:ae:dc:15:bb:1a:d4:98:c0:57:c9:ef:70:
         eb:05:59:5d:cb:26:87:25:38:72:89:3b:18:a9:96:76:99:83:
         53:2e:af:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:30:51 2026 by rpki-client