Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
File:                     5llE5PrhnBWib8tfJzL_G6I9NU0.mft (raw, json)
Hash identifier:          dG0aLcZaBp2yW5HZJh6ZjhBgtXXGnB/WZyBrs11LPO4=
Subject key identifier:   26:67:4A:65:03:13:71:FC:AF:E1:82:C8:AF:E1:AC:E1:82:43:D6:67
Authority key identifier: E6:59:44:E4:FA:E1:9C:15:A2:6F:CB:5F:27:32:FF:1B:A2:3D:35:4D
Certificate issuer:       /CN=e65944e4fae19c15a26fcb5f2732ff1ba23d354d
Certificate serial:       01A140153E27577BF5A919445F1E0B401AB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
Manifest number:          0764
Signing time:             Thu 15 Oct 2026 15:01:36 +0000
Manifest this update:     Thu 15 Oct 2026 15:01:36 +0000
Manifest next update:     Fri 16 Oct 2026 15:01:36 +0000
Files and hashes:         1: 5llE5PrhnBWib8tfJzL_G6I9NU0.crl (hash: fiRgSSBYavvDbVXT9FPkTMJtkB/RWPloldwCNljkRcg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 15:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:15:3e:27:57:7b:f5:a9:19:44:5f:1e:0b:40:1a:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e65944e4fae19c15a26fcb5f2732ff1ba23d354d
        Validity
            Not Before: Oct 15 15:01:36 2026 GMT
            Not After : Oct 16 15:01:36 2026 GMT
        Subject: CN=26674a65031371fcafe182c8afe1ace18243d667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2a:c5:be:20:02:ba:69:92:29:77:d2:ba:9a:
                    bb:fa:cb:ad:9e:16:4c:5a:ea:74:74:4d:65:da:f1:
                    5a:d6:bb:b0:f9:2a:2b:d1:05:0c:c8:74:9a:30:1c:
                    35:a7:ac:bd:b8:3f:50:03:aa:a6:e6:ec:ce:3a:c0:
                    b7:8e:03:cc:ec:7a:d3:e6:f0:51:c0:19:ed:32:00:
                    b0:1b:91:b7:17:49:5e:80:94:ac:c6:91:38:14:b8:
                    e8:02:d6:de:d7:ca:0b:a7:66:f2:42:20:34:43:d9:
                    04:5a:46:6b:c8:15:d1:26:c2:3e:22:c4:05:e9:99:
                    0c:c0:e4:68:77:f7:cf:ff:8f:d3:fd:c0:f9:87:7a:
                    ef:e2:c3:e9:62:b5:aa:4e:45:f4:51:4b:a1:36:b3:
                    d8:a9:b8:b5:09:81:26:c9:15:1d:64:b4:ea:93:10:
                    9f:f2:ce:82:0c:31:c9:ee:2f:66:5e:f6:57:6f:b1:
                    02:d0:8c:ca:16:af:b0:83:f1:4e:75:ba:4d:8d:fc:
                    9a:85:e2:43:da:4f:06:57:f1:1e:5f:48:f1:8f:8e:
                    fb:aa:15:06:82:26:6a:48:a6:01:ef:2a:7e:7c:95:
                    41:2d:b5:0f:33:42:68:4c:cd:f8:17:b5:a0:20:6b:
                    62:d7:9e:37:60:02:63:f8:79:3e:6c:58:f5:eb:63:
                    26:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:67:4A:65:03:13:71:FC:AF:E1:82:C8:AF:E1:AC:E1:82:43:D6:67
            X509v3 Authority Key Identifier:
                keyid:E6:59:44:E4:FA:E1:9C:15:A2:6F:CB:5F:27:32:FF:1B:A2:3D:35:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:9e:b0:11:a1:7a:71:52:e3:9d:18:bf:a7:d4:74:be:b5:d7:
         31:c8:4e:e9:77:be:73:e7:6a:9c:22:b1:36:0e:88:7b:8b:47:
         4e:9a:6f:ce:f7:e0:f8:8f:17:4f:e3:58:0e:f1:3a:dd:c5:c3:
         28:ff:0a:ae:de:98:ca:48:9e:21:88:dd:c4:19:a8:6b:59:12:
         1f:97:83:d5:3c:86:72:2a:b3:ab:e9:d2:25:65:95:b9:6d:3a:
         89:f0:13:88:ce:d6:7e:98:83:82:03:49:e7:ec:d3:78:d8:74:
         8b:99:c1:53:7a:62:8e:86:35:bd:a5:fa:2b:d6:7f:95:c1:83:
         03:1a:a6:a0:ec:47:94:8a:a8:cc:08:92:2a:07:a4:14:e0:8e:
         ec:23:20:5c:91:d9:0f:41:bf:bc:46:ad:f0:4d:c7:25:71:48:
         39:37:f2:2d:ba:62:97:5f:a5:d5:07:17:46:39:92:c4:14:f3:
         08:59:97:4f:63:5c:21:03:96:4b:cd:fb:80:59:db:85:dd:26:
         1e:45:94:8b:97:da:16:21:75:7c:94:c4:39:7c:9d:72:f8:e4:
         c0:b5:d1:61:45:04:27:85:cb:f1:8b:6e:03:fd:04:ac:64:ca:
         4a:38:00:8f:94:3f:22:70:8f:4a:cd:b3:13:cd:49:cd:cc:fc:
         be:58:c4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:25:45 2026 by rpki-client