Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft
File:                     5i7oJCK3hJkSKWNhQEZJp__smOU.mft (raw, json)
Hash identifier:          WEGsvKBhz/3KPQv2top/rQFWNdp3OhBm3yTlmYfOtmc=
Subject key identifier:   78:EE:7F:13:65:74:CA:17:98:73:A2:93:43:5E:77:D9:58:0C:EA:BE
Authority key identifier: E6:2E:E8:24:22:B7:84:99:12:29:63:61:40:46:49:A7:FF:EC:98:E5
Certificate issuer:       /CN=e62ee82422b7849912296361404649a7ffec98e5
Certificate serial:       01A00101D7D4695BF151C5AF45AD93E30507
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5i7oJCK3hJkSKWNhQEZJp__smOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft
Manifest number:          10C0
Signing time:             Fri 14 Aug 2026 16:01:33 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:33 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:33 +0000
Files and hashes:         1: 5i7oJCK3hJkSKWNhQEZJp__smOU.crl (hash: rKmr59UHTeXYO+YvaNxwlZCDVmsLaX/kRqRjvwCcD6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5i7oJCK3hJkSKWNhQEZJp__smOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:d7:d4:69:5b:f1:51:c5:af:45:ad:93:e3:05:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e62ee82422b7849912296361404649a7ffec98e5
        Validity
            Not Before: Aug 14 16:01:33 2026 GMT
            Not After : Aug 15 16:01:33 2026 GMT
        Subject: CN=78ee7f136574ca179873a293435e77d9580ceabe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:67:5a:d5:be:65:b3:5e:cc:da:25:b9:8f:b7:
                    92:68:9c:50:3f:16:10:49:23:75:35:af:53:1c:ea:
                    42:92:c8:9f:89:c9:96:08:13:3e:1a:81:ed:7a:1f:
                    d3:42:d2:15:70:95:6e:46:d9:2f:46:b2:cd:7d:dc:
                    1c:f0:18:6a:fa:e7:38:5f:37:74:55:4f:4e:89:fd:
                    4e:17:f0:f4:60:a0:1a:a8:9b:7a:e9:a0:d5:5e:27:
                    99:88:2b:07:93:bd:16:a6:66:3a:32:30:3b:af:2a:
                    fa:79:ea:27:a0:1a:8e:d7:77:99:54:c5:ab:d7:c8:
                    c7:c3:e6:ec:fb:ec:eb:21:11:c5:6d:08:e9:34:2e:
                    d9:37:8d:68:42:a6:7a:e2:3d:08:d2:e0:78:17:7e:
                    b4:28:7f:45:a1:af:ac:96:c3:1e:12:ce:f9:fd:00:
                    8d:08:87:4a:85:22:5c:68:0a:52:bc:a6:5d:56:19:
                    3f:c8:ff:25:c8:75:06:0c:c6:5c:75:02:df:6c:2c:
                    a9:17:bd:89:7f:3c:f3:77:b8:81:c7:ba:c0:8a:eb:
                    4d:1f:ea:d7:2c:35:9f:b1:db:07:52:f6:04:52:ce:
                    01:92:61:f7:17:be:6f:b6:92:66:a0:80:38:27:b8:
                    ca:9f:31:24:aa:12:68:2d:a4:59:2e:50:48:c1:88:
                    ef:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:EE:7F:13:65:74:CA:17:98:73:A2:93:43:5E:77:D9:58:0C:EA:BE
            X509v3 Authority Key Identifier:
                keyid:E6:2E:E8:24:22:B7:84:99:12:29:63:61:40:46:49:A7:FF:EC:98:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5i7oJCK3hJkSKWNhQEZJp__smOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:0f:21:e0:16:f2:5c:f8:a9:03:5c:fa:61:a8:7e:80:81:03:
         7e:ff:96:95:5b:fb:ea:ee:3e:e5:59:11:70:76:81:e1:d8:ed:
         fe:14:6e:d9:d1:99:c8:4e:f4:72:39:8e:76:40:76:03:1d:4c:
         64:e7:a0:f4:c5:ac:1b:34:0c:82:82:20:f2:b0:30:f6:42:7a:
         88:16:29:4e:5a:ac:f0:e5:24:33:1f:65:87:7a:87:52:d9:3c:
         7e:d8:81:32:4d:d5:bf:e5:bb:f8:b2:b3:eb:50:80:db:71:2b:
         d3:86:d8:a9:a1:64:60:c7:d9:3c:8a:e4:fc:38:82:40:fb:34:
         9f:68:db:22:ec:c2:d0:a9:a4:56:11:a7:fe:a3:ca:b5:46:8e:
         86:ae:3e:4d:3a:a3:93:63:25:d2:b5:32:41:96:ae:ec:26:5e:
         16:81:33:b7:c8:3e:97:92:c4:3d:8b:47:0f:23:ba:ad:78:ca:
         27:23:24:d4:e5:30:65:4f:0d:91:ae:30:bd:c0:6c:dc:de:72:
         9a:cc:39:42:df:60:d2:fd:e6:da:fc:18:16:68:90:c7:10:51:
         d1:ea:c7:9b:cc:08:a2:68:b2:36:eb:bf:a0:92:11:db:b7:55:
         44:d1:6f:50:1c:a5:12:64:36:fd:2a:a7:06:2c:fe:5e:47:b3:
         b1:b7:c1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:17 2026 by rpki-client