Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
File:                     5318qB7lnVNFA7L3tj22K11ExW4.mft (raw, json)
Hash identifier:          fXsuyY1Eb8CxPW5yfF4/CgZuSoxKk9KAW4SGDxqgPPo=
Subject key identifier:   BD:FF:0C:64:12:1A:DF:28:6F:D5:84:C7:C7:AE:74:B8:79:0A:56:AA
Authority key identifier: E7:7D:7C:A8:1E:E5:9D:53:45:03:B2:F7:B6:3D:B6:2B:5D:44:C5:6E
Certificate issuer:       /CN=e77d7ca81ee59d534503b2f7b63db62b5d44c56e
Certificate serial:       01A13DB8A00F11F506C5A89336C7FB48AF68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
Manifest number:          130C
Signing time:             Thu 15 Oct 2026 04:01:12 +0000
Manifest this update:     Thu 15 Oct 2026 04:01:12 +0000
Manifest next update:     Fri 16 Oct 2026 04:01:12 +0000
Files and hashes:         1: 5318qB7lnVNFA7L3tj22K11ExW4.crl (hash: 37C+JEcKFmHpvzxdFhdhp3TrZP425THG0ReNTYPELFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 04:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:b8:a0:0f:11:f5:06:c5:a8:93:36:c7:fb:48:af:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e77d7ca81ee59d534503b2f7b63db62b5d44c56e
        Validity
            Not Before: Oct 15 04:01:12 2026 GMT
            Not After : Oct 16 04:01:12 2026 GMT
        Subject: CN=bdff0c64121adf286fd584c7c7ae74b8790a56aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a0:48:19:76:28:7f:8b:c4:4a:81:4d:a0:a8:
                    cc:31:85:fd:1b:d9:76:ac:ff:6b:d9:77:c9:46:72:
                    1c:87:e4:c5:bd:e8:e8:b9:38:17:c9:71:54:8e:0b:
                    fe:a4:e3:22:0a:f8:37:c9:3e:b5:0a:b5:36:4e:e6:
                    ba:dc:26:0e:55:23:b8:ab:60:70:b4:05:16:41:92:
                    7a:3c:ad:c5:0b:93:68:e4:10:19:57:55:05:e9:58:
                    d2:2a:5a:5a:d5:47:a2:84:94:2d:6a:9e:8d:a0:a1:
                    c1:70:fe:8d:d0:d9:32:d8:1e:e5:e4:91:88:32:2f:
                    c6:79:ad:10:2d:6b:42:a3:db:d9:0e:71:8f:98:f6:
                    6f:e7:bb:80:23:b3:61:b9:8d:57:1d:12:95:aa:79:
                    db:51:fa:b3:ac:98:8a:93:68:31:59:e4:ae:99:57:
                    6e:dc:2e:de:dc:5f:bd:07:80:a1:21:73:d3:0d:d7:
                    ff:87:2a:04:c2:09:a4:63:db:ff:4c:ea:f3:43:f2:
                    ac:b8:6e:dc:85:7e:db:a2:ba:79:fe:e7:dd:73:8d:
                    b8:50:58:74:03:4d:6d:28:b4:56:82:b2:86:4a:5f:
                    47:16:5a:c5:1e:a2:bd:78:a0:45:4b:c0:e7:96:58:
                    c8:be:95:73:aa:f1:b4:8a:69:39:9b:8f:92:7d:00:
                    ba:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FF:0C:64:12:1A:DF:28:6F:D5:84:C7:C7:AE:74:B8:79:0A:56:AA
            X509v3 Authority Key Identifier:
                keyid:E7:7D:7C:A8:1E:E5:9D:53:45:03:B2:F7:B6:3D:B6:2B:5D:44:C5:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:23:75:a3:b3:d9:b1:27:7d:7d:b7:94:6a:7f:27:f4:b7:11:
         d0:55:69:cf:73:aa:a6:e8:d0:17:47:ec:23:52:81:05:09:74:
         b6:bd:83:e5:a6:6e:67:c7:13:91:e5:d8:e4:92:7f:43:17:d5:
         ea:15:58:5c:b1:fa:6a:0a:f7:57:af:7e:81:30:88:ed:25:b5:
         fe:3f:5b:48:b3:32:aa:76:f9:09:e8:a2:15:8a:17:bd:9f:d8:
         e8:a1:9d:1d:2e:05:a7:e0:64:f5:73:45:69:27:8c:bf:bc:45:
         2e:2c:4c:e2:4c:f5:cd:76:cb:75:dc:13:06:6d:42:cd:f0:79:
         26:b2:a3:9f:07:9a:ff:fe:48:68:cc:a7:3d:29:53:62:e2:34:
         57:26:08:35:80:9d:8c:04:43:66:fa:4d:a7:dc:36:00:99:6b:
         6c:0f:be:8a:1a:a9:ae:6f:ff:9e:35:49:c4:86:d8:5c:cd:24:
         62:40:63:6e:5d:69:54:74:af:af:33:4e:43:c8:84:3b:36:f3:
         19:c1:ad:aa:62:48:85:4c:07:f4:73:72:39:2a:a2:d5:03:3a:
         2e:c4:e4:b7:6d:d4:f4:c6:13:37:c1:2d:d6:de:5f:20:81:a8:
         e2:62:06:1a:1d:9b:a1:13:c2:ca:db:5c:a0:68:10:05:ba:af:
         9c:be:2b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:15:21 2026 by rpki-client