Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
File:                     5318qB7lnVNFA7L3tj22K11ExW4.mft (raw, json)
Hash identifier:          q4jmzfpW27fIQbO1JXVK1EhvPL7c1xueGq9LZEm6yhA=
Subject key identifier:   52:CA:3F:C0:BB:21:27:F5:EC:A1:26:92:00:17:1B:60:75:2A:10:1D
Authority key identifier: E7:7D:7C:A8:1E:E5:9D:53:45:03:B2:F7:B6:3D:B6:2B:5D:44:C5:6E
Certificate issuer:       /CN=e77d7ca81ee59d534503b2f7b63db62b5d44c56e
Certificate serial:       01A0010198F3BBA252373541C93847FD577E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
Manifest number:          1268
Signing time:             Fri 14 Aug 2026 16:01:16 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:16 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:16 +0000
Files and hashes:         1: 5318qB7lnVNFA7L3tj22K11ExW4.crl (hash: d/qStNuoC1Biqyi5f+T4/UWj7vvUnQBeeHVcKiSBfzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:98:f3:bb:a2:52:37:35:41:c9:38:47:fd:57:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e77d7ca81ee59d534503b2f7b63db62b5d44c56e
        Validity
            Not Before: Aug 14 16:01:16 2026 GMT
            Not After : Aug 15 16:01:16 2026 GMT
        Subject: CN=52ca3fc0bb2127f5eca1269200171b60752a101d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:53:dd:30:a3:bb:76:8b:66:fc:d1:bf:8d:4f:
                    6f:69:6e:8d:67:22:1e:89:5d:c9:13:7d:a3:c8:bc:
                    14:fc:fe:ae:40:b4:a8:03:f1:4c:c1:2d:d8:85:b1:
                    bb:54:49:69:13:2f:94:3f:aa:e6:9a:03:ca:f5:22:
                    d7:0d:f7:bd:e0:77:0e:ec:2a:d9:73:d6:cf:c9:79:
                    17:c3:ec:b7:1d:87:a3:13:d2:a4:fe:f4:a5:cf:71:
                    64:a3:b8:b7:e2:93:1e:dd:a7:ec:3f:30:5f:2c:6d:
                    09:b9:10:14:af:c8:33:26:4b:cb:86:0c:6a:06:2f:
                    09:23:68:07:bb:52:60:7f:55:87:5f:0d:90:56:66:
                    ef:f1:71:c9:65:7b:54:d1:38:4e:07:a0:20:d6:85:
                    ba:c7:70:56:3f:13:d0:83:06:28:a3:f8:7a:6f:fd:
                    e9:88:f4:03:da:f9:09:c8:0d:07:94:2c:01:58:79:
                    22:a3:f8:36:c4:00:56:7b:7a:3e:80:aa:86:e3:3b:
                    c9:ae:28:d1:02:21:89:23:8a:53:0f:0b:d9:4b:84:
                    cb:ec:e6:25:e0:05:dd:6b:aa:28:7b:a1:07:c9:66:
                    af:aa:bd:45:7a:81:c9:16:fa:0a:43:5b:3c:3b:19:
                    6f:35:97:df:8c:03:d6:2f:46:8b:b4:b1:4f:84:83:
                    b4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:CA:3F:C0:BB:21:27:F5:EC:A1:26:92:00:17:1B:60:75:2A:10:1D
            X509v3 Authority Key Identifier:
                keyid:E7:7D:7C:A8:1E:E5:9D:53:45:03:B2:F7:B6:3D:B6:2B:5D:44:C5:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:1d:26:e6:9f:3d:97:95:00:f9:80:3e:94:0c:7e:5b:7a:97:
         e8:ed:35:8e:ba:59:7e:1c:19:18:fa:ae:cc:4d:c4:87:6a:fd:
         cc:ac:c4:36:bd:ba:58:bb:43:2d:2a:cf:d1:55:8c:cc:d7:e4:
         fb:70:94:a3:6b:2d:59:01:02:8c:14:ad:2e:fa:95:58:cf:82:
         25:2e:a9:d9:2d:1b:6d:d7:06:e4:ef:8b:cf:90:f2:41:7b:28:
         a3:52:25:c5:b5:3c:81:f6:d6:f4:6e:16:0a:60:39:02:df:5f:
         50:ae:9e:72:c9:9e:81:e0:49:65:78:4a:48:09:f8:6a:d8:04:
         e8:a6:73:4a:e8:14:87:e1:1b:21:cc:d3:2a:63:33:9f:21:96:
         a7:49:2e:83:64:ec:f8:5e:45:7e:af:c4:a5:0a:04:79:fc:c7:
         dd:4e:1f:51:12:4b:5f:00:7d:81:6d:b0:86:47:04:20:c4:40:
         aa:45:12:95:d0:8e:0d:81:37:50:35:74:00:94:70:7a:c2:9b:
         02:28:6a:56:70:68:f5:6d:a7:bd:b3:02:bb:a8:ea:6e:29:34:
         a7:66:b3:7b:79:68:34:af:be:ef:21:eb:16:80:3c:88:cc:fe:
         60:b3:9b:19:50:93:80:ec:95:8c:24:bf:64:7c:e7:e5:aa:d0:
         bb:76:e2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:45 2026 by rpki-client