Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
File:                     cjM1sFB1VK5sbMKUdQdkyv0L1og.mft (raw, json)
Hash identifier:          VQTZq6lH1uAYHnr2ULKnkCQj3eHmM0nS/rMd8KN0o1w=
Subject key identifier:   AE:F6:56:2D:82:3F:B9:CC:EE:F2:39:25:98:34:F4:0D:77:8F:36:A9
Authority key identifier: 72:33:35:B0:50:75:54:AE:6C:6C:C2:94:75:07:64:CA:FD:0B:D6:88
Certificate issuer:       /CN=723335b0507554ae6c6cc294750764cafd0bd688
Certificate serial:       01A0ED7922C69C2199217D33FE2C8460AACE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
Manifest number:          02E5
Signing time:             Tue 29 Sep 2026 14:02:13 +0000
Manifest this update:     Tue 29 Sep 2026 14:02:13 +0000
Manifest next update:     Wed 30 Sep 2026 14:02:13 +0000
Files and hashes:         1: cjM1sFB1VK5sbMKUdQdkyv0L1og.crl (hash: R2es6E/Uu9GCP1Ps4sa6AWTdN3mUKEjWO49oroTuItc=)
                          2: h1AxusJ0gzCuRYNROBYE_ex13Gw.asa (hash: RqU6DmGS5GS4oIpT5CWEZ1wznv9eazt1xRYLsNLaGg0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ed:79:22:c6:9c:21:99:21:7d:33:fe:2c:84:60:aa:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=723335b0507554ae6c6cc294750764cafd0bd688
        Validity
            Not Before: Sep 29 14:02:13 2026 GMT
            Not After : Sep 30 14:02:13 2026 GMT
        Subject: CN=aef6562d823fb9cceef239259834f40d778f36a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e9:45:a4:6d:f1:20:18:3a:86:06:42:c9:dd:
                    95:e8:2d:f4:44:65:a6:44:ae:a1:98:24:64:d4:80:
                    ca:da:11:54:99:49:51:a0:1d:79:03:0e:12:8e:ee:
                    a6:b5:ce:e3:94:1e:ae:5b:d1:e8:44:59:72:94:d6:
                    77:ec:a3:f6:6d:15:6f:a1:b6:c4:86:42:12:8c:98:
                    7d:a2:b1:37:eb:8a:1d:9c:d2:56:f5:84:84:63:54:
                    c9:ea:2e:53:af:88:50:a4:91:52:80:00:fc:b4:08:
                    9c:f6:8a:05:68:be:2b:e4:1c:64:24:0d:05:a1:50:
                    57:b6:89:9e:15:32:90:5a:e4:68:13:e9:d5:92:78:
                    80:b5:fb:ec:9d:99:ab:94:2b:a9:e2:51:4c:55:f5:
                    0a:73:00:ff:a8:ff:a1:43:67:43:c9:27:4e:2e:79:
                    de:83:fa:ef:ce:04:5d:70:43:6f:80:8a:d1:05:88:
                    73:19:9c:03:6e:d6:64:7b:29:46:e2:fa:2e:cb:a9:
                    5f:e1:e7:78:02:8f:59:d4:93:f1:2a:c0:4a:6e:c8:
                    5f:78:38:08:59:68:ff:3d:a8:50:5e:7f:e5:e3:8e:
                    ff:1f:73:fe:ab:79:6c:19:ca:ff:76:fe:f8:85:3d:
                    88:cf:7f:31:3b:f3:fb:63:ae:e1:f7:da:c4:75:22:
                    71:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F6:56:2D:82:3F:B9:CC:EE:F2:39:25:98:34:F4:0D:77:8F:36:A9
            X509v3 Authority Key Identifier:
                keyid:72:33:35:B0:50:75:54:AE:6C:6C:C2:94:75:07:64:CA:FD:0B:D6:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:9d:4d:56:54:31:45:3a:a8:55:eb:55:98:d7:20:f9:8c:89:
         29:c0:3e:66:2e:af:b9:81:06:2f:44:70:fd:ea:ee:f1:22:0b:
         2b:3d:c2:16:7c:91:10:aa:f0:c6:bd:24:61:0d:48:3b:1b:11:
         85:a8:b0:88:9a:e5:0a:7b:7c:75:2b:19:ec:1b:9d:88:d3:6d:
         5d:90:b9:98:2d:08:70:16:0d:3d:8d:c1:6b:85:bc:16:23:b6:
         b8:93:9f:9f:43:89:ef:95:ca:bd:f0:ce:77:e0:21:36:a2:41:
         aa:51:08:b7:27:61:dc:6f:30:7c:aa:8a:90:09:cc:01:4d:a6:
         ab:15:f2:82:11:ae:69:30:9e:2b:c8:4f:eb:72:1d:0f:e1:01:
         b2:e6:58:44:44:5b:2f:bc:72:c8:14:f8:9d:4f:63:6e:47:77:
         61:d8:a8:e4:7e:05:c8:93:fe:03:75:04:e7:db:02:bf:f1:8a:
         d6:15:f7:12:b5:f6:a1:05:44:21:7f:dd:5a:d2:dc:b7:78:fe:
         4e:c1:ba:c3:40:cf:c0:7a:16:c3:41:5f:ea:5a:81:eb:ae:b7:
         7d:9f:ea:67:2d:cb:60:28:04:8a:b4:d8:37:c6:60:04:ab:ae:
         4b:e2:02:1b:88:aa:34:e5:1c:20:a6:5b:ef:da:fb:88:9f:7e:
         b3:d3:ea:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 00:59:33 2026 by rpki-client