Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.mft
File:                     E-37kQ__5H1RrZ0PiDsbZJZp4TU.mft (raw, json)
Hash identifier:          wPKqSAXasjPnU28JFt12d+ecMGOkUM2X4vV9qrESbLE=
Subject key identifier:   BA:E7:34:BB:A8:E4:F9:D1:E4:1F:FA:AE:EC:EB:35:3D:39:B2:C8:E4
Authority key identifier: 13:ED:FB:91:0F:FF:E4:7D:51:AD:9D:0F:88:3B:1B:64:96:69:E1:35
Certificate issuer:       /CN=13edfb910fffe47d51ad9d0f883b1b649669e135
Certificate serial:       01A174DDF4B14BD8AE52A56F29E319FF86A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-37kQ__5H1RrZ0PiDsbZJZp4TU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.mft
Manifest number:          0C57
Signing time:             Sun 25 Oct 2026 21:01:05 +0000
Manifest this update:     Sun 25 Oct 2026 21:01:05 +0000
Manifest next update:     Mon 26 Oct 2026 21:01:05 +0000
Files and hashes:         1: E-37kQ__5H1RrZ0PiDsbZJZp4TU.crl (hash: kLs+rvhBuY9VO1b0a0JTZpkMQYFSMF2IswAnOEINtXM=)
                          2: ab_dcmnUNV-XBfTtK_tKTbZqwjI.roa (hash: xavsN1HJdLi+aPkdFObLI236THGttyRtSD4R0FVRKWY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-37kQ__5H1RrZ0PiDsbZJZp4TU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 21:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:74:dd:f4:b1:4b:d8:ae:52:a5:6f:29:e3:19:ff:86:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13edfb910fffe47d51ad9d0f883b1b649669e135
        Validity
            Not Before: Oct 25 21:01:05 2026 GMT
            Not After : Oct 26 21:01:05 2026 GMT
        Subject: CN=bae734bba8e4f9d1e41ffaaeeceb353d39b2c8e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ca:e1:0e:61:4c:de:78:13:9f:1c:87:ea:90:
                    fe:1f:68:06:d9:f4:6c:fb:e9:14:b2:23:85:93:ce:
                    77:0a:12:94:d7:a2:85:2d:43:04:dc:00:c5:b6:66:
                    8f:8b:e1:25:ac:3a:91:0b:10:f0:7f:f0:02:d5:66:
                    48:95:cc:5d:70:db:c3:bd:11:ee:c9:ca:3f:ff:7c:
                    7d:76:92:55:71:29:82:c2:49:7e:84:97:ef:9a:ef:
                    26:36:ec:92:58:bf:2f:52:34:d8:19:12:ed:bb:07:
                    60:0c:84:8d:b5:92:1e:d9:42:ec:de:37:20:a0:89:
                    40:6c:eb:de:dd:12:e5:67:a8:f8:4f:7b:c2:cd:b5:
                    7f:ae:9e:77:72:37:f4:87:87:ac:27:76:86:a7:d5:
                    4c:6c:1a:66:a0:59:b4:e2:5b:99:08:b6:65:a1:5d:
                    54:e8:ca:6c:3f:cc:05:03:5e:a9:97:c3:f8:46:ba:
                    c9:9b:b9:f4:00:6d:eb:53:bc:71:5a:04:32:3b:81:
                    4f:de:6b:9d:39:58:c7:41:29:9e:86:85:ff:97:36:
                    0d:93:5c:d2:9f:b5:04:d5:c3:44:f7:dc:41:ba:79:
                    83:3b:7b:fd:d1:4d:5a:d2:ed:0b:50:b7:47:5c:ff:
                    ad:8a:40:d0:99:b0:b1:41:57:1a:b2:31:fd:f6:43:
                    0a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E7:34:BB:A8:E4:F9:D1:E4:1F:FA:AE:EC:EB:35:3D:39:B2:C8:E4
            X509v3 Authority Key Identifier:
                keyid:13:ED:FB:91:0F:FF:E4:7D:51:AD:9D:0F:88:3B:1B:64:96:69:E1:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-37kQ__5H1RrZ0PiDsbZJZp4TU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:87:25:b0:52:a7:3a:97:6c:40:1f:eb:22:67:0e:3f:61:38:
         20:db:b3:92:bf:a6:51:b6:cc:25:2c:b7:b2:0b:e8:25:c9:c2:
         50:53:09:83:a0:41:91:f5:42:dd:cd:01:0f:57:5f:ef:5d:eb:
         17:13:5d:f3:fd:60:a1:90:d0:00:38:f2:34:0d:85:d0:ff:cb:
         f2:2f:c6:80:3a:95:20:c0:31:81:bb:d9:e7:e4:1f:70:8c:3b:
         53:c6:cb:fb:e3:f9:de:31:2f:0e:4b:8b:81:5d:8e:51:3e:bb:
         04:1f:fa:ed:c0:38:4f:90:87:d2:0c:e1:bb:db:12:5a:d8:f0:
         a6:89:a3:a6:f2:42:83:05:c2:41:9e:b9:5d:ea:f2:d8:5e:c7:
         7c:c0:0f:30:72:d8:48:a5:84:76:c8:b5:a6:25:50:76:3d:48:
         44:b0:06:18:26:95:a1:1e:93:1a:e3:f9:a3:99:92:0e:c9:e8:
         5c:90:04:01:6e:c8:4e:bb:3f:ef:9e:59:9d:81:03:f5:da:8a:
         08:46:d2:a3:9e:b1:d3:84:37:d4:f2:0f:2b:2b:03:66:6c:9f:
         39:e1:e9:1f:a8:cd:00:28:fa:60:dd:f5:8b:12:a5:c7:c2:6a:
         29:3a:5c:a4:5a:38:ae:04:14:4c:2a:55:58:3b:4b:bb:32:8b:
         4a:96:8d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:35:34 2026 by rpki-client