Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/4ae675-3c7c-40ba-aba4-9491e6c32aa8/1/5i-EXuHrFcTOfA3AV3I654q6olQ.mft
File:                     5i-EXuHrFcTOfA3AV3I654q6olQ.mft (raw, json)
Hash identifier:          fEHQIX2kpxMFWJcsyIQdDNewgPCYowZn4lAvAAS90eY=
Subject key identifier:   45:5A:9E:C3:28:6D:98:17:17:6D:C7:B9:CC:07:EE:9C:42:87:DA:04
Authority key identifier: E6:2F:84:5E:E1:EB:15:C4:CE:7C:0D:C0:57:72:3A:E7:8A:BA:A2:54
Certificate issuer:       /CN=e62f845ee1eb15c4ce7c0dc057723ae78abaa254
Certificate serial:       01A041611B0E35949F755309C4E018992F56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5i-EXuHrFcTOfA3AV3I654q6olQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/4ae675-3c7c-40ba-aba4-9491e6c32aa8/1/5i-EXuHrFcTOfA3AV3I654q6olQ.mft
Manifest number:          018B
Signing time:             Thu 27 Aug 2026 04:01:17 +0000
Manifest this update:     Thu 27 Aug 2026 04:01:17 +0000
Manifest next update:     Fri 28 Aug 2026 04:01:17 +0000
Files and hashes:         1: 5i-EXuHrFcTOfA3AV3I654q6olQ.crl (hash: e91ZCNxKgByNOlIg3Ldo+ZxCz85eq4DiMRS7AY7ZtC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/4ae675-3c7c-40ba-aba4-9491e6c32aa8/1/5i-EXuHrFcTOfA3AV3I654q6olQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/4ae675-3c7c-40ba-aba4-9491e6c32aa8/1/5i-EXuHrFcTOfA3AV3I654q6olQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5i-EXuHrFcTOfA3AV3I654q6olQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:41:61:1b:0e:35:94:9f:75:53:09:c4:e0:18:99:2f:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e62f845ee1eb15c4ce7c0dc057723ae78abaa254
        Validity
            Not Before: Aug 27 04:01:17 2026 GMT
            Not After : Aug 28 04:01:17 2026 GMT
        Subject: CN=455a9ec3286d9817176dc7b9cc07ee9c4287da04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f6:c8:ea:4c:9d:8f:90:8c:6f:bb:bd:52:e5:
                    e4:05:5f:06:62:e9:d5:20:37:86:ac:2f:90:a9:7e:
                    b6:49:7f:28:f1:5c:b3:1d:60:d3:7a:4a:31:8e:6e:
                    d9:3e:ae:66:8e:17:1e:13:4d:af:f5:32:3b:4b:11:
                    b1:81:da:9f:1c:77:d9:75:0f:a2:76:04:a0:5c:a1:
                    68:9a:a2:19:7f:79:87:ce:05:bc:24:13:06:b6:30:
                    5e:95:28:fd:53:8c:cd:71:e9:f4:ca:7b:03:e9:1a:
                    21:a2:7f:0b:2d:b0:b5:1f:d0:ba:09:29:83:b5:4f:
                    34:55:e7:57:25:78:fb:e5:48:40:8c:51:ef:9f:3d:
                    b0:71:d9:d4:2e:36:b3:2d:f4:d5:0d:5a:51:ea:82:
                    02:9a:25:02:5d:59:e6:91:08:a0:ad:a4:6e:3e:e2:
                    18:81:65:05:dc:26:4d:55:c6:f5:e6:91:f6:52:44:
                    82:f2:53:b7:16:19:3a:78:7e:80:c6:65:bd:e5:ae:
                    d9:aa:61:c2:a1:4c:a2:9a:9e:a7:47:82:82:2f:6b:
                    3a:41:8d:ab:8b:20:08:15:c7:7f:72:c2:37:b8:ca:
                    dc:27:ab:b8:9a:37:c3:e0:d9:4f:05:0c:d6:0e:9a:
                    1c:cb:25:56:36:75:08:46:67:a8:d9:1c:1c:e3:6e:
                    82:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:5A:9E:C3:28:6D:98:17:17:6D:C7:B9:CC:07:EE:9C:42:87:DA:04
            X509v3 Authority Key Identifier:
                keyid:E6:2F:84:5E:E1:EB:15:C4:CE:7C:0D:C0:57:72:3A:E7:8A:BA:A2:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5i-EXuHrFcTOfA3AV3I654q6olQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4ae675-3c7c-40ba-aba4-9491e6c32aa8/1/5i-EXuHrFcTOfA3AV3I654q6olQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4ae675-3c7c-40ba-aba4-9491e6c32aa8/1/5i-EXuHrFcTOfA3AV3I654q6olQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:7c:e3:ee:1d:c7:a5:58:e4:a0:1e:a5:81:15:a2:6a:a9:4a:
         8f:fe:38:71:be:56:fd:02:a3:d7:f5:ef:6e:2d:35:3d:a8:b9:
         cc:85:86:c4:16:f0:eb:18:00:fe:f7:10:c6:38:72:c3:ad:f4:
         5b:ed:e2:95:58:63:9b:0c:9a:65:b2:a1:ae:17:81:54:21:5a:
         5e:e8:57:c6:53:95:52:fe:8d:0c:f7:aa:2a:bb:c8:28:b0:5e:
         8e:6b:bc:7d:55:ca:dc:f8:23:df:da:a8:6c:37:40:3f:b0:7b:
         79:80:51:9b:dc:e3:7c:87:3d:aa:a1:79:8c:5a:d6:d9:62:97:
         c4:ef:89:84:2a:a9:bf:28:dc:b6:b5:3b:ca:a0:ec:c3:6e:e8:
         19:e9:b8:0c:83:1e:6d:71:72:ef:6c:ac:fa:72:97:11:5b:99:
         10:73:08:a8:32:d5:24:97:d7:29:9a:e5:c5:0d:6c:15:74:34:
         a1:62:eb:e2:dd:c1:ca:38:a4:21:3a:91:8f:8d:de:4a:ac:55:
         1d:45:7e:bb:c0:8c:e3:24:8c:2f:0d:eb:0f:28:59:c6:57:23:
         b0:3f:36:5b:24:34:28:38:57:0b:2a:e8:06:22:18:e8:8e:eb:
         51:85:e7:ea:c4:1e:23:b0:e1:8f:af:96:e8:0d:b2:62:31:09:
         03:92:90:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:47:33 2026 by rpki-client