Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
File:                     1EZzVsX7atsuunE8gBkUsvTX860.mft (raw, json)
Hash identifier:          pJ0YgyDSGjvNx5NzAtl44qRXeJgY6XYjC43rJN4I6tQ=
Subject key identifier:   F5:79:B3:CB:75:CD:63:3C:19:7C:D4:61:BF:16:F6:A5:A1:80:2C:38
Authority key identifier: D4:46:73:56:C5:FB:6A:DB:2E:BA:71:3C:80:19:14:B2:F4:D7:F3:AD
Certificate issuer:       /CN=d4467356c5fb6adb2eba713c801914b2f4d7f3ad
Certificate serial:       01A040F351BEDF05A275EC7964D51DC0EC9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
Manifest number:          0533
Signing time:             Thu 27 Aug 2026 02:01:22 +0000
Manifest this update:     Thu 27 Aug 2026 02:01:22 +0000
Manifest next update:     Fri 28 Aug 2026 02:01:22 +0000
Files and hashes:         1: 1EZzVsX7atsuunE8gBkUsvTX860.crl (hash: OCW2QUpv4Rcc5xyPd1Y88vnr4TcVgrLiq3mn4LNLzJ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:f3:51:be:df:05:a2:75:ec:79:64:d5:1d:c0:ec:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4467356c5fb6adb2eba713c801914b2f4d7f3ad
        Validity
            Not Before: Aug 27 02:01:22 2026 GMT
            Not After : Aug 28 02:01:22 2026 GMT
        Subject: CN=f579b3cb75cd633c197cd461bf16f6a5a1802c38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:71:55:2b:f1:59:5b:18:8d:4b:5b:ee:5a:f0:
                    d1:eb:7e:24:78:1b:22:d9:47:6b:7e:9b:d4:ef:ad:
                    08:fc:7d:db:99:6b:2f:eb:1d:64:49:b1:a3:81:41:
                    72:c4:3f:0a:cb:1d:c8:b6:0b:1c:30:d4:99:22:db:
                    bc:8b:94:48:73:ef:0a:bf:8f:de:51:dc:14:55:b8:
                    33:79:04:b6:bf:5c:6f:c5:1e:f2:79:1a:ee:ca:d5:
                    da:e9:dd:c9:ee:25:e1:0a:20:4b:8e:06:da:7f:19:
                    db:90:ae:8f:a9:7d:63:54:1e:b8:22:3b:01:8a:92:
                    1c:d1:6f:89:4a:b8:ac:1d:6a:92:15:a3:a4:26:53:
                    d5:28:0d:5c:39:b8:e6:ce:5b:fa:33:d0:9e:1f:7f:
                    7b:ce:0f:17:6f:53:55:2a:69:04:cb:47:b7:bc:e6:
                    a1:af:c4:ac:42:1f:23:fb:9f:d7:e9:54:e0:86:fa:
                    81:19:b6:55:a0:81:40:83:36:87:85:42:73:fd:30:
                    1c:95:3c:7d:0a:21:9c:32:81:ea:fa:b3:c8:c2:1a:
                    2f:2c:6f:e3:9a:4b:14:f9:75:1b:e2:77:4d:4d:1b:
                    96:1d:21:ce:f2:55:95:a1:73:22:f7:72:e7:e9:db:
                    2b:4b:0e:60:a3:90:f7:f1:48:2e:0b:55:29:d5:b5:
                    37:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:79:B3:CB:75:CD:63:3C:19:7C:D4:61:BF:16:F6:A5:A1:80:2C:38
            X509v3 Authority Key Identifier:
                keyid:D4:46:73:56:C5:FB:6A:DB:2E:BA:71:3C:80:19:14:B2:F4:D7:F3:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:9c:ad:59:47:91:38:06:d8:11:9c:b8:9e:f0:fd:15:50:59:
         8c:f4:2e:45:34:e3:f5:18:83:79:73:91:01:59:34:fb:8e:97:
         82:2d:b5:c7:a7:c7:ab:5d:0d:b9:c2:96:98:76:b4:2e:77:6f:
         b9:ac:48:e3:af:a0:32:4d:8c:ee:7b:aa:17:e2:86:9b:07:17:
         6c:70:5f:9d:e3:4b:85:1e:fb:2f:32:52:30:09:74:13:9f:51:
         5e:5b:be:3d:08:a0:2e:db:e0:b8:da:1e:91:5a:7d:55:e6:e1:
         73:78:26:d3:be:86:11:5f:55:11:a7:2f:08:c5:cf:da:cb:e6:
         a8:98:b5:5e:ed:b3:24:48:04:0f:6c:70:6f:dd:a2:94:a1:eb:
         0f:0c:7f:5f:b7:62:20:85:e7:ef:5c:dc:8d:c5:27:af:02:da:
         fa:f4:37:d2:9f:87:43:79:11:c1:aa:97:83:f2:f2:13:77:ed:
         92:b7:39:4e:66:98:ce:50:05:6d:c0:d5:26:8f:e0:66:da:a9:
         ee:bd:f9:2a:f5:32:73:96:64:08:48:c2:49:e6:90:92:f0:0e:
         2e:fe:ba:85:b9:69:71:ce:a3:a2:40:10:8e:81:db:ca:bc:9a:
         16:90:89:b4:4a:6a:e6:88:0f:97:95:70:30:ca:d6:62:63:38:
         b9:9c:eb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:53:55 2026 by rpki-client