Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.mft
File:                     D5_5nyJzNWVWJpW7Gk8uKxje_7A.mft (raw, json)
Hash identifier:          p33TW6wZ/UVi7KozXoniGpyhRpn1Lh/6I+Aywb3FgTQ=
Subject key identifier:   55:DE:E5:29:88:33:C7:E4:19:98:1F:5C:6A:4B:B8:66:6F:F0:C7:BE
Authority key identifier: 0F:9F:F9:9F:22:73:35:65:56:26:95:BB:1A:4F:2E:2B:18:DE:FF:B0
Certificate issuer:       /CN=0f9ff99f22733565562695bb1a4f2e2b18deffb0
Certificate serial:       01A16CED17F49B7FF3CF0C4C33365869B091
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D5_5nyJzNWVWJpW7Gk8uKxje_7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.mft
Manifest number:          02F2
Signing time:             Sat 24 Oct 2026 08:00:39 +0000
Manifest this update:     Sat 24 Oct 2026 08:00:39 +0000
Manifest next update:     Sun 25 Oct 2026 08:00:39 +0000
Files and hashes:         1: D5_5nyJzNWVWJpW7Gk8uKxje_7A.crl (hash: ntsCt/3cpDw8V9zr9iRllDCv01vv5979rzGKHTufDVQ=)
                          2: H-D51HjMjjsYfo5DLvOZXJ5NZgQ.asa (hash: gpkxWbtRBEgASTgFzDt/pFMdPMHMMXFwys4WlumWGfo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D5_5nyJzNWVWJpW7Gk8uKxje_7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 05:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6c:ed:17:f4:9b:7f:f3:cf:0c:4c:33:36:58:69:b0:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f9ff99f22733565562695bb1a4f2e2b18deffb0
        Validity
            Not Before: Oct 24 08:00:39 2026 GMT
            Not After : Oct 25 08:00:39 2026 GMT
        Subject: CN=55dee5298833c7e419981f5c6a4bb8666ff0c7be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:91:ba:ad:ee:0c:a4:e0:d7:77:59:52:d5:b7:
                    6d:e7:cc:fe:d9:c2:f7:be:8d:79:f9:eb:fa:87:ea:
                    50:4e:c5:d9:32:2b:39:69:47:53:8a:47:1d:f2:00:
                    fd:c4:c6:ad:4d:fa:b1:63:3b:5d:4d:88:61:4a:88:
                    23:7f:d6:59:e9:fd:b8:31:2a:b3:57:66:ee:de:36:
                    c7:53:1b:a7:c9:cf:df:9c:2c:ea:50:84:24:c8:49:
                    86:c9:4e:06:88:04:bf:c7:da:0c:c9:da:3d:1f:4a:
                    04:dc:1d:00:7e:62:a8:9a:90:9e:d0:9d:58:67:46:
                    0f:10:09:db:f8:3f:13:0e:05:ce:79:3f:b9:ab:99:
                    30:11:30:53:bf:e8:d5:25:a7:f7:ab:2f:74:64:37:
                    96:55:0a:56:33:f9:3d:47:b9:c7:44:24:c7:40:79:
                    32:7f:d3:7f:3a:44:fb:81:65:1d:5d:8a:aa:ef:44:
                    02:c3:ca:e0:57:8f:4f:12:af:55:9f:ff:57:65:32:
                    dd:db:23:4e:6b:72:15:c7:6a:32:a9:0b:cc:3e:e0:
                    07:d5:f8:7a:86:8c:7a:a7:18:69:a4:cf:bd:d0:42:
                    9c:b9:c0:d5:8d:0c:6f:f2:de:b3:3d:2d:78:aa:d9:
                    42:d7:47:5c:03:11:79:65:04:e9:bd:d0:ee:94:8d:
                    5c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DE:E5:29:88:33:C7:E4:19:98:1F:5C:6A:4B:B8:66:6F:F0:C7:BE
            X509v3 Authority Key Identifier:
                keyid:0F:9F:F9:9F:22:73:35:65:56:26:95:BB:1A:4F:2E:2B:18:DE:FF:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5_5nyJzNWVWJpW7Gk8uKxje_7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:fc:2e:bd:a6:49:25:34:c6:cd:18:4e:69:78:b7:b1:46:40:
         5a:d7:11:77:6d:cc:a3:6a:14:db:fa:14:1f:24:6d:43:95:ad:
         fe:3f:cf:fa:15:2c:40:de:ef:b2:42:d4:20:db:20:d4:ca:fa:
         5b:6d:c1:fc:f9:b4:50:80:39:07:f9:04:66:21:11:5f:34:37:
         71:e5:a0:01:ca:54:c7:be:32:7f:5e:e4:ef:7d:7d:26:8c:d6:
         4a:48:a8:0a:1b:13:b2:97:56:90:cc:4f:c3:bd:30:87:f5:22:
         8c:ed:24:7d:89:20:9e:8f:89:af:1f:d6:77:06:8a:e6:bb:ee:
         5e:f8:28:a7:77:1f:4e:fb:34:da:eb:1a:71:c9:33:f6:9e:45:
         73:57:09:06:78:d2:69:21:4e:f4:71:cc:75:3d:14:3f:ee:6d:
         df:fe:f2:47:cd:bd:2a:e8:5e:95:b9:40:ab:6c:f4:7f:43:ed:
         a8:77:20:b2:a0:03:8d:4c:f3:08:16:3f:7c:0a:8f:aa:45:78:
         2e:d4:29:4f:5a:44:c9:bb:cc:86:57:b7:e7:95:dd:ac:9e:fb:
         33:b2:4f:9e:7b:f0:a1:a8:51:bd:cc:66:6b:e6:f8:99:82:b8:
         7a:af:16:e0:08:5c:a2:88:6a:9f:22:80:60:12:d7:30:fd:9b:
         63:bd:03:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 17:03:33 2026 by rpki-client