Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
File:                     54z133frZmwE77frs8o0BK3sNPs.mft (raw, json)
Hash identifier:          wsK3xGlEXzapESbdqOp48Y69LHJfHHQa0vVgMoxYj88=
Subject key identifier:   A5:05:CD:6B:C0:12:03:EB:8D:E5:A2:1A:8D:FF:96:19:FF:99:3F:B3
Authority key identifier: E7:8C:F5:DF:77:EB:66:6C:04:EF:B7:EB:B3:CA:34:04:AD:EC:34:FB
Certificate issuer:       /CN=e78cf5df77eb666c04efb7ebb3ca3404adec34fb
Certificate serial:       01A001DD53C0C9C9A76F1B6BA1ED3112165A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
Manifest number:          10E0
Signing time:             Fri 14 Aug 2026 20:01:17 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:17 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:17 +0000
Files and hashes:         1: 54z133frZmwE77frs8o0BK3sNPs.crl (hash: 89uzsgG9Pr1hRM2LYa42dSmY3DHFvEz2ZsVaU4IfnI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:53:c0:c9:c9:a7:6f:1b:6b:a1:ed:31:12:16:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e78cf5df77eb666c04efb7ebb3ca3404adec34fb
        Validity
            Not Before: Aug 14 20:01:17 2026 GMT
            Not After : Aug 15 20:01:17 2026 GMT
        Subject: CN=a505cd6bc01203eb8de5a21a8dff9619ff993fb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:56:7d:5b:ce:ae:3d:71:5c:30:52:bb:64:70:
                    f7:22:58:69:7a:83:27:cf:1d:9d:e5:d7:3b:86:b7:
                    c8:81:3f:51:f8:f7:1f:4d:04:40:4d:ef:80:fb:fc:
                    c3:65:c3:08:23:1c:a0:4f:c0:f5:40:91:ce:5a:b3:
                    ba:69:dd:2d:a9:91:d7:ec:b8:57:58:f0:3e:4a:1f:
                    ba:05:4e:cd:87:2c:4d:2a:4d:6d:55:27:89:67:9d:
                    a6:74:da:5e:a4:a2:8c:b6:1f:42:75:d5:b4:47:71:
                    6d:aa:cf:e8:4b:34:6b:7b:2d:b5:6b:62:de:12:25:
                    10:e6:28:55:cf:85:c7:78:b4:b0:f0:8a:50:e4:0f:
                    30:e2:b7:8e:07:a7:c2:65:28:a1:3e:e0:f4:52:da:
                    f3:3a:2e:92:6a:8d:5e:a4:a7:20:72:f2:85:39:47:
                    32:21:3b:80:30:06:04:cb:2c:ac:b3:af:72:95:d6:
                    0c:6a:0b:31:31:07:fe:91:7d:03:81:bf:af:4d:1b:
                    bf:91:cd:d1:5e:5c:d9:94:28:24:df:ad:6f:00:e2:
                    58:a7:02:eb:45:0c:ff:95:7c:52:76:f1:90:c2:1d:
                    52:29:aa:b0:a4:71:53:87:95:ab:07:8d:26:fa:d7:
                    8f:df:af:62:92:fc:cd:90:ca:0f:bf:2c:ed:dd:88:
                    ef:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:05:CD:6B:C0:12:03:EB:8D:E5:A2:1A:8D:FF:96:19:FF:99:3F:B3
            X509v3 Authority Key Identifier:
                keyid:E7:8C:F5:DF:77:EB:66:6C:04:EF:B7:EB:B3:CA:34:04:AD:EC:34:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:85:ef:ef:1c:a9:be:01:05:93:09:5f:a6:82:52:86:a7:1f:
         bd:eb:a4:4f:3b:cb:b0:a0:c6:67:15:61:6e:57:1b:c4:d7:b1:
         01:b7:5c:71:52:c9:a8:54:7c:d8:fa:27:64:23:cf:54:7f:45:
         2e:df:88:b9:ee:78:8f:5c:10:5b:95:0f:2d:83:2b:33:7b:02:
         81:de:23:96:96:06:64:f4:f9:e0:a6:ca:2a:3b:d2:b5:5a:ce:
         fe:68:5b:4d:da:a7:5e:48:88:31:45:11:96:4a:35:e3:37:ea:
         33:bc:30:b9:f5:90:3b:75:77:44:cc:7c:e4:f7:b1:f3:99:cd:
         07:4f:53:8b:06:1e:aa:a8:41:95:75:16:2f:14:67:b3:96:3f:
         14:83:8a:19:25:d1:ba:c2:66:cb:82:4f:0c:63:6f:59:e2:75:
         dc:d0:13:0a:3d:11:6d:02:37:12:f0:0d:91:2a:33:78:1b:00:
         53:04:a5:0d:b7:60:f5:cd:54:88:3d:39:07:06:6e:e4:b6:58:
         eb:55:77:d8:3a:c5:35:f2:d6:94:ab:f9:dc:3d:59:7d:60:3d:
         a7:ed:59:8b:d3:14:e1:53:9c:4e:66:f8:b0:34:d4:5f:cc:13:
         19:47:8a:83:eb:1e:90:c6:f1:1c:cd:7c:c5:af:f3:20:00:60:
         7a:5a:20:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:29:20 2026 by rpki-client