Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
File:                     54z133frZmwE77frs8o0BK3sNPs.mft (raw, json)
Hash identifier:          ejBB+GX/+F1D3xJf4a+xeO2Q5clpHuCz1BaFxtDsAMo=
Subject key identifier:   91:5A:98:67:11:9A:E5:3D:E5:C5:C6:1B:DA:AB:EB:BC:07:B9:9E:DE
Authority key identifier: E7:8C:F5:DF:77:EB:66:6C:04:EF:B7:EB:B3:CA:34:04:AD:EC:34:FB
Certificate issuer:       /CN=e78cf5df77eb666c04efb7ebb3ca3404adec34fb
Certificate serial:       019F18309C02C1D27C9F7C869D666DBBFBA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
Manifest number:          1067
Signing time:             Tue 30 Jun 2026 11:01:06 +0000
Manifest this update:     Tue 30 Jun 2026 11:01:06 +0000
Manifest next update:     Wed 01 Jul 2026 11:01:06 +0000
Files and hashes:         1: 54z133frZmwE77frs8o0BK3sNPs.crl (hash: UagcZnYwnEG3zhrhMgISr8yC9nyMZy/UVRt5reDeiI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 11:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:30:9c:02:c1:d2:7c:9f:7c:86:9d:66:6d:bb:fb:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e78cf5df77eb666c04efb7ebb3ca3404adec34fb
        Validity
            Not Before: Jun 30 11:01:06 2026 GMT
            Not After : Jul  1 11:01:06 2026 GMT
        Subject: CN=915a9867119ae53de5c5c61bdaabebbc07b99ede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:36:87:a2:86:ba:30:f1:c1:ef:56:bc:94:bb:
                    28:64:10:60:7e:84:88:76:69:08:b0:19:11:fb:32:
                    0b:f0:02:11:1f:78:27:cf:3f:e8:14:04:be:1c:0e:
                    7f:38:9e:e2:2c:5d:ec:07:96:f5:d9:04:40:42:f6:
                    e3:f7:71:a4:95:d5:43:9f:3d:33:e3:f5:f6:b3:04:
                    09:13:62:98:3f:7f:81:c1:f7:97:d9:96:2d:f1:9e:
                    b5:29:5b:dd:c8:26:d4:3d:5b:d9:d6:66:1c:0a:6b:
                    9c:52:e0:46:28:b6:4e:92:df:b1:4c:a2:4a:71:dc:
                    34:f7:1f:cd:6c:95:c6:73:b8:4d:20:55:df:a8:d2:
                    2d:4a:f7:d5:cb:e0:c9:8c:c1:c3:3c:23:d4:dc:6f:
                    06:bc:07:87:05:b1:6f:1f:8e:44:26:a4:ed:4a:7d:
                    c5:30:12:00:1e:dd:17:bc:78:98:a6:77:16:e8:28:
                    cf:ef:f0:69:9f:40:23:a6:eb:e6:b5:c1:85:dd:6d:
                    e1:bd:9d:ec:b6:28:8c:30:4f:47:1d:18:14:9f:45:
                    3a:39:8f:5e:5c:8f:b2:cd:12:20:8e:c1:05:8f:de:
                    cd:dd:44:7b:1c:ad:47:67:a3:a6:c6:6e:f9:7f:88:
                    c3:fb:1a:d9:4f:da:33:25:a3:b8:74:af:05:99:b3:
                    6d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:5A:98:67:11:9A:E5:3D:E5:C5:C6:1B:DA:AB:EB:BC:07:B9:9E:DE
            X509v3 Authority Key Identifier:
                keyid:E7:8C:F5:DF:77:EB:66:6C:04:EF:B7:EB:B3:CA:34:04:AD:EC:34:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:1f:f9:23:23:af:00:c4:fc:42:ac:0d:15:79:5a:eb:08:8d:
         28:d0:e7:c7:77:aa:00:6c:09:37:08:0c:16:fb:8a:41:fe:3c:
         20:1a:ac:3b:3f:32:75:2f:7c:99:11:8e:98:d5:c1:22:10:d4:
         17:21:3f:00:3b:27:d3:95:70:65:65:08:5a:8f:38:ac:58:37:
         19:07:5c:45:b2:0a:fc:82:89:5a:b7:ce:02:88:43:fb:e4:b6:
         68:d8:15:72:b5:95:8e:4b:58:3d:9b:3f:38:55:f0:e9:c1:ed:
         95:1a:db:53:97:c3:44:ef:d6:a6:6e:1b:03:36:04:20:fb:99:
         a5:9b:5e:45:6e:01:d0:d5:c2:9d:59:b7:5e:c7:4a:da:27:e4:
         1f:b1:9d:e0:69:bf:df:c1:5f:96:4d:e3:65:49:37:7f:75:4b:
         66:58:8d:11:df:fb:4b:1d:3e:80:79:24:39:6b:e5:b0:61:f0:
         07:3d:b9:9a:6e:be:83:a7:4b:43:55:56:e9:44:1e:a6:94:ab:
         8a:a8:11:2f:5f:c6:fc:69:d7:d7:30:78:49:25:7e:1c:1e:b0:
         b7:22:00:b9:04:38:c5:15:5f:43:7c:bf:a4:80:92:9d:ec:bc:
         b1:c2:07:c8:a3:6e:c4:16:a2:5e:a2:9d:b6:48:17:63:35:08:
         04:cb:09:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:35:45 2026 by rpki-client