Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
File:                     5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft (raw, json)
Hash identifier:          eTUcPZ2WjwI3jJJd4aCk3/e2wzLdraqbtfZZa3qPD2w=
Subject key identifier:   23:F4:01:84:26:53:DD:C3:25:AC:5A:2D:7D:FE:60:33:7E:4C:EB:D5
Authority key identifier: E6:B9:1B:19:F4:BD:BD:6F:F1:D7:F3:72:D3:A0:DD:13:90:05:00:06
Certificate issuer:       /CN=e6b91b19f4bdbd6ff1d7f372d3a0dd1390050006
Certificate serial:       01A13ECBAA1172CBE76D5D328CB68F8D0B5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
Manifest number:          1184
Signing time:             Thu 15 Oct 2026 09:01:36 +0000
Manifest this update:     Thu 15 Oct 2026 09:01:36 +0000
Manifest next update:     Fri 16 Oct 2026 09:01:36 +0000
Files and hashes:         1: 5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl (hash: n3XIL4WomWnDBM58GYhdtZWgLcEMn734cmuNrXLlrsE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:cb:aa:11:72:cb:e7:6d:5d:32:8c:b6:8f:8d:0b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6b91b19f4bdbd6ff1d7f372d3a0dd1390050006
        Validity
            Not Before: Oct 15 09:01:36 2026 GMT
            Not After : Oct 16 09:01:36 2026 GMT
        Subject: CN=23f401842653ddc325ac5a2d7dfe60337e4cebd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:45:58:65:8b:5f:28:03:f7:cd:0d:83:79:f7:
                    cd:8a:76:45:de:51:7b:df:be:7a:55:fe:5e:6f:36:
                    d3:33:c5:b8:c1:0a:a0:2e:0b:83:09:93:b4:c8:6f:
                    f3:26:95:d5:9d:0b:f4:5b:95:61:7d:4c:9c:f4:6a:
                    5a:70:c3:ce:f9:26:17:a4:51:a0:3b:80:25:2c:81:
                    8a:ab:df:19:51:d5:a6:a4:36:4e:98:bb:07:a9:61:
                    88:ac:25:ce:33:99:7a:df:bb:e2:84:7e:98:ec:f3:
                    f9:f4:72:ab:6b:b5:92:19:06:3f:c7:4c:5a:a0:e6:
                    83:d1:fa:a1:ca:a2:2b:53:f3:21:18:cf:8a:00:92:
                    54:00:4c:2a:c8:3b:59:4b:3f:74:74:90:1e:ba:1e:
                    83:21:37:54:bf:bc:8c:50:38:7f:68:7c:a0:59:4d:
                    46:32:8d:d4:82:e9:d5:cd:24:fe:d2:d8:39:b5:a8:
                    04:e2:4c:7d:59:76:4b:95:2e:39:07:55:3a:c5:96:
                    f8:25:de:16:e6:d1:14:ee:6b:ff:fe:09:6e:a1:bc:
                    3c:8b:7a:8d:cf:fb:91:19:ce:9f:3a:cc:ff:c4:74:
                    b9:96:fe:1a:3e:de:8c:33:d7:87:db:91:0d:c9:0f:
                    a8:1e:c3:ec:50:e6:aa:56:90:12:8f:c6:4e:b7:4e:
                    da:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F4:01:84:26:53:DD:C3:25:AC:5A:2D:7D:FE:60:33:7E:4C:EB:D5
            X509v3 Authority Key Identifier:
                keyid:E6:B9:1B:19:F4:BD:BD:6F:F1:D7:F3:72:D3:A0:DD:13:90:05:00:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ec:03:e7:f2:66:e2:e8:19:36:5f:c1:5f:ee:67:cc:c7:55:
         33:9d:cf:2c:01:8c:71:5d:c0:62:5e:25:b1:9e:76:99:66:af:
         f4:25:1c:c1:c1:80:50:f9:51:7d:c5:98:13:cf:f3:19:cc:67:
         44:93:01:b3:43:0f:f1:15:75:36:7c:11:85:b1:47:c4:b8:50:
         a0:9f:58:db:7d:32:55:5a:d2:52:da:cc:e7:1a:0d:b4:67:0a:
         95:46:4c:bc:05:f5:36:c0:8f:3e:b3:a9:9f:13:99:0b:59:65:
         0d:fb:d9:a7:04:e3:ee:24:c3:9f:56:8e:30:1a:19:98:1c:c7:
         28:62:a3:4d:6c:2d:65:14:bb:73:34:23:f1:a9:f6:11:e1:23:
         a6:24:d1:b5:95:1b:75:d9:02:b4:45:fb:ad:4e:62:9a:ce:5e:
         b5:bf:26:5e:08:4d:13:8d:67:30:8a:86:3b:a6:96:47:31:2d:
         ec:63:07:0c:c8:fc:66:4c:64:c9:a5:18:f4:94:c2:87:b8:61:
         d4:4d:a4:2f:85:8d:9c:b3:12:ff:be:e9:cc:3d:e8:f4:ee:cc:
         93:e2:00:ca:1c:cd:92:ec:d9:e8:0d:a2:bc:e7:05:3b:16:4d:
         81:de:9c:5a:8d:01:ad:13:da:58:f1:89:3d:38:43:06:4f:09:
         5d:91:07:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:15:44 2026 by rpki-client