Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
File:                     5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft (raw, json)
Hash identifier:          njNbdkRzeanChlRQiC96NiIgHfAHVsmt79qhXFOM4Ww=
Subject key identifier:   D9:DC:2A:A7:EF:D0:96:B2:5C:21:9E:CA:C1:34:B7:02:62:10:B7:7C
Authority key identifier: E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20
Certificate issuer:       /CN=e4c7482434a457b048b7d6261ddd8095c5c09020
Certificate serial:       01A13DB887E66AD79ACC6E964F2465333B24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
Manifest number:          0CD6
Signing time:             Thu 15 Oct 2026 04:01:05 +0000
Manifest this update:     Thu 15 Oct 2026 04:01:05 +0000
Manifest next update:     Fri 16 Oct 2026 04:01:05 +0000
Files and hashes:         1: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl (hash: unQo4La/EJWQpaAMH/OymTwyUa9q2AbuAhsZgGc9p1g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:b8:87:e6:6a:d7:9a:cc:6e:96:4f:24:65:33:3b:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4c7482434a457b048b7d6261ddd8095c5c09020
        Validity
            Not Before: Oct 15 04:01:05 2026 GMT
            Not After : Oct 16 04:01:05 2026 GMT
        Subject: CN=d9dc2aa7efd096b25c219ecac134b7026210b77c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:70:99:a8:04:d7:7a:93:cd:da:31:9c:16:c2:
                    d8:d4:1a:6a:e2:cf:a9:16:4d:c3:1b:db:74:33:2f:
                    6f:8a:06:42:c8:eb:f2:b2:bc:c4:83:0e:68:eb:0b:
                    9c:ec:5c:00:21:3c:31:5e:67:40:5c:2b:a8:52:78:
                    7a:71:12:aa:3b:5b:9f:ba:f8:95:ef:fe:e0:76:23:
                    37:f5:ee:08:27:e0:c6:18:a6:b5:6a:4d:df:af:c8:
                    86:cc:dc:67:b6:e4:63:de:6a:48:b5:a0:6c:7f:6a:
                    1c:75:a8:0a:7f:10:6e:66:ed:1d:e3:47:c0:cf:84:
                    dd:fb:8c:97:04:65:a7:1d:d0:9e:d7:38:01:2f:24:
                    94:20:dc:f7:e6:c4:5d:24:86:3e:b3:72:be:2f:ce:
                    03:0d:d6:18:d5:40:97:8b:66:15:73:e2:ae:26:eb:
                    7a:81:f1:65:38:14:e8:26:cb:09:8f:ee:00:78:11:
                    f3:95:2b:ae:61:e6:14:d2:1e:18:90:57:49:e3:45:
                    f6:78:6c:7d:fc:99:27:d8:b9:df:14:1e:2a:5f:67:
                    6b:ba:7b:45:c6:37:5e:5b:37:20:88:76:6a:a3:86:
                    db:98:79:27:6e:84:97:77:c9:a4:9d:77:64:d9:21:
                    1e:69:00:2a:84:6a:43:24:f4:b5:ac:6b:c0:ea:28:
                    1d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:DC:2A:A7:EF:D0:96:B2:5C:21:9E:CA:C1:34:B7:02:62:10:B7:7C
            X509v3 Authority Key Identifier:
                keyid:E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:16:12:7c:8c:26:a2:59:6c:2c:30:07:54:2d:29:95:de:3e:
         5e:ea:64:46:f2:06:63:d0:b6:45:34:08:4e:55:31:d8:7b:d4:
         c9:e8:3a:9a:e9:5e:86:3b:d9:14:96:10:be:c2:9e:ac:10:e8:
         ab:ca:d1:c4:c8:96:77:8e:05:4b:cd:67:52:5d:bb:a5:48:58:
         a0:11:c7:5c:76:74:34:70:5c:20:a4:14:7f:55:57:b7:62:63:
         90:0f:30:f1:45:ae:cb:3f:79:57:b1:4e:94:af:ce:bf:9e:10:
         5a:5d:a4:71:76:db:a1:c8:42:86:c6:8d:49:ba:74:4b:56:11:
         4d:20:74:fe:54:22:cb:7d:25:85:97:73:7b:e0:5f:98:f1:23:
         25:40:d7:62:aa:dd:3d:8e:49:f4:cb:32:84:24:0c:e0:cf:33:
         21:34:e1:87:c7:54:74:28:1c:b9:c8:8d:25:cf:7f:c6:a1:0d:
         2f:69:d0:cb:aa:d5:29:ed:e3:38:42:d0:94:f3:18:a5:3a:b6:
         0d:99:ee:ad:28:51:40:a0:a1:89:1e:8c:a4:23:e5:f6:15:1e:
         d1:d3:88:79:1a:95:dd:5c:e0:bd:07:40:24:57:78:ac:b2:63:
         42:0f:17:6d:58:42:ee:90:cf:7f:e7:2c:7d:49:83:ac:c4:29:
         10:60:c3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:25 2026 by rpki-client