Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft
File:                     E5cPuUba-bnv47YJ8onK4Bn8YYw.mft (raw, json)
Hash identifier:          i1EVs5a0RqdzS7IQszJlx9k23PQzKjH79vTWK110kds=
Subject key identifier:   E5:A7:30:92:32:D8:88:98:6D:8E:A6:22:54:26:E8:2D:AC:47:24:56
Authority key identifier: 13:97:0F:B9:46:DA:F9:B9:EF:E3:B6:09:F2:89:CA:E0:19:FC:61:8C
Certificate issuer:       /CN=13970fb946daf9b9efe3b609f289cae019fc618c
Certificate serial:       01A0024A941F53620C75D1A7AF206F44F7AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E5cPuUba-bnv47YJ8onK4Bn8YYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft
Manifest number:          145C
Signing time:             Fri 14 Aug 2026 22:00:36 +0000
Manifest this update:     Fri 14 Aug 2026 22:00:36 +0000
Manifest next update:     Sat 15 Aug 2026 22:00:36 +0000
Files and hashes:         1: E5cPuUba-bnv47YJ8onK4Bn8YYw.crl (hash: Wuvw6aRL0lgWrNJbegCrNjSTz2ij2hK1qaCjwHMyfDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E5cPuUba-bnv47YJ8onK4Bn8YYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4a:94:1f:53:62:0c:75:d1:a7:af:20:6f:44:f7:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13970fb946daf9b9efe3b609f289cae019fc618c
        Validity
            Not Before: Aug 14 22:00:36 2026 GMT
            Not After : Aug 15 22:00:36 2026 GMT
        Subject: CN=e5a7309232d888986d8ea6225426e82dac472456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:da:2b:83:0e:0a:6b:e7:20:2a:38:23:b5:ad:
                    91:4e:c1:26:2b:96:13:76:80:9d:c6:00:2e:91:0d:
                    09:2e:44:b9:d6:9b:90:6d:d8:a7:66:fa:f9:33:25:
                    b8:bf:f6:7c:f2:97:0d:79:49:15:35:14:a5:58:b2:
                    ec:0d:78:d7:4c:b4:2e:f4:be:a5:f8:e4:43:cd:06:
                    ea:f9:43:f1:e1:cc:3a:33:e3:19:ff:01:07:dc:d9:
                    74:13:bb:d1:f7:b1:9c:71:c7:c3:49:24:2d:23:ce:
                    71:83:a6:8b:9e:55:f1:f2:09:a8:6f:c0:85:d7:8e:
                    64:d4:c4:63:9b:1e:5a:c4:01:89:3b:77:d1:96:a1:
                    f0:51:69:7e:fb:92:eb:0b:80:2c:b5:0d:99:24:0a:
                    dc:22:bb:8e:0f:da:10:6e:b4:69:18:b8:61:01:34:
                    2f:45:8b:b7:3c:8f:bf:ec:1b:1d:b3:25:80:d8:f6:
                    d1:21:4c:bf:93:24:cf:fe:26:2f:e5:b7:53:9d:0b:
                    20:0c:1a:a0:e6:0b:11:27:c1:cf:0c:fa:b7:7d:dc:
                    cb:ca:1b:a2:e4:05:be:4c:48:c2:93:ea:52:da:d7:
                    2a:0f:0e:52:a8:e0:ed:86:cb:e8:f7:ac:15:71:82:
                    81:11:95:7b:75:04:91:1c:01:80:02:ce:e5:90:7c:
                    d4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A7:30:92:32:D8:88:98:6D:8E:A6:22:54:26:E8:2D:AC:47:24:56
            X509v3 Authority Key Identifier:
                keyid:13:97:0F:B9:46:DA:F9:B9:EF:E3:B6:09:F2:89:CA:E0:19:FC:61:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5cPuUba-bnv47YJ8onK4Bn8YYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:b5:0e:f6:73:dc:8d:7b:3c:79:5a:e9:bf:33:20:1a:0c:eb:
         28:f8:53:fb:c6:a3:9f:d2:0d:5c:c8:89:0e:d9:9f:97:23:35:
         51:1c:56:e3:fb:ea:27:d4:0b:4b:e2:9f:51:92:c0:33:e5:64:
         8e:36:1d:af:d2:2f:81:4c:78:37:0e:22:ff:65:87:f6:62:d3:
         ba:69:7d:d9:8a:31:d7:fe:c4:53:c8:ad:47:9e:8d:9b:24:1b:
         e3:21:f7:63:8c:0c:b4:c1:55:1d:06:ae:6d:40:a5:0c:e9:d3:
         04:08:35:3c:cb:62:91:32:32:a1:59:1d:0a:29:11:dc:7e:e3:
         ad:6f:1a:af:a5:ae:26:00:44:ef:c9:2e:5f:08:a2:44:dd:9e:
         b1:72:ad:3e:da:38:53:c3:6f:e7:0a:0e:d3:78:64:77:56:6f:
         cc:9c:0d:93:81:81:64:8a:ef:b3:ab:29:bd:c6:74:26:23:96:
         21:54:3b:1c:ad:3f:59:a6:96:7e:83:fb:6e:d4:0b:75:66:b9:
         99:ca:b5:5d:63:75:d4:06:6d:da:c1:b2:6b:fe:c6:50:79:d2:
         60:a4:03:83:04:4b:a9:3b:a3:94:b6:33:6a:b3:ff:e4:42:f3:
         11:c7:01:a6:7c:77:02:1b:96:78:11:97:7f:c2:41:26:6f:48:
         26:b1:e6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:31:32 2026 by rpki-client