Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
File:                     5qi5LUxZf2wET3clKFSPnJEpoNM.mft (raw, json)
Hash identifier:          I1VXhIbVrmCLmi2lBbjfKRLDKvJCg4AXIcEvRzlqvwE=
Subject key identifier:   56:48:8C:E9:31:B9:CC:9E:17:6D:DB:91:04:DB:A7:25:F8:58:8D:06
Authority key identifier: E6:A8:B9:2D:4C:59:7F:6C:04:4F:77:25:28:54:8F:9C:91:29:A0:D3
Certificate issuer:       /CN=e6a8b92d4c597f6c044f772528548f9c9129a0d3
Certificate serial:       01A14015037363D4BB9D8DAD96A451560763
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
Manifest number:          1783
Signing time:             Thu 15 Oct 2026 15:01:21 +0000
Manifest this update:     Thu 15 Oct 2026 15:01:21 +0000
Manifest next update:     Fri 16 Oct 2026 15:01:21 +0000
Files and hashes:         1: 5qi5LUxZf2wET3clKFSPnJEpoNM.crl (hash: HOYelI0hY7HndaqFiMQOwlqEBkmnMlCwnWDqGaig0nU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 15:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:15:03:73:63:d4:bb:9d:8d:ad:96:a4:51:56:07:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6a8b92d4c597f6c044f772528548f9c9129a0d3
        Validity
            Not Before: Oct 15 15:01:21 2026 GMT
            Not After : Oct 16 15:01:21 2026 GMT
        Subject: CN=56488ce931b9cc9e176ddb9104dba725f8588d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:66:17:9b:62:36:03:ff:78:51:e4:74:ac:b4:
                    ec:b6:86:0e:09:02:de:96:dc:43:7c:d8:68:79:41:
                    ce:80:56:21:3b:f2:3e:ec:65:72:a1:ea:1f:77:b8:
                    27:9a:9e:e6:fa:2b:ea:29:0a:97:ee:1f:69:b8:ce:
                    db:b1:af:c9:24:8d:dc:28:a8:ae:1a:16:ca:91:a8:
                    82:cb:0b:b4:8d:00:ec:74:3a:21:20:1b:36:ce:4c:
                    2b:10:d3:4c:19:b0:f6:dd:a9:e8:7f:17:f9:da:8d:
                    2f:fb:c6:4a:eb:91:02:20:b9:27:10:a7:31:03:91:
                    21:b0:94:7d:38:1e:6d:3f:ac:d6:39:57:8d:35:43:
                    06:c6:f3:9e:9d:11:b1:d1:99:e7:b3:6a:2a:b4:13:
                    dc:14:80:85:23:fb:5c:57:48:94:bf:c0:46:a6:5c:
                    77:ef:9d:2f:56:a6:39:0f:4f:f7:44:50:32:96:38:
                    1e:4a:0d:e9:1b:ac:4c:78:01:53:53:c6:2c:67:f4:
                    4c:0a:ac:47:99:c9:6b:55:85:6d:89:d8:5c:8b:9b:
                    01:21:86:e0:e9:80:7a:f6:a0:bc:94:fc:16:9e:0d:
                    83:27:34:f3:88:de:1a:6c:f4:b4:6c:4d:68:b4:8c:
                    6f:b4:dc:f7:9f:6d:34:2a:4e:46:7c:68:34:34:0c:
                    c2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:48:8C:E9:31:B9:CC:9E:17:6D:DB:91:04:DB:A7:25:F8:58:8D:06
            X509v3 Authority Key Identifier:
                keyid:E6:A8:B9:2D:4C:59:7F:6C:04:4F:77:25:28:54:8F:9C:91:29:A0:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:3a:3b:06:90:16:21:0b:93:73:89:20:1a:34:e5:8e:40:72:
         cc:b8:26:dd:2e:27:be:69:72:1a:13:28:f2:eb:fb:39:7d:aa:
         15:3f:9f:26:b2:c0:68:75:57:7e:8a:2f:70:6e:35:d5:b3:cd:
         2f:e0:18:c5:05:48:77:ab:a0:d0:41:2f:3d:80:4d:29:dc:79:
         c4:6e:4e:3c:f0:d8:c2:69:e3:9f:27:c2:e6:49:f4:11:4f:ce:
         29:a4:35:3d:71:dc:57:8b:86:42:c2:e5:7d:40:9d:62:46:b0:
         b7:3c:df:53:7f:f1:dd:d2:e6:71:4e:1d:8c:d7:04:52:7b:7b:
         05:c3:83:af:78:da:50:b4:02:54:66:e5:5d:7b:8e:f0:54:fd:
         94:59:01:fd:d2:4b:0c:5f:ba:05:db:e8:44:68:d7:76:da:17:
         88:9b:a1:a5:7a:6e:8b:fe:97:34:aa:f6:cf:39:c9:05:b1:91:
         74:8d:79:30:d6:23:28:62:43:13:3f:93:c6:af:ab:56:99:a4:
         ea:a8:e8:8b:da:09:34:d8:c9:1e:75:86:23:3e:93:0b:83:b5:
         62:26:35:04:62:96:57:cc:82:e8:ff:4d:03:52:b3:56:fa:59:
         8a:99:72:15:f6:62:83:cb:e9:30:c1:42:11:9b:f6:8a:33:2e:
         ed:e9:8c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:55:03 2026 by rpki-client