Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/e39f5f-2568-4222-b5ea-2a157f7cf3a3/1/5u3M-9t7nhk-y-gVL7WilruJ1-k.mft
File:                     5u3M-9t7nhk-y-gVL7WilruJ1-k.mft (raw, json)
Hash identifier:          H7h6GH9n3tW6U/2vQ3eixsJ6oiz1AqfG+nYTNSVRVUM=
Subject key identifier:   7B:0C:19:FC:B1:73:2B:19:2C:E4:45:CB:8C:B2:98:81:86:2A:32:9A
Authority key identifier: E6:ED:CC:FB:DB:7B:9E:19:3E:CB:E8:15:2F:B5:A2:96:BB:89:D7:E9
Certificate issuer:       /CN=e6edccfbdb7b9e193ecbe8152fb5a296bb89d7e9
Certificate serial:       01A03F3BDFE0364CBE56D17B741B58633C2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5u3M-9t7nhk-y-gVL7WilruJ1-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/e39f5f-2568-4222-b5ea-2a157f7cf3a3/1/5u3M-9t7nhk-y-gVL7WilruJ1-k.mft
Manifest number:          01F3
Signing time:             Wed 26 Aug 2026 18:01:23 +0000
Manifest this update:     Wed 26 Aug 2026 18:01:23 +0000
Manifest next update:     Thu 27 Aug 2026 18:01:23 +0000
Files and hashes:         1: 5u3M-9t7nhk-y-gVL7WilruJ1-k.crl (hash: mZIjKDV8y1enVQJdUXXkIjEurA9UNDgfUV8altmye60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/e39f5f-2568-4222-b5ea-2a157f7cf3a3/1/5u3M-9t7nhk-y-gVL7WilruJ1-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/e39f5f-2568-4222-b5ea-2a157f7cf3a3/1/5u3M-9t7nhk-y-gVL7WilruJ1-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5u3M-9t7nhk-y-gVL7WilruJ1-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 18:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3f:3b:df:e0:36:4c:be:56:d1:7b:74:1b:58:63:3c:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6edccfbdb7b9e193ecbe8152fb5a296bb89d7e9
        Validity
            Not Before: Aug 26 18:01:23 2026 GMT
            Not After : Aug 27 18:01:23 2026 GMT
        Subject: CN=7b0c19fcb1732b192ce445cb8cb29881862a329a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0b:d1:ec:ca:a0:a5:19:e6:9a:6d:e8:47:f8:
                    79:98:aa:0f:10:a6:06:a9:a8:8e:64:83:93:e8:e0:
                    70:49:9e:39:50:9e:f3:b4:64:77:ab:22:e4:25:71:
                    1b:b5:dd:05:66:38:ab:75:73:a8:21:34:e9:88:b1:
                    28:d9:a4:23:db:6b:d3:79:53:61:0c:83:8c:b9:6c:
                    f0:6c:1a:00:3b:50:8c:fd:bb:02:a4:40:82:3d:91:
                    ed:12:7f:45:b7:e5:f2:08:47:81:b3:2d:d8:14:a2:
                    93:ca:10:9b:63:7f:ce:5b:b2:71:f7:28:fc:7f:6d:
                    34:8a:d5:80:9f:63:f6:61:18:58:0d:e2:9b:33:e8:
                    7e:69:b2:40:c7:5d:16:e0:c8:c4:c9:f5:f9:f5:7f:
                    37:14:96:55:52:4b:aa:1c:96:ef:64:8b:28:ee:59:
                    68:e1:dd:bd:ce:90:e5:d9:6c:1d:3a:3b:78:be:5f:
                    66:8d:b2:8c:30:07:5c:e9:ba:86:14:d9:eb:03:0a:
                    c2:59:fb:8e:26:95:77:e9:45:d8:28:2c:83:f7:b6:
                    49:6b:15:73:e1:e4:a1:15:d1:e7:a3:30:95:0a:54:
                    69:dd:cb:8a:97:c8:cd:6d:e2:7b:a7:02:34:75:ee:
                    f6:7a:6c:8f:75:83:63:aa:47:04:27:47:a1:0e:2c:
                    db:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:0C:19:FC:B1:73:2B:19:2C:E4:45:CB:8C:B2:98:81:86:2A:32:9A
            X509v3 Authority Key Identifier:
                keyid:E6:ED:CC:FB:DB:7B:9E:19:3E:CB:E8:15:2F:B5:A2:96:BB:89:D7:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5u3M-9t7nhk-y-gVL7WilruJ1-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e39f5f-2568-4222-b5ea-2a157f7cf3a3/1/5u3M-9t7nhk-y-gVL7WilruJ1-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e39f5f-2568-4222-b5ea-2a157f7cf3a3/1/5u3M-9t7nhk-y-gVL7WilruJ1-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:d4:4f:b5:fb:7c:c2:e0:3a:b1:b0:4b:5e:c3:3b:cc:8f:16:
         d0:d8:4d:e1:8b:a4:6d:5c:2c:d0:8c:f4:f6:47:b9:ad:b0:73:
         58:ca:34:10:79:04:64:3f:b1:3c:20:38:d7:92:17:15:c1:1f:
         d6:df:48:1e:2d:b0:7d:9f:8b:96:25:bd:8a:d1:8a:f6:60:5c:
         5e:7a:9d:0c:03:07:9d:de:cc:8d:4b:06:93:ad:6c:e1:ae:5d:
         bb:ef:0e:8e:f7:64:0d:d3:d4:0a:88:d7:de:9f:eb:0d:0a:0d:
         42:69:49:dc:f6:b1:d1:62:8a:4b:00:b5:72:76:f6:03:ee:b2:
         b3:13:17:d3:b9:c5:3e:fd:00:26:0d:9e:ee:02:c2:ed:f7:82:
         a6:30:72:44:8d:cb:70:20:e5:b5:a6:ab:ed:fc:0b:5b:15:e3:
         3b:3e:85:a9:2c:00:de:f7:40:10:29:7a:48:a1:9c:bb:0c:25:
         ec:8d:1a:d5:81:f6:a7:93:7c:ed:22:3d:26:2f:ac:40:6a:9e:
         65:68:84:9a:4e:f2:30:89:0d:c6:60:cc:27:4c:25:9b:ce:83:
         a3:ec:cf:5e:bb:77:0d:fc:9b:2b:07:fa:64:fd:2e:bb:2a:08:
         3e:e9:40:28:16:71:1a:39:c1:ad:8b:48:7a:04:7a:eb:a1:ed:
         6d:63:11:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:02:37 2026 by rpki-client