Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
File:                     2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft (raw, json)
Hash identifier:          Wc0VlMwoLG9DXLCUb60+bwF/8SD1H8OQFviD3uWAj5Y=
Subject key identifier:   9F:D2:A2:5B:AC:4A:88:D1:19:6C:09:DA:A1:CF:1F:0B:E7:76:76:81
Authority key identifier: D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3
Certificate issuer:       /CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
Certificate serial:       01A14760E7B5BFB25190DB3C638EB1074FF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
Manifest number:          1AA6
Signing time:             Sat 17 Oct 2026 01:01:35 +0000
Manifest this update:     Sat 17 Oct 2026 01:01:35 +0000
Manifest next update:     Sun 18 Oct 2026 01:01:35 +0000
Files and hashes:         1: 2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl (hash: OTv55jbYBU1Q7d9h0jKlsrCKUOVGBI4bZSXuBjuCUgI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 20:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:47:60:e7:b5:bf:b2:51:90:db:3c:63:8e:b1:07:4f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
        Validity
            Not Before: Oct 17 01:01:35 2026 GMT
            Not After : Oct 18 01:01:35 2026 GMT
        Subject: CN=9fd2a25bac4a88d1196c09daa1cf1f0be7767681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:85:ec:28:ce:e5:01:0b:04:ef:45:7a:85:0d:
                    52:e2:5f:73:e2:17:f7:3e:90:64:33:d5:26:c4:c9:
                    06:23:e1:79:d2:18:68:9a:bd:54:eb:79:fe:a3:7c:
                    71:d5:32:78:cd:ae:af:82:c8:25:91:8a:8f:7b:b7:
                    11:31:35:ee:e6:26:89:83:59:29:a3:c6:ee:db:9c:
                    64:5e:a8:eb:88:6e:c3:04:1f:02:9c:ed:16:4e:52:
                    4f:f7:27:67:89:93:f3:5d:6c:09:98:82:d5:d3:ff:
                    f5:a2:bd:2f:e8:e8:e1:d7:f7:c9:b5:d9:f8:0d:e2:
                    21:98:52:f8:f3:35:4a:0c:3f:8f:ee:00:83:41:1b:
                    07:6d:18:39:73:00:66:c7:8d:71:dc:26:b2:0d:3c:
                    7c:ec:81:79:d7:f1:4e:6e:cf:ee:9f:70:52:88:9a:
                    42:ae:8e:06:4f:ec:7b:e7:10:25:52:aa:73:2e:4f:
                    04:1b:65:b6:fc:68:34:fa:f9:b7:b1:ec:be:7b:00:
                    7f:2f:46:43:d7:0a:08:db:56:3e:51:37:b0:f8:49:
                    97:98:d1:10:be:1d:89:ed:15:a4:b2:94:40:91:7c:
                    f4:c0:6f:53:4f:f0:3b:5e:88:7f:60:4f:f8:55:29:
                    41:24:08:ce:32:6e:2f:36:98:78:4b:eb:7d:31:7f:
                    b8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D2:A2:5B:AC:4A:88:D1:19:6C:09:DA:A1:CF:1F:0B:E7:76:76:81
            X509v3 Authority Key Identifier:
                keyid:D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:e8:50:17:2f:42:11:66:c4:d9:72:69:60:6e:d6:55:ce:53:
         95:f4:92:4b:f2:90:5f:9e:f1:3c:8c:75:32:74:99:12:51:be:
         6a:59:54:5d:ec:00:52:9c:ce:91:88:57:64:0b:50:9f:52:0a:
         47:a2:1a:bc:b0:8f:cd:8b:b8:19:60:7b:75:da:34:45:cf:46:
         aa:b5:75:16:9a:f7:57:eb:cc:dd:ec:00:5d:0c:0f:c5:2e:62:
         74:a7:5b:e9:23:f3:6e:dc:d4:50:c0:b7:b4:6b:a2:ea:17:47:
         1d:30:81:9d:3b:3e:a3:50:85:77:27:56:f5:b1:ed:d8:7f:e8:
         c4:77:e7:e3:c4:1e:af:f1:38:3f:4b:01:51:06:2d:53:13:8f:
         8f:87:22:0a:1e:4c:ba:a4:ab:55:5a:d8:0d:e6:6f:6a:66:64:
         34:fa:45:17:a4:24:18:e2:35:05:96:13:6a:ab:32:c7:fd:bf:
         3f:fe:90:f3:5d:80:69:d2:cf:56:f0:0d:91:06:5b:75:c8:84:
         73:cd:eb:83:36:65:26:6c:75:1b:e2:65:c4:34:b7:f3:fd:99:
         6d:d5:12:ef:2f:80:e9:4a:8f:e9:fe:c2:e4:79:c7:8a:7f:0f:
         1b:cb:b3:84:15:ce:8e:80:ca:c6:49:38:c0:37:4b:09:76:e1:
         33:1f:66:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:50:55 2026 by rpki-client