Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
File:                     1-MUB87-tSa1OVubkwY90Dt6gXSE.mft (raw, json)
Hash identifier:          iDM7ncwN+3qwbgKbOgFYoKzWSSC766O6WNGY5cKqZe4=
Subject key identifier:   2E:97:2D:D6:1D:E7:7E:42:38:36:B2:2F:57:1B:66:61:AB:13:56:EA
Authority key identifier: F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21
Certificate issuer:       /CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
Certificate serial:       01A0005C312EE53B31A401E8126ECDFA4F24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
Manifest number:          15E4
Signing time:             Fri 14 Aug 2026 13:00:36 +0000
Manifest this update:     Fri 14 Aug 2026 13:00:36 +0000
Manifest next update:     Sat 15 Aug 2026 13:00:36 +0000
Files and hashes:         1: 1-MUB87-tSa1OVubkwY90Dt6gXSE.crl (hash: HKY5hQLEZRZyzY/dhcWYyPNGkpmeQpp3/HvszHp1yQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5c:31:2e:e5:3b:31:a4:01:e8:12:6e:cd:fa:4f:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
        Validity
            Not Before: Aug 14 13:00:36 2026 GMT
            Not After : Aug 15 13:00:36 2026 GMT
        Subject: CN=2e972dd61de77e423836b22f571b6661ab1356ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:61:13:52:aa:04:cc:f6:2a:e9:65:29:a5:b5:
                    fd:26:a4:a1:91:cf:e7:4f:5a:29:1d:18:26:c9:24:
                    e2:6f:96:9c:83:a7:62:ff:ec:9e:e5:aa:f8:45:38:
                    1c:23:14:87:c2:8c:d7:f6:e9:f0:d3:59:ec:bb:81:
                    7f:98:45:97:7b:50:bb:4a:9f:ac:55:16:58:ec:79:
                    cb:aa:18:1c:40:1b:e2:11:4d:1d:cf:1a:89:0e:d1:
                    1c:58:fb:0c:cd:0c:c2:c8:1a:7b:ff:4b:4d:5c:42:
                    c9:9f:9e:85:28:d4:5c:80:c2:81:70:9d:5c:24:16:
                    43:e2:8e:96:ae:25:83:b5:7e:21:35:27:61:06:52:
                    b0:ed:d2:00:4f:0f:94:27:6d:60:9a:05:d1:51:03:
                    22:f1:45:28:39:04:94:2d:32:6a:53:a0:85:e4:ec:
                    15:3b:fc:62:76:b2:e3:00:ce:df:17:46:37:32:90:
                    28:64:b5:a3:42:1d:d2:c1:54:f3:1a:46:7b:5d:30:
                    47:d2:59:0a:83:9e:63:e3:85:44:77:98:af:98:92:
                    d5:1f:1e:90:ef:72:2e:f8:27:e9:dc:90:86:12:7a:
                    48:fd:40:1b:30:1c:16:7a:8a:a5:4d:36:60:e3:53:
                    db:2c:ae:10:b2:80:60:5c:c1:b0:6d:22:e8:18:53:
                    af:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:97:2D:D6:1D:E7:7E:42:38:36:B2:2F:57:1B:66:61:AB:13:56:EA
            X509v3 Authority Key Identifier:
                keyid:F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:bb:62:69:82:7d:e4:f7:c9:47:60:75:b7:f6:56:95:19:d8:
         e0:25:9c:60:00:11:16:5c:a4:bf:40:72:ee:e3:1a:45:b9:db:
         b4:f2:f4:32:2d:b2:86:96:6e:ce:64:e4:d9:61:99:c3:37:2f:
         c4:ef:34:21:86:96:14:32:d0:da:61:12:5c:21:12:7a:18:f5:
         c9:7e:33:54:70:5f:94:81:0a:54:51:6f:dd:e3:d8:39:68:a2:
         9c:d0:ab:b2:77:28:45:06:90:8e:e4:c3:7e:d7:f8:3d:6c:02:
         ae:e1:53:a9:9d:55:cc:71:25:9b:16:93:ea:de:51:3f:5a:95:
         b6:a0:99:a3:1d:13:ee:5d:0a:2b:0e:82:1e:d9:f6:43:52:df:
         79:f2:f5:b1:58:97:39:ea:46:43:4e:2e:5a:dc:93:cc:8c:4a:
         7a:65:75:cd:d7:f3:f1:a2:a9:f9:ed:af:92:5d:d8:55:ab:52:
         e9:4e:45:42:e8:20:d6:14:38:ba:e7:dd:f1:68:1f:88:c6:9c:
         43:05:c7:d0:6d:7b:c3:6f:11:c8:64:7b:0b:53:37:dc:63:a4:
         ff:00:d8:9a:37:7c:f6:e7:d8:ba:5e:87:bc:6d:d2:96:71:34:
         fe:26:9a:c0:b5:c2:0f:58:16:4c:39:29:c5:1d:46:f2:53:9e:
         56:88:71:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:27:01 2026 by rpki-client