Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.mft
File:                     2l7eZe_t7t-MigSyRaOl32OmnoQ.mft (raw, json)
Hash identifier:          vXbVAip5jS/dZAVo4ftqab+wCghtLnlyKlzCenRXeAo=
Subject key identifier:   C5:F2:2B:DB:D6:AC:C6:23:F4:D7:85:17:16:16:97:E1:8C:42:6A:D9
Authority key identifier: DA:5E:DE:65:EF:ED:EE:DF:8C:8A:04:B2:45:A3:A5:DF:63:A6:9E:84
Certificate issuer:       /CN=da5ede65efedeedf8c8a04b245a3a5df63a69e84
Certificate serial:       01A13DB8D3C98A8DC089AE783AAAB7C6E909
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2l7eZe_t7t-MigSyRaOl32OmnoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.mft
Manifest number:          1AA2
Signing time:             Thu 15 Oct 2026 04:01:25 +0000
Manifest this update:     Thu 15 Oct 2026 04:01:25 +0000
Manifest next update:     Fri 16 Oct 2026 04:01:25 +0000
Files and hashes:         1: 2l7eZe_t7t-MigSyRaOl32OmnoQ.crl (hash: V2f/2yrJxootStA4/kLORvoZR4Zu4f/CT8wWAaWWbzY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2l7eZe_t7t-MigSyRaOl32OmnoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 04:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:b8:d3:c9:8a:8d:c0:89:ae:78:3a:aa:b7:c6:e9:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da5ede65efedeedf8c8a04b245a3a5df63a69e84
        Validity
            Not Before: Oct 15 04:01:25 2026 GMT
            Not After : Oct 16 04:01:25 2026 GMT
        Subject: CN=c5f22bdbd6acc623f4d78517161697e18c426ad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:28:3d:30:b1:dd:c7:56:23:13:73:cb:99:94:
                    3a:52:bb:39:fd:3f:79:55:00:cf:f8:b3:11:52:fb:
                    ae:99:2f:f9:4f:46:2f:8f:6b:21:2a:08:71:96:a3:
                    de:45:47:7e:bc:a0:55:83:30:5b:7f:ad:08:98:50:
                    2e:12:3e:c1:b0:02:e5:0a:a7:73:58:37:7d:90:63:
                    c0:12:c4:f7:9a:7f:49:7b:d6:f8:c0:dc:b9:6f:02:
                    ad:9d:24:28:86:e9:a8:ed:2b:d5:0a:64:6e:c5:ef:
                    39:5e:2e:1f:0e:a2:c5:41:43:52:3c:88:02:e6:01:
                    c4:d5:4a:20:85:69:1e:89:b2:5c:cf:0e:26:ce:5e:
                    b6:e8:67:fe:6f:12:17:d2:b6:9e:7f:5e:dc:70:90:
                    a6:1f:42:a8:70:3b:59:4f:59:db:1a:68:39:8a:c7:
                    af:ba:27:af:0b:e1:61:2c:31:3d:d4:a9:24:c8:9b:
                    98:dd:97:aa:2d:46:43:9b:9a:2f:fa:1b:0e:04:21:
                    19:28:9f:c1:4b:5a:07:f5:29:b5:4b:32:46:3e:56:
                    f0:15:f4:c4:8e:d1:42:d7:79:4b:03:64:c9:2d:c1:
                    b0:ea:d9:c0:92:cb:21:37:d1:a6:77:c2:80:fc:a6:
                    e8:27:37:d8:d5:4d:00:1e:15:4d:b2:95:29:1b:88:
                    39:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F2:2B:DB:D6:AC:C6:23:F4:D7:85:17:16:16:97:E1:8C:42:6A:D9
            X509v3 Authority Key Identifier:
                keyid:DA:5E:DE:65:EF:ED:EE:DF:8C:8A:04:B2:45:A3:A5:DF:63:A6:9E:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2l7eZe_t7t-MigSyRaOl32OmnoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:28:14:5b:db:ea:e1:3c:09:a9:67:55:ff:83:5f:58:b3:26:
         32:1d:08:02:44:64:1f:42:30:08:ff:4d:42:39:44:e1:29:3c:
         73:75:4b:a3:13:d3:c8:cd:3f:3c:9f:df:dc:b8:85:46:5b:10:
         7c:72:73:31:a9:a5:70:78:77:8c:a8:bc:f3:22:b7:c0:35:36:
         a8:60:88:09:be:3e:cf:21:69:4d:35:99:da:d0:10:47:1c:13:
         a0:3e:1f:bc:f7:e9:29:fe:05:5e:ec:2f:26:2a:40:b2:8f:20:
         fe:3e:51:83:0b:c0:95:3d:88:f8:65:7d:1f:80:13:50:01:6f:
         86:c6:9e:3c:64:f9:df:f3:87:13:72:95:29:3d:31:d2:69:18:
         f7:6e:24:a0:57:94:63:d2:fb:7b:44:81:8e:92:6e:eb:e8:37:
         fe:28:d1:dc:41:cc:a7:e1:39:15:ea:13:43:0e:60:d5:e4:58:
         ce:ea:d5:e8:d9:be:6f:c7:86:93:f4:59:e2:c3:18:06:67:28:
         3f:d5:4c:42:10:b9:fc:95:da:6d:4d:1d:48:2e:48:3c:f6:89:
         53:5a:19:37:23:63:16:e6:da:d2:64:72:8b:36:97:4e:90:7c:
         f6:22:ec:3b:63:64:e6:5f:cd:fa:d1:cd:2e:c6:dc:56:10:a8:
         04:1e:36:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----