Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft
File:                     m5fCLQsziopFqhNFsJF7oNyXM5A.mft (raw, json)
Hash identifier:          1dOYAPYZxYv9SCAoVSnIzI/BenCWneK+xe4hAq+Ntbo=
Subject key identifier:   E3:95:35:98:1F:1B:F7:5F:BD:CB:42:8F:C0:1F:2C:7B:6C:17:42:6D
Authority key identifier: 9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90
Certificate issuer:       /CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
Certificate serial:       01A0D0ED5595E41B151B09969E8495EC683D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft
Manifest number:          16A8
Signing time:             Thu 24 Sep 2026 01:00:09 +0000
Manifest this update:     Thu 24 Sep 2026 01:00:09 +0000
Manifest next update:     Fri 25 Sep 2026 01:00:09 +0000
Files and hashes:         1: 61nXLWiLNthRTvWX64Fv7Aiwf_E.roa (hash: C6Ewv4dAXXufstpmAXr9+tKYxI6LwFVuw358jAoTr6Q=)
                          2: QlMsfkJfSm0fUcxiYGVPGdGD4fA.roa (hash: CRz3lsPjoW3JZTtpME0HEZ/likjgfqyzP+ZOWT4Oi2k=)
                          3: fGxSLO2uDpgERORQ864qGfhUGBs.roa (hash: 7oxHD74xcuwoKWUd/b/P3x2kf6o/UEgOD2PiJIUxQeU=)
                          4: m5fCLQsziopFqhNFsJF7oNyXM5A.crl (hash: RMicuPyfLRMELikrQkP3/bZ9CKzivcKV57VDUdF/m4o=)
                          5: z9fTcJ6BwHGafAxKgV8m2cAUPqs.roa (hash: HhotdTCLEhBn/XmQ52b2JJFeeMZwYQqW5x7lcVcO9bQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 01:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:ed:55:95:e4:1b:15:1b:09:96:9e:84:95:ec:68:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
        Validity
            Not Before: Sep 24 01:00:09 2026 GMT
            Not After : Sep 25 01:00:09 2026 GMT
        Subject: CN=e39535981f1bf75fbdcb428fc01f2c7b6c17426d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:35:12:d5:bc:c5:9b:fb:72:74:84:d5:f1:88:
                    b5:33:5e:ff:10:99:a5:4b:c7:2a:b0:cf:e2:84:b9:
                    97:3f:6b:ef:98:45:b9:49:15:49:43:89:f0:d0:45:
                    d8:a8:a1:70:e7:36:c6:d0:8f:07:3e:f1:90:3b:f9:
                    38:68:78:77:df:0a:f3:3a:06:37:29:65:a4:88:d7:
                    f2:8f:12:5d:13:ee:58:0d:e1:08:39:01:88:7a:99:
                    33:31:50:97:1d:03:6b:3d:d8:dd:f8:62:3e:ee:2c:
                    f5:7f:92:8e:b0:83:b1:a3:1b:09:0c:2e:aa:0e:72:
                    d2:a5:b1:5b:d8:ba:5f:c8:4b:4a:52:e6:e9:ba:92:
                    7f:37:2d:6a:e6:a7:fe:27:a2:c3:48:00:22:14:b9:
                    28:6a:ff:d7:fc:f3:f1:6f:9a:18:4f:25:56:33:d3:
                    53:a6:9c:43:28:9e:30:42:f6:43:fa:52:84:bd:41:
                    0a:c6:69:08:c3:5f:ab:88:9e:92:f6:fe:24:ef:b7:
                    5f:a9:77:7d:b4:28:3f:04:f2:66:c4:fe:ed:15:f1:
                    6a:7a:d0:15:0b:b8:ef:b3:1c:a2:e0:2f:ba:7c:ae:
                    86:20:47:81:af:f1:df:dd:de:f9:16:26:53:49:84:
                    17:cb:78:77:b6:52:f9:40:b2:88:20:da:ac:4c:f1:
                    a1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:95:35:98:1F:1B:F7:5F:BD:CB:42:8F:C0:1F:2C:7B:6C:17:42:6D
            X509v3 Authority Key Identifier:
                keyid:9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:b9:5b:b3:c1:39:47:cb:60:69:f9:1e:28:49:ae:be:76:3c:
         0b:7e:19:85:72:b7:92:bf:dd:5f:fc:9d:95:82:61:4d:0a:c6:
         7a:d2:cb:e2:d2:65:32:1f:97:ac:24:49:ea:7c:1e:54:09:d8:
         ef:08:07:2b:91:63:11:43:80:8f:54:51:9b:61:fa:e2:f1:40:
         60:d2:ce:e8:40:de:3f:22:fb:ba:77:87:44:50:1b:e2:91:8a:
         55:19:80:8e:be:be:93:04:6d:10:28:a3:8b:dc:32:43:e6:ad:
         86:fb:52:76:59:b0:1f:4e:48:66:4f:11:fa:7a:74:89:1c:af:
         9f:22:47:09:81:5c:e5:f9:f0:00:ac:dc:3b:08:d9:cc:1d:f0:
         a1:e3:f3:72:73:c0:56:5a:aa:ce:ce:68:6b:1b:48:6f:f8:94:
         fa:15:f0:d4:f2:4c:50:40:cb:cc:53:16:4b:fb:93:af:88:bf:
         c9:2d:e0:29:08:eb:d9:20:fd:0d:6c:e5:f9:c8:19:da:b4:8a:
         bd:a3:a6:02:8b:79:a4:af:00:c2:5d:d6:df:b9:0b:bc:91:9c:
         00:e8:26:9c:cc:1e:17:b0:3e:56:e3:07:b6:a5:41:d4:b9:c4:
         f8:a5:d2:f2:2d:f0:d7:0b:7a:63:9b:88:57:61:d1:04:16:9e:
         f4:df:12:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:33:21 2026 by rpki-client