Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/b73f54-9a89-4d26-b438-4169c1f263b7/1/5BOmx2sTFEjjCg3GojAAdHAUAzo.mft
File:                     5BOmx2sTFEjjCg3GojAAdHAUAzo.mft (raw, json)
Hash identifier:          Z3iWpv5xBLkTa+s9L/CjNw6CLXL24+bJahvTqvWCqK8=
Subject key identifier:   A6:53:27:08:9D:3E:73:F3:1C:F7:B3:7B:32:82:4B:88:7C:E7:F2:55
Authority key identifier: E4:13:A6:C7:6B:13:14:48:E3:0A:0D:C6:A2:30:00:74:70:14:03:3A
Certificate issuer:       /CN=e413a6c76b131448e30a0dc6a23000747014033a
Certificate serial:       01A0D727A99B61E2E3CDF98FA66D4C6D745F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5BOmx2sTFEjjCg3GojAAdHAUAzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/b73f54-9a89-4d26-b438-4169c1f263b7/1/5BOmx2sTFEjjCg3GojAAdHAUAzo.mft
Manifest number:          E9
Signing time:             Fri 25 Sep 2026 06:01:35 +0000
Manifest this update:     Fri 25 Sep 2026 06:01:35 +0000
Manifest next update:     Sat 26 Sep 2026 06:01:35 +0000
Files and hashes:         1: 5BOmx2sTFEjjCg3GojAAdHAUAzo.crl (hash: 58p1afUUaVP1f87phWnNo5lLZzemVwSt5n3B6loexP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/b73f54-9a89-4d26-b438-4169c1f263b7/1/5BOmx2sTFEjjCg3GojAAdHAUAzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/b73f54-9a89-4d26-b438-4169c1f263b7/1/5BOmx2sTFEjjCg3GojAAdHAUAzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5BOmx2sTFEjjCg3GojAAdHAUAzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 06:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:27:a9:9b:61:e2:e3:cd:f9:8f:a6:6d:4c:6d:74:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e413a6c76b131448e30a0dc6a23000747014033a
        Validity
            Not Before: Sep 25 06:01:35 2026 GMT
            Not After : Sep 26 06:01:35 2026 GMT
        Subject: CN=a65327089d3e73f31cf7b37b32824b887ce7f255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0d:93:16:a1:78:d7:ef:82:60:34:27:35:4b:
                    74:5c:53:94:e4:3e:d3:47:71:bf:89:60:a7:7d:8b:
                    e8:86:6a:11:37:cf:f6:c4:6b:10:46:d9:7e:a1:71:
                    8c:6a:6a:16:9a:90:08:46:fc:09:6e:25:15:1e:95:
                    67:fd:57:bd:f2:0a:38:a3:35:ea:bd:4a:62:d3:27:
                    d8:ed:08:80:5c:0c:0e:d2:d7:49:5d:aa:6c:05:bf:
                    2f:1b:8f:fc:86:83:4a:de:b0:84:e5:e1:d5:8d:9b:
                    bf:f5:93:6b:c7:33:18:13:a2:b0:19:ce:14:c9:19:
                    5c:ad:42:e6:97:a6:74:e2:7c:8d:7f:9d:ef:e9:6e:
                    12:f6:0f:42:3a:b0:1b:24:13:71:7d:c4:60:01:bd:
                    15:4c:c9:d7:ea:9f:51:2b:00:80:27:5a:1f:f1:ca:
                    73:1f:d2:0c:c3:ca:93:12:b3:98:f8:2a:c4:80:d7:
                    f1:6e:af:3f:cd:9d:b1:54:60:c9:23:65:c1:a6:a6:
                    e4:c5:0c:f6:e3:1f:51:69:7b:ac:04:ed:5d:bb:1f:
                    c5:f6:ad:24:ba:1c:06:f4:d6:c0:1c:94:14:09:50:
                    be:53:6d:7c:71:41:4a:2e:fb:10:99:f1:fe:e7:39:
                    5b:40:8d:30:01:c6:4d:c9:a7:eb:e4:b7:2d:6e:e7:
                    b3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:53:27:08:9D:3E:73:F3:1C:F7:B3:7B:32:82:4B:88:7C:E7:F2:55
            X509v3 Authority Key Identifier:
                keyid:E4:13:A6:C7:6B:13:14:48:E3:0A:0D:C6:A2:30:00:74:70:14:03:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BOmx2sTFEjjCg3GojAAdHAUAzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b73f54-9a89-4d26-b438-4169c1f263b7/1/5BOmx2sTFEjjCg3GojAAdHAUAzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b73f54-9a89-4d26-b438-4169c1f263b7/1/5BOmx2sTFEjjCg3GojAAdHAUAzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:b3:f3:6a:47:ae:29:a0:96:68:80:24:d0:05:4c:6b:c7:7e:
         00:e8:be:7b:70:87:8c:d1:e4:92:ce:0a:d0:0a:c0:8e:a1:04:
         d1:83:ce:2f:ac:c6:21:fe:0a:1a:e7:56:20:16:ad:74:0e:6a:
         58:9d:29:4d:7d:58:78:89:05:f4:06:38:84:87:33:36:08:0f:
         77:67:5e:09:44:a5:77:74:ca:c5:eb:72:4f:bf:4b:95:7e:f0:
         df:1a:98:b2:c9:05:c1:f4:bf:fc:39:94:04:a0:73:13:cb:e8:
         5b:c3:50:02:88:1b:91:5e:11:1f:13:fb:ea:86:d2:6a:01:b4:
         cb:4a:cb:5a:34:4f:39:90:34:18:fe:59:5b:d3:f3:9f:6f:a7:
         c0:04:af:65:97:57:45:70:dd:dd:50:4a:44:8c:c5:e2:bc:1e:
         63:73:be:2d:72:4f:66:12:58:a0:68:23:37:36:5c:ce:3a:4e:
         6e:42:53:03:b9:05:3d:0e:ac:7d:95:d7:ff:64:35:47:75:90:
         d3:2d:65:b6:07:0c:bd:02:b3:d2:40:a9:71:1f:ea:c5:f4:9a:
         60:2d:08:da:0d:48:7d:9b:96:bc:53:80:33:61:fb:2b:83:b0:
         5a:b7:92:f1:ca:b4:61:fb:15:e0:fc:88:f7:89:a8:1e:38:07:
         c7:69:07:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:21:37 2026 by rpki-client