Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
File:                     5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft (raw, json)
Hash identifier:          0HsN0NnZBxmhzCzNK6CHJKftJ8XBkEgAxiTGlLUueUs=
Subject key identifier:   82:31:B6:A1:C4:22:10:78:84:B0:9F:8B:70:19:A9:8D:E2:D7:73:0B
Authority key identifier: E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97
Certificate issuer:       /CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
Certificate serial:       01A0CE91EAA1DAD249EA4E4B49C3CAF43032
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
Manifest number:          154B
Signing time:             Wed 23 Sep 2026 14:01:04 +0000
Manifest this update:     Wed 23 Sep 2026 14:01:04 +0000
Manifest next update:     Thu 24 Sep 2026 14:01:04 +0000
Files and hashes:         1: 5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl (hash: xUOOOoYKv6WU17EC//es9fzpeaTAbzDWMnJX+PbuhJU=)
                          2: IFreR7G3pVUxUHJmvWKSmdyyxV4.roa (hash: 1l0It7YxkUDUXasb2TijXHU9KlO973Zbw1AspnDQIIE=)
                          3: XvO3KugGyIUqy8DdZrWXqALiZv8.roa (hash: yUk7+RcCJLoQMsjAjhgKG5a6qMpWaeW1ZTTyneRurSc=)
                          4: ceyOuOPjIFLM94nq_gIZQX5eqOk.roa (hash: vIPUa1tUzFrPLIwsoGGabQ0ECJy+Q9gJ/RWv+H6Fq+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:91:ea:a1:da:d2:49:ea:4e:4b:49:c3:ca:f4:30:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
        Validity
            Not Before: Sep 23 14:01:04 2026 GMT
            Not After : Sep 24 14:01:04 2026 GMT
        Subject: CN=8231b6a1c422107884b09f8b7019a98de2d7730b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:78:3f:30:9e:b7:15:9f:01:a6:bc:7a:fc:9f:
                    d1:b1:db:28:a1:04:7b:96:55:f3:f6:46:de:31:86:
                    07:9a:05:5c:c8:68:cc:21:e7:63:26:8e:a7:2d:3f:
                    fc:b1:ad:20:cd:84:31:a0:b6:10:47:bf:8c:d5:79:
                    26:6c:ae:d0:ee:34:8b:30:79:35:5d:a1:b8:7c:53:
                    58:2a:12:96:63:dc:e9:0f:03:6f:04:eb:4f:d9:8e:
                    d5:fc:2a:3a:d5:1c:e8:1c:b4:fd:b9:d8:2b:9b:46:
                    4b:ff:3a:0d:c6:f4:55:c7:a4:28:45:83:15:f8:18:
                    8e:a6:2f:fc:4e:4c:12:db:3c:34:f2:64:cb:c8:2b:
                    28:9f:38:df:54:b0:fd:5f:a5:1e:ea:d4:f5:ad:53:
                    a4:82:fe:c1:56:91:97:4d:6e:bf:f2:dd:58:4f:02:
                    a2:da:2e:15:2d:eb:c2:2d:1c:bf:e6:4a:b9:b0:ae:
                    2a:43:ad:03:4d:dc:d6:c9:01:bd:4b:e7:c2:32:f9:
                    50:87:5c:49:32:bd:4a:16:8f:78:b2:06:b5:d4:f2:
                    f9:ad:77:45:c1:07:2c:7d:1c:30:17:eb:3d:c2:c5:
                    c2:66:d7:1c:37:55:7a:c6:53:fb:66:77:8a:3b:b9:
                    23:92:46:9b:34:56:75:9e:0d:5b:6f:e6:f4:83:da:
                    15:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:31:B6:A1:C4:22:10:78:84:B0:9F:8B:70:19:A9:8D:E2:D7:73:0B
            X509v3 Authority Key Identifier:
                keyid:E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:d4:dd:e3:b9:c5:34:b9:83:e3:c1:9b:39:14:2a:fa:1f:99:
         93:65:ac:cd:3e:fa:88:43:28:ad:c8:3d:6a:8e:9f:19:83:3f:
         bf:21:bf:d5:bd:ae:8c:d0:60:93:45:bd:72:b2:f4:f3:d5:fc:
         37:88:59:3c:01:bc:3a:6f:d0:e2:1f:35:e0:b4:5d:e4:a1:1b:
         c4:5a:4d:fd:c5:75:40:a6:9a:be:36:e8:d9:8f:d9:86:a6:34:
         6f:55:9e:3b:91:61:20:0a:af:a0:0d:17:3b:e3:f7:a7:58:85:
         53:0f:b1:3a:2b:59:55:84:88:59:21:99:6f:09:a4:36:ca:c6:
         cd:7d:bf:a3:d8:94:7c:41:53:af:59:08:be:b5:2c:0a:f7:6e:
         46:63:c2:29:fb:0e:76:75:49:2e:7a:50:da:f5:4c:83:ab:1c:
         ed:64:ef:0b:43:87:64:1e:05:12:80:c0:29:c1:1d:9a:48:d4:
         0d:a7:c7:60:54:b8:5e:3e:16:0b:eb:be:4a:b6:47:a9:04:bb:
         61:a1:f2:d4:63:1c:d2:75:65:d0:bc:04:b7:01:26:1c:71:40:
         a3:ab:61:59:a2:60:c8:e4:4b:8a:04:74:0f:60:f1:69:9c:96:
         2c:00:9c:7c:e8:46:ef:3f:05:9d:58:9b:10:32:38:af:d1:69:
         61:d8:99:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:06:36 2026 by rpki-client