Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
File:                     5WzVePQvjeBnI2dnxs_CusvBbgU.mft (raw, json)
Hash identifier:          s4trEiNhKEJNivJ49S82Bc9SWQTsFQQqoyLHa3MPM00=
Subject key identifier:   4E:0D:A8:93:F4:E7:38:8B:0D:EC:6A:7C:38:A1:B6:6E:BB:AC:0F:6A
Authority key identifier: E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05
Certificate issuer:       /CN=e56cd578f42f8de067236767c6cfc2bacbc16e05
Certificate serial:       01A0CDB5581994AE760D8E4BB125FDD01777
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
Manifest number:          19E8
Signing time:             Wed 23 Sep 2026 10:00:08 +0000
Manifest this update:     Wed 23 Sep 2026 10:00:08 +0000
Manifest next update:     Thu 24 Sep 2026 10:00:08 +0000
Files and hashes:         1: 5WzVePQvjeBnI2dnxs_CusvBbgU.crl (hash: GQ0Iy4MLLr8JIVfem9dkCXOmapPYrbKb903Fv2gJ6fE=)
                          2: _xb7dLIH6IMlpZq1SYlWl6nvqS4.roa (hash: oZ1UVmQ5z1c0zOrIXMtPyJxvit0yakzMpq+pTeT+fvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 10:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:b5:58:19:94:ae:76:0d:8e:4b:b1:25:fd:d0:17:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e56cd578f42f8de067236767c6cfc2bacbc16e05
        Validity
            Not Before: Sep 23 10:00:08 2026 GMT
            Not After : Sep 24 10:00:08 2026 GMT
        Subject: CN=4e0da893f4e7388b0dec6a7c38a1b66ebbac0f6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:14:06:0d:61:a4:25:2e:29:e4:1e:b6:0d:49:
                    49:b7:73:a0:ba:78:1b:e4:af:f0:2a:1b:92:2e:5c:
                    ad:36:ec:ea:9d:cd:bd:e5:ab:6e:d4:c6:a7:92:56:
                    48:9d:09:f8:e0:3d:c2:02:56:e4:63:66:ce:ec:96:
                    11:ea:f3:94:54:9b:ca:f9:a1:14:2d:f2:6b:59:fb:
                    d7:10:57:2d:5b:3b:94:8b:d9:81:5c:a0:60:cd:6e:
                    61:76:fb:dd:5e:22:b0:75:75:38:be:b7:2a:5b:ad:
                    50:41:ba:ec:7d:c8:ed:72:57:3f:30:ae:10:74:5b:
                    d4:75:24:4b:c9:01:3f:c5:3d:50:eb:1a:58:a8:70:
                    8a:3d:19:51:68:34:9e:66:42:57:19:14:cf:53:55:
                    7c:50:c8:d2:9b:5b:30:b2:46:99:37:db:f3:95:bd:
                    e6:3f:ad:2f:9a:09:bf:2e:50:1e:5d:79:7d:38:25:
                    3b:df:70:f9:0f:e8:d7:d6:f2:0a:f6:3a:cb:29:5f:
                    77:00:55:46:a7:d5:67:0c:49:60:06:03:fc:14:88:
                    61:e8:c6:06:bb:7f:7a:47:cb:7f:4b:c2:bf:48:38:
                    b7:89:09:4d:3c:ae:61:24:fc:77:24:fb:11:b2:89:
                    ce:36:7a:8f:da:5f:43:b8:74:b9:6b:45:30:d5:d3:
                    b9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0D:A8:93:F4:E7:38:8B:0D:EC:6A:7C:38:A1:B6:6E:BB:AC:0F:6A
            X509v3 Authority Key Identifier:
                keyid:E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:16:98:59:66:09:6a:9a:67:9b:cd:b6:60:91:95:df:41:62:
         c5:85:19:ef:fa:5e:72:0c:37:f5:71:36:d6:4e:81:a4:4c:8e:
         c0:24:b4:bf:f9:25:1d:03:b8:e0:8e:f8:85:ff:ad:52:bf:2d:
         15:3c:5a:a8:38:c1:8d:60:78:e3:7e:c1:80:53:4c:c5:71:28:
         39:d0:08:66:d7:43:c9:88:67:34:fa:63:32:6c:e7:cb:32:57:
         da:51:35:d8:38:65:ff:c5:14:03:ed:9a:8e:d5:37:1f:5a:53:
         9b:40:da:12:d5:64:73:60:09:42:b3:25:54:59:1a:da:7e:e5:
         42:6c:5d:2b:4d:4f:82:94:4e:4e:9b:31:d2:23:41:da:6f:4a:
         7e:f7:2e:16:01:2e:b3:95:c0:cd:5c:e4:2c:32:81:be:aa:d1:
         5c:12:f1:92:3a:02:e9:2b:41:27:b9:ad:9a:6d:51:dd:49:ab:
         e0:2d:74:57:b2:43:f9:0b:b1:f6:6b:ab:55:51:b1:45:d8:18:
         3e:37:5b:0c:31:1a:0b:4c:1a:5d:73:a5:3f:09:8a:0c:5a:82:
         61:68:fe:d5:9f:98:e5:fd:5d:49:1a:ef:0e:18:b4:44:f7:a5:
         73:9b:a8:b1:e3:b3:21:31:3b:f2:53:83:45:8a:c7:77:0e:ba:
         69:8d:57:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:43:44 2026 by rpki-client