Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
File:                     5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft (raw, json)
Hash identifier:          ylycj6vberBPzlNumhxOnKNAolJ7fn8mcD1qNZro73c=
Subject key identifier:   F3:42:D3:12:2B:F3:68:EB:E8:6F:2F:83:C1:E5:79:98:6C:80:62:22
Authority key identifier: E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E
Certificate issuer:       /CN=e443fc203f706f9731412761b27a1a4b395cfc1e
Certificate serial:       01A0CB91030AABF46B2FEDC5D39DEC4325AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
Manifest number:          1A03
Signing time:             Wed 23 Sep 2026 00:01:13 +0000
Manifest this update:     Wed 23 Sep 2026 00:01:13 +0000
Manifest next update:     Thu 24 Sep 2026 00:01:13 +0000
Files and hashes:         1: 5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl (hash: AF4Xa9eziYlWXGmv7HED2hPJzXlPkZba1eUxvkbp9lE=)
                          2: AS-661G75-znuPlEcg291RY_YW8.roa (hash: tryrPTL4snW84NvT9kdcp6puokqa439kxN3NLW6DORc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:91:03:0a:ab:f4:6b:2f:ed:c5:d3:9d:ec:43:25:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e443fc203f706f9731412761b27a1a4b395cfc1e
        Validity
            Not Before: Sep 23 00:01:13 2026 GMT
            Not After : Sep 24 00:01:13 2026 GMT
        Subject: CN=f342d3122bf368ebe86f2f83c1e579986c806222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bb:1f:f0:05:5d:88:a6:f9:9c:f9:1f:59:90:
                    c6:bf:19:f3:94:1c:f7:d1:c7:64:a3:2f:64:c6:06:
                    4e:05:7f:7d:07:88:20:f7:eb:cf:11:30:97:d9:e4:
                    8d:9f:12:b1:69:4b:f7:30:58:48:16:e7:9e:8e:80:
                    11:bb:57:06:a5:97:41:60:91:cc:81:14:64:38:57:
                    4d:bc:23:bd:73:53:d9:1a:08:df:13:5c:ae:3c:8e:
                    4b:6a:de:fe:53:0c:57:d2:c8:83:74:cd:ac:85:ab:
                    1c:86:42:ca:d7:9b:d1:ba:1b:61:9f:fd:4c:0a:7c:
                    59:e4:d4:e5:66:7e:74:0d:b3:23:ed:34:2a:5a:e1:
                    6f:d8:56:ae:44:d4:ff:97:c0:b7:52:4a:26:7b:07:
                    9c:22:b4:53:19:ea:15:1a:e7:26:ba:a5:9b:6d:c0:
                    36:f2:02:78:d6:f5:a7:01:15:ab:c6:d0:d5:0e:77:
                    31:3d:78:d2:5b:44:a3:2e:06:b8:dc:25:22:0c:8a:
                    e8:00:ff:b6:54:e5:c1:e2:b0:8d:99:9d:95:72:80:
                    7f:d9:0c:27:1b:a4:44:0d:26:01:ca:5e:d2:82:92:
                    ee:62:c1:e3:99:d4:ae:36:bb:30:ff:ef:71:ff:08:
                    f6:70:59:7e:f7:91:e4:a9:19:4c:01:a5:ba:e3:59:
                    40:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:42:D3:12:2B:F3:68:EB:E8:6F:2F:83:C1:E5:79:98:6C:80:62:22
            X509v3 Authority Key Identifier:
                keyid:E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:63:96:ad:39:a7:91:9a:06:aa:b0:b4:08:e0:46:2d:d6:2e:
         9b:f4:7f:2b:8c:d6:6d:fe:a1:1c:82:20:8f:05:af:c3:67:ae:
         5c:b2:36:37:7e:d6:d6:4b:9b:8f:01:43:d6:da:07:e4:b0:99:
         72:d2:ac:00:0d:87:b3:69:b2:74:a1:58:ac:a4:3e:0e:05:f3:
         8a:1b:fb:66:26:58:45:ee:37:21:21:a4:14:1c:3f:6a:fc:75:
         4c:17:16:d5:68:9d:0d:e3:97:4f:a4:26:e9:41:a9:6a:f8:56:
         c6:e9:d7:36:83:a2:b7:c1:3c:bb:3c:9c:4c:3e:94:c1:e2:f8:
         36:c5:f6:b3:d2:41:84:f8:25:1a:4b:1a:a5:97:6d:1f:5a:73:
         56:22:a0:a6:03:e9:ab:95:7a:16:1a:64:17:af:82:6c:29:a0:
         57:52:54:1c:cd:5c:a6:4e:17:ea:fc:2d:e8:ac:6d:cb:df:07:
         08:51:42:5d:ad:63:3b:93:84:0d:d9:61:fa:6e:91:c1:7c:9f:
         79:d7:f5:14:f9:09:8b:e9:27:b0:74:1a:59:39:e7:5e:5e:d3:
         d0:17:87:c3:19:46:e6:58:ff:c9:5f:4c:5e:91:68:0f:61:59:
         34:3c:ab:b8:74:89:08:95:b7:a2:3b:32:6d:a9:c6:b3:17:6f:
         2a:47:24:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:23:51 2026 by rpki-client