Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
File:                     5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft (raw, json)
Hash identifier:          4hI63dy3ljQEzx6xb4Ua/Jd4Sdq06ZvkLDqVYeDMJv4=
Subject key identifier:   E6:22:B4:35:E0:42:05:4D:05:04:CF:D0:2B:9F:EC:BA:55:EA:C0:31
Authority key identifier: E6:A4:D5:DF:23:38:98:E0:4F:AE:3D:83:E8:58:22:D9:88:0E:08:06
Certificate issuer:       /CN=e6a4d5df233898e04fae3d83e85822d9880e0806
Certificate serial:       01A0D200EE0AE00DEE3D4986912F11D6C304
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
Manifest number:          029F
Signing time:             Thu 24 Sep 2026 06:01:11 +0000
Manifest this update:     Thu 24 Sep 2026 06:01:11 +0000
Manifest next update:     Fri 25 Sep 2026 06:01:11 +0000
Files and hashes:         1: 4SK6T1joxEKD3qcJIw_toyLw7Cg.asa (hash: S9VsSYa/rKcIFEh+rtQN72zQTr6Bln2NJ0sYtwMEOXo=)
                          2: 5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl (hash: MHko1U8iPcC88rKP7mdfFherQ0GCg6NUudc1R5M5zzM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:00:ee:0a:e0:0d:ee:3d:49:86:91:2f:11:d6:c3:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6a4d5df233898e04fae3d83e85822d9880e0806
        Validity
            Not Before: Sep 24 06:01:11 2026 GMT
            Not After : Sep 25 06:01:11 2026 GMT
        Subject: CN=e622b435e042054d0504cfd02b9fecba55eac031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:cb:a9:21:a3:18:bb:40:73:6a:f3:62:8c:6f:
                    fa:e7:1a:4d:df:92:2a:a7:65:69:f6:24:22:4f:10:
                    4d:68:29:b7:49:6a:58:dc:bb:18:1c:5a:b8:b7:1d:
                    80:82:6a:4f:73:25:4a:42:25:e1:6b:fe:10:56:21:
                    a4:a4:0d:da:bd:31:00:ec:10:8d:9d:90:9b:5e:63:
                    d9:50:03:d0:8b:83:83:69:ad:9d:4a:17:3a:e0:78:
                    8a:a1:82:76:09:b8:b4:53:e8:30:9f:58:c1:8d:63:
                    de:3e:ef:de:e1:cb:47:ea:3c:f3:77:d3:1d:be:fd:
                    19:c8:ef:3f:d0:a4:79:4a:a6:0e:49:33:fc:0a:71:
                    35:73:22:46:a7:29:de:ee:36:5f:86:68:97:24:e2:
                    5b:b8:65:d5:d7:87:c5:6d:32:9d:1e:de:8f:c9:60:
                    8f:ef:03:94:2f:13:0f:46:59:b0:00:a1:3e:d3:9f:
                    ee:f2:82:ac:28:d8:e8:86:75:d4:02:cc:f6:cc:0a:
                    10:61:ec:81:20:27:73:b2:6b:a2:b2:ac:c3:9e:2a:
                    55:dd:b8:61:3c:30:20:0d:e6:cf:77:fe:57:ae:e5:
                    bd:7c:a8:fa:f6:5a:af:aa:e7:ea:b2:49:2f:b1:7a:
                    80:08:3e:3e:93:78:cf:ba:dc:92:d5:db:1c:db:5c:
                    14:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:22:B4:35:E0:42:05:4D:05:04:CF:D0:2B:9F:EC:BA:55:EA:C0:31
            X509v3 Authority Key Identifier:
                keyid:E6:A4:D5:DF:23:38:98:E0:4F:AE:3D:83:E8:58:22:D9:88:0E:08:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:92:36:68:db:5e:35:e2:41:49:ae:75:62:5b:02:b7:41:48:
         0c:f2:c9:38:48:44:4c:f6:e2:21:4f:c5:a9:a0:ec:56:23:7a:
         c9:3e:34:69:c0:4a:0b:a5:00:b4:fe:f1:bb:42:5a:6c:04:38:
         82:5d:32:0f:41:05:c8:18:16:96:be:7b:14:6f:8e:ad:57:b6:
         70:43:6f:96:65:46:52:37:5a:8e:92:96:12:bc:5b:5e:fb:02:
         cb:53:52:d9:80:1d:c2:86:a7:8c:6c:fb:f8:3f:9a:ff:83:8a:
         8d:b2:26:84:26:cf:be:da:90:05:8f:b3:94:ca:9d:b5:ae:61:
         57:49:3e:fe:3c:c6:2d:25:ee:08:30:0c:50:9e:dd:3d:d6:49:
         60:7e:48:ae:5a:e9:c0:fc:36:32:d0:b2:40:9b:45:c8:10:62:
         8a:fc:39:bf:e1:c8:5a:d9:7c:1a:f9:c4:45:57:db:89:7f:f3:
         ff:31:fb:9a:66:af:55:29:c6:d6:e3:bb:53:84:0f:4f:83:10:
         7f:d3:9d:e1:8d:d2:20:70:8a:62:fc:32:c4:2e:20:4b:08:2f:
         84:33:df:e8:5d:37:77:b9:32:e0:18:25:31:29:16:96:d2:c7:
         40:fa:21:e0:51:4c:71:f7:9e:1e:e2:51:56:d2:25:e0:ea:61:
         6e:f6:a2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:40:12 2026 by rpki-client