Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
File:                     5U0JIEfb6alooWDzFfq5u5yDVtc.mft (raw, json)
Hash identifier:          RhsZHyq7RT+7bTyc23YoheMnKxD2KpDHi+BQ7a9ibEs=
Subject key identifier:   3A:71:E2:94:25:A0:52:FB:8F:CE:86:45:2B:FD:3E:27:0D:A6:A7:EF
Authority key identifier: E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7
Certificate issuer:       /CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
Certificate serial:       01A0CF35FFAADF24057CFED823EDEA9680AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
Manifest number:          1A6D
Signing time:             Wed 23 Sep 2026 17:00:17 +0000
Manifest this update:     Wed 23 Sep 2026 17:00:17 +0000
Manifest next update:     Thu 24 Sep 2026 17:00:17 +0000
Files and hashes:         1: 3mjUvr0ozA9KcVybdk9dg1L1c6M.roa (hash: l/BbA+peuMfkmg4IEpqF3b3AQLeDvrOYYkuX2oEB8Ko=)
                          2: 5U0JIEfb6alooWDzFfq5u5yDVtc.crl (hash: slbMN1aA4HWrY1wUoPHq8es63M4f6hqK3PQALo/zCIk=)
                          3: _Jzbksm-JMXJG_vIupQOGd5OWfA.asa (hash: Tb8L6c/yPd6zHGW5vozp+7vssh8lOxc/2tcpUf5JfNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 17:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:35:ff:aa:df:24:05:7c:fe:d8:23:ed:ea:96:80:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
        Validity
            Not Before: Sep 23 17:00:17 2026 GMT
            Not After : Sep 24 17:00:17 2026 GMT
        Subject: CN=3a71e29425a052fb8fce86452bfd3e270da6a7ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d2:fd:c3:b9:88:11:26:50:b2:62:4d:f4:3b:
                    73:ff:d2:e5:a7:e9:00:ad:49:b1:87:ae:db:ce:96:
                    29:80:b5:65:be:3f:df:69:eb:f5:d3:a3:f7:2b:dd:
                    44:63:ef:a0:2a:17:b1:a7:de:cf:8a:5b:4f:b8:a0:
                    10:f3:65:35:1d:9c:3a:c9:55:10:36:df:a4:78:7d:
                    06:04:80:96:ec:1f:f4:98:4c:33:01:e3:38:d2:80:
                    02:cb:f4:56:13:c9:34:ed:4f:1f:5c:60:0d:4f:aa:
                    c0:8a:52:97:e1:60:98:94:6e:02:ae:6b:c5:01:60:
                    f8:d9:03:e2:b2:cc:a8:5b:8e:c7:54:8e:a9:70:63:
                    a8:eb:36:dd:8e:39:50:72:f0:f5:1f:5b:19:d7:7a:
                    a9:39:a1:b8:32:22:2a:7d:43:57:39:88:cf:10:8b:
                    2c:2c:31:19:cb:ab:b1:c5:18:67:38:cc:b3:43:8f:
                    49:68:4c:74:38:0a:1f:a7:2a:99:e6:a1:85:e0:1a:
                    ff:41:12:11:c4:03:95:b9:ed:48:f5:56:63:a1:38:
                    bb:a3:f2:3c:aa:1c:eb:0f:24:d4:e6:c5:57:b0:68:
                    39:ba:d0:40:91:34:68:57:9d:33:97:ec:67:c7:3a:
                    f9:d1:4a:4c:dc:8b:15:37:ba:21:93:46:66:f6:d7:
                    1e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:71:E2:94:25:A0:52:FB:8F:CE:86:45:2B:FD:3E:27:0D:A6:A7:EF
            X509v3 Authority Key Identifier:
                keyid:E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:85:7f:9f:b5:e2:17:1d:fe:e2:d9:64:d4:cb:9c:1a:0a:6b:
         18:71:33:ba:ab:45:ec:3b:51:d1:59:16:bd:67:21:fd:3a:33:
         57:f1:78:f2:b4:91:26:ad:5a:50:ad:b9:52:9c:9e:b7:86:54:
         3e:06:0e:f0:32:01:fb:0d:a1:d8:b6:20:d2:cf:a1:1e:24:ce:
         6d:37:04:ce:0c:13:af:3c:84:50:89:29:d8:ed:32:41:fd:f0:
         0c:4d:5f:e6:f8:0a:71:4a:3a:0f:4b:2e:ee:bf:2f:ec:7f:d2:
         15:8c:e9:b3:4e:62:6d:c4:23:bd:19:b6:d8:d7:36:f8:60:33:
         d2:47:73:fd:5c:6b:b8:fc:df:a8:c2:b8:70:e3:5e:dc:0f:3b:
         14:40:8e:8c:0d:3d:df:fa:9f:99:4a:74:66:13:23:3b:1e:ba:
         0a:5a:9d:ab:c8:fa:00:31:f3:9a:3c:24:91:95:c4:a3:41:14:
         97:fe:af:bf:03:ba:20:6c:4d:87:71:05:08:8a:7b:58:d7:b7:
         c4:dd:b2:41:42:e5:c0:d1:a8:97:11:6e:8d:10:df:d0:ac:8c:
         62:6e:b4:58:ee:a5:2f:50:75:1b:f9:b4:2c:25:ec:83:b1:ec:
         ed:ff:7f:94:e0:8d:28:3a:d2:fe:bf:18:95:8f:07:6e:6e:47:
         83:18:b0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:38:32 2026 by rpki-client