Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/b0d5a1-5fb2-4d31-904e-7037ef49ac2d/1/5vxHDvW4iHmlId3t94cHhZubDjc.mft
File:                     5vxHDvW4iHmlId3t94cHhZubDjc.mft (raw, json)
Hash identifier:          52NbWmn5/JPny8Z3oPAGuRtzY3nMSElV9gASsAlzy5c=
Subject key identifier:   E7:F3:4E:4E:28:3E:59:AB:A0:84:F9:40:81:8F:52:E5:B0:83:D8:A1
Authority key identifier: E6:FC:47:0E:F5:B8:88:79:A5:21:DD:ED:F7:87:07:85:9B:9B:0E:37
Certificate issuer:       /CN=e6fc470ef5b88879a521ddedf78707859b9b0e37
Certificate serial:       01A0CD7E9B325FD00DA17BA71B25C043741C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5vxHDvW4iHmlId3t94cHhZubDjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/b0d5a1-5fb2-4d31-904e-7037ef49ac2d/1/5vxHDvW4iHmlId3t94cHhZubDjc.mft
Manifest number:          03E0
Signing time:             Wed 23 Sep 2026 09:00:21 +0000
Manifest this update:     Wed 23 Sep 2026 09:00:21 +0000
Manifest next update:     Thu 24 Sep 2026 09:00:21 +0000
Files and hashes:         1: 5vxHDvW4iHmlId3t94cHhZubDjc.crl (hash: gwUMUSYzt8/b4y5fxis7dRidCZPwd+Z3wihm60teqYk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/b0d5a1-5fb2-4d31-904e-7037ef49ac2d/1/5vxHDvW4iHmlId3t94cHhZubDjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/b0d5a1-5fb2-4d31-904e-7037ef49ac2d/1/5vxHDvW4iHmlId3t94cHhZubDjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5vxHDvW4iHmlId3t94cHhZubDjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 09:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:7e:9b:32:5f:d0:0d:a1:7b:a7:1b:25:c0:43:74:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6fc470ef5b88879a521ddedf78707859b9b0e37
        Validity
            Not Before: Sep 23 09:00:21 2026 GMT
            Not After : Sep 24 09:00:21 2026 GMT
        Subject: CN=e7f34e4e283e59aba084f940818f52e5b083d8a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:09:9c:95:93:94:bc:30:2e:f4:eb:00:68:5e:
                    d2:cd:c5:e3:d2:6f:7d:06:63:e0:30:92:22:a5:8c:
                    63:71:41:db:d3:15:fe:2a:b5:58:cd:08:81:37:40:
                    51:1f:9e:ba:3a:c5:17:df:1f:f7:98:0b:1f:37:ef:
                    d8:9b:f5:8a:2e:36:9d:06:cf:68:36:c8:13:f8:4e:
                    e0:b3:72:21:65:ea:11:a0:d0:a8:a5:9f:0e:31:c0:
                    27:47:1e:69:f5:d7:a1:9d:84:45:00:4e:2c:50:d4:
                    78:c2:cd:1d:6e:ba:81:6a:c5:3f:37:ec:b6:5e:35:
                    63:1f:fe:ab:85:d5:e9:a9:10:e4:68:bc:e1:3c:fb:
                    85:7c:04:2c:19:62:ef:31:e8:37:12:7e:5a:e9:b6:
                    bf:61:8a:60:33:8b:18:4e:44:d6:75:bb:fc:f5:aa:
                    ec:0f:7d:38:40:57:71:a8:7b:d2:e4:cb:8d:e1:fb:
                    53:65:9e:c3:11:96:16:cb:ed:ec:e5:4e:06:5a:08:
                    da:f6:d9:fa:3a:9b:87:c6:03:20:df:19:1a:4b:f1:
                    58:c6:a2:c1:7b:a9:5f:6e:55:c3:fc:85:12:37:25:
                    4f:9a:8f:b8:c7:56:e1:f6:4d:7c:5f:1e:72:2e:29:
                    2b:75:08:7c:d6:78:9c:48:00:6c:12:64:0f:a1:c7:
                    e7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F3:4E:4E:28:3E:59:AB:A0:84:F9:40:81:8F:52:E5:B0:83:D8:A1
            X509v3 Authority Key Identifier:
                keyid:E6:FC:47:0E:F5:B8:88:79:A5:21:DD:ED:F7:87:07:85:9B:9B:0E:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vxHDvW4iHmlId3t94cHhZubDjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b0d5a1-5fb2-4d31-904e-7037ef49ac2d/1/5vxHDvW4iHmlId3t94cHhZubDjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b0d5a1-5fb2-4d31-904e-7037ef49ac2d/1/5vxHDvW4iHmlId3t94cHhZubDjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:fa:d0:d3:c7:94:2a:65:c1:c0:b2:b5:ef:60:ff:0e:eb:bf:
         97:23:24:20:e1:da:24:44:b9:b7:52:8f:cb:79:9f:7d:bb:4f:
         ec:40:7e:3b:a1:e1:52:3d:b3:12:9b:ef:95:58:c5:16:ab:79:
         95:b2:48:24:71:0c:01:3f:e7:08:a8:15:9c:df:d7:00:7f:f0:
         a3:63:54:ad:90:50:7d:86:d2:21:df:83:64:09:01:c7:a7:27:
         b0:0e:d7:8d:42:4b:08:44:46:00:87:24:35:ed:90:62:35:61:
         e1:ab:77:81:16:b6:f8:1a:30:be:8a:4e:18:40:6c:e6:8b:a4:
         71:0a:2c:c2:79:ce:26:37:b9:60:98:be:a4:39:55:17:4f:f7:
         8f:6a:2a:d4:e7:03:db:1a:e3:37:4f:f7:5b:7b:89:ca:c2:9d:
         31:4c:07:29:c7:97:62:58:ac:92:b6:11:ef:55:16:4d:61:18:
         3f:08:31:04:53:50:e0:1f:9a:b2:77:56:7a:91:50:bb:d7:68:
         c4:df:c5:c2:f5:99:1f:0f:c6:19:49:80:7c:bf:95:cf:74:d2:
         3c:ec:40:e4:e6:25:2d:3e:c5:ff:3e:fd:36:44:d5:90:cf:b6:
         0b:a2:4b:28:b6:12:a0:fd:0d:62:58:29:30:d4:39:19:01:55:
         7f:fa:c2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:21:40 2026 by rpki-client