Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/6RwUX3wqthPwliJW6LohEFY3nK0.mft
File:                     6RwUX3wqthPwliJW6LohEFY3nK0.mft (raw, json)
Hash identifier:          D2Qk0l7wuqUCLwd1mwGQP4dObBS1DlMeUNaJn39ffKM=
Subject key identifier:   F5:CD:DE:5A:7A:10:7B:6E:DC:5F:87:05:93:26:84:76:3E:24:86:1A
Authority key identifier: E9:1C:14:5F:7C:2A:B6:13:F0:96:22:56:E8:BA:21:10:56:37:9C:AD
Certificate issuer:       /CN=e91c145f7c2ab613f0962256e8ba211056379cad
Certificate serial:       01A0D012D6630D41419095F7FFBD101E67C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6RwUX3wqthPwliJW6LohEFY3nK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/6RwUX3wqthPwliJW6LohEFY3nK0.mft
Manifest number:          E5
Signing time:             Wed 23 Sep 2026 21:01:30 +0000
Manifest this update:     Wed 23 Sep 2026 21:01:30 +0000
Manifest next update:     Thu 24 Sep 2026 21:01:30 +0000
Files and hashes:         1: 1Lgu1-zB9ylsTLQ_zJFV2x5QBtc.roa (hash: 9Mjx66ZRNBzOgezobspQ/N2rC12olhMnxONbq/i+6C8=)
                          2: 6RwUX3wqthPwliJW6LohEFY3nK0.crl (hash: eq+Mpefr7cpOU0yqXlLXBwnLjW0sZPKEnZ0QbQSGlpk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/6RwUX3wqthPwliJW6LohEFY3nK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/6RwUX3wqthPwliJW6LohEFY3nK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6RwUX3wqthPwliJW6LohEFY3nK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:12:d6:63:0d:41:41:90:95:f7:ff:bd:10:1e:67:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e91c145f7c2ab613f0962256e8ba211056379cad
        Validity
            Not Before: Sep 23 21:01:30 2026 GMT
            Not After : Sep 24 21:01:30 2026 GMT
        Subject: CN=f5cdde5a7a107b6edc5f8705932684763e24861a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:06:39:a8:80:5c:67:07:d1:83:c5:cd:2c:e4:
                    15:af:5b:1f:95:a4:b0:d0:47:3c:23:b2:fe:28:3d:
                    04:be:4d:16:06:f6:5e:09:d7:31:1f:90:e5:1b:2e:
                    e3:a1:58:ab:e8:0e:93:45:0d:52:77:95:f5:82:7d:
                    e1:71:7b:48:a8:01:61:13:76:93:fa:95:91:a3:11:
                    10:72:04:bc:5c:bd:3e:89:29:0d:52:96:db:7a:8e:
                    a8:d3:71:92:68:b0:5a:33:6b:4e:3b:e4:5d:36:11:
                    b3:66:34:fb:37:55:0b:83:88:22:91:14:a6:54:f7:
                    83:cb:39:3b:59:0f:79:d4:bd:11:7e:f3:b5:42:1d:
                    34:b3:cb:d3:2b:a4:6d:5c:fb:ea:c8:88:a7:b7:1b:
                    48:63:55:aa:3e:c6:db:f9:b2:bb:bf:91:95:e2:2d:
                    ad:a9:05:97:9f:ba:a9:93:08:2f:16:5a:5e:8f:b9:
                    e2:3d:b2:0a:db:a0:38:4a:5c:2d:65:a7:89:d1:59:
                    68:be:75:fa:ac:fc:91:a3:c2:94:c8:74:c4:74:db:
                    22:89:98:b2:b7:6e:aa:fc:9a:31:5a:b2:a6:4a:c6:
                    c9:bd:1e:e5:c0:bc:1f:02:a3:5e:f4:77:49:7d:95:
                    d3:5a:01:a1:64:fb:97:53:b8:3c:07:6c:8e:f9:92:
                    74:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CD:DE:5A:7A:10:7B:6E:DC:5F:87:05:93:26:84:76:3E:24:86:1A
            X509v3 Authority Key Identifier:
                keyid:E9:1C:14:5F:7C:2A:B6:13:F0:96:22:56:E8:BA:21:10:56:37:9C:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RwUX3wqthPwliJW6LohEFY3nK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/6RwUX3wqthPwliJW6LohEFY3nK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/6RwUX3wqthPwliJW6LohEFY3nK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:01:6c:17:a4:92:14:41:46:02:60:11:f5:0e:89:b8:8b:e7:
         d0:68:0f:44:99:d7:a3:6f:e4:e2:32:7c:69:3f:41:3e:69:ca:
         4c:7d:b1:80:39:b8:bb:ac:2f:0f:28:d0:f5:1b:e3:47:d2:71:
         52:9e:45:85:4c:b7:06:75:c4:34:e9:38:3c:85:0b:19:cc:85:
         c4:c8:8c:1e:72:c9:71:44:a8:d8:51:77:93:bb:04:06:9f:26:
         ef:a2:c7:d3:f8:28:ac:8b:98:65:f6:69:7a:ac:53:45:c9:19:
         ab:81:f6:51:81:f2:0d:7c:e9:10:2e:a2:e9:c8:16:3a:4a:56:
         48:d1:fa:8a:af:c1:d1:b7:22:8f:f4:29:d5:5e:12:45:f9:49:
         30:92:39:76:39:24:13:13:85:41:b3:be:ff:31:fb:5b:24:81:
         c4:54:cb:cb:41:bf:88:c9:89:dc:73:ff:0d:91:32:11:7e:30:
         71:64:fa:16:a6:b3:45:b0:ee:2c:98:d9:9a:06:dd:ac:90:81:
         6b:1b:ac:f3:6b:a3:b9:db:7d:5a:be:e8:9a:fb:db:57:da:69:
         35:bd:38:bd:ab:33:39:50:6c:ed:7b:36:fa:66:ce:8e:83:82:
         c6:17:68:66:01:fc:01:22:d2:9d:ea:6f:cb:76:04:41:d8:23:
         90:2d:94:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:52:02 2026 by rpki-client