Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
File:                     A554tFtfWVlOuBHzrGkGKWfyjHc.mft (raw, json)
Hash identifier:          nLI4Xxa4WK3UlHjpT85Z6AZWg+Eu9NaruRogAntN0go=
Subject key identifier:   5C:A7:EA:87:0B:7A:2E:3F:EE:69:B9:D6:09:C2:45:B6:36:DA:AA:5D
Authority key identifier: 03:9E:78:B4:5B:5F:59:59:4E:B8:11:F3:AC:69:06:29:67:F2:8C:77
Certificate issuer:       /CN=039e78b45b5f59594eb811f3ac69062967f28c77
Certificate serial:       01A0CF6D46A47AAF942D47450DC8C3BDFB96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
Manifest number:          08DF
Signing time:             Wed 23 Sep 2026 18:00:40 +0000
Manifest this update:     Wed 23 Sep 2026 18:00:40 +0000
Manifest next update:     Thu 24 Sep 2026 18:00:40 +0000
Files and hashes:         1: A554tFtfWVlOuBHzrGkGKWfyjHc.crl (hash: S88MC7urf06tJMLJ2E0vBwhCw7JmKb+Zvz/u+KBDh9w=)
                          2: INMcxslKzA9lQLIaiuC7po-TrrY.roa (hash: 9IPb8qBlhTZBbDZdvzgQp75cg/Es1qM9VUEr2AAlDW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:6d:46:a4:7a:af:94:2d:47:45:0d:c8:c3:bd:fb:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=039e78b45b5f59594eb811f3ac69062967f28c77
        Validity
            Not Before: Sep 23 18:00:40 2026 GMT
            Not After : Sep 24 18:00:40 2026 GMT
        Subject: CN=5ca7ea870b7a2e3fee69b9d609c245b636daaa5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0a:22:ec:c7:f6:99:e2:87:d6:48:91:0f:e2:
                    d9:1e:3e:03:71:91:1e:07:39:8a:2a:5c:0f:1a:4a:
                    9f:e1:b6:4e:a0:93:0a:bc:6f:28:79:80:f9:b9:ae:
                    8b:2a:8d:e5:50:64:a3:a0:77:16:b4:27:51:ae:1c:
                    c2:91:fa:22:92:56:67:95:33:18:e5:c6:7f:32:bd:
                    e5:cf:0f:e1:3d:5a:94:60:1a:c0:78:57:73:62:bf:
                    f1:06:85:61:9b:87:3f:c2:75:cb:67:47:f2:cd:cc:
                    fa:d3:af:be:a0:b1:d2:0a:94:5d:f8:34:58:52:d7:
                    d4:a4:6f:58:dc:98:16:ab:43:11:34:ce:79:79:f4:
                    7a:f2:8b:11:55:bb:13:86:c3:cb:c4:fd:c5:0d:2b:
                    b8:39:cd:a1:6a:96:d0:bc:cf:7f:a6:0a:07:fd:c0:
                    c7:3a:66:f4:f8:d5:20:ab:c4:a5:26:13:f8:4a:3a:
                    a8:03:73:2a:64:9e:41:8e:b1:1c:c6:e1:bb:f0:a9:
                    46:e3:b6:b8:80:a8:a4:41:66:5b:42:c0:18:f8:2f:
                    e8:d4:06:8e:fe:09:d2:2c:66:f2:ae:72:9c:44:4a:
                    14:69:7e:34:2f:1f:59:f1:1f:53:44:66:c4:5f:62:
                    28:6e:04:7e:91:08:01:05:7e:6b:0e:cd:87:2c:aa:
                    18:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A7:EA:87:0B:7A:2E:3F:EE:69:B9:D6:09:C2:45:B6:36:DA:AA:5D
            X509v3 Authority Key Identifier:
                keyid:03:9E:78:B4:5B:5F:59:59:4E:B8:11:F3:AC:69:06:29:67:F2:8C:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:fe:89:44:f2:b9:78:dd:18:d7:72:65:a3:cd:44:3d:5e:55:
         e6:94:7a:cf:e7:a3:53:68:70:b1:e9:22:dc:57:23:97:14:d3:
         6c:92:fa:59:10:98:4f:a0:c0:c8:bd:a0:ac:fb:99:0d:d9:45:
         ba:30:79:83:a0:76:dc:9e:08:4a:9f:5e:ef:ce:61:db:de:f7:
         9b:48:f7:a4:c1:6a:7a:20:94:46:c9:ad:25:e8:bd:63:18:77:
         50:1f:ff:be:9b:5d:d3:53:85:2c:25:28:84:98:f9:2e:d8:ba:
         4c:f1:7f:2a:02:20:0e:53:96:7f:e4:b4:63:98:51:72:8d:8e:
         10:8e:7b:31:78:3d:a0:34:78:3c:71:3c:78:a2:3b:1e:ba:21:
         18:e0:e1:6f:86:46:39:b0:bc:04:9b:33:56:aa:ea:17:9f:78:
         24:1e:1c:01:7d:b8:2f:92:e1:96:57:b1:e5:a1:55:0b:64:c7:
         20:c4:63:a0:36:08:a9:90:1e:6a:ad:ae:83:88:4a:4e:94:a0:
         d0:39:b8:b2:8b:49:ee:b7:a8:2e:e0:28:15:b5:fe:6f:37:79:
         2d:6b:ec:5c:9d:57:d8:da:f8:ec:fb:c1:77:a8:c8:b9:21:ea:
         4f:e0:c3:43:fd:9a:3e:d9:04:41:c7:4f:4e:0a:0b:b6:18:4a:
         a2:11:83:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:23:45 2026 by rpki-client