Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
File:                     53bFGYDHUepeMd3ayO9h-1bJcA8.mft (raw, json)
Hash identifier:          IZ07AjmpPRV5Pf2FDcK7yAZ5/yVhSeiFdmA3rl8WRRA=
Subject key identifier:   56:20:84:D5:FB:80:94:93:DC:30:D4:5C:64:7B:44:A0:DB:4F:9D:35
Authority key identifier: E7:76:C5:19:80:C7:51:EA:5E:31:DD:DA:C8:EF:61:FB:56:C9:70:0F
Certificate issuer:       /CN=e776c51980c751ea5e31dddac8ef61fb56c9700f
Certificate serial:       01A0DBA9CCA865A3CAB093874E06BBBC4EC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
Manifest number:          0685
Signing time:             Sat 26 Sep 2026 03:02:13 +0000
Manifest this update:     Sat 26 Sep 2026 03:02:13 +0000
Manifest next update:     Sun 27 Sep 2026 03:02:13 +0000
Files and hashes:         1: 53bFGYDHUepeMd3ayO9h-1bJcA8.crl (hash: 6N+qQpQ0JyP7foLblmxvIXaVBL4BdZROu/B+vRAl5sQ=)
                          2: TQEZqwqBvL5LSKJlBpz9ZlwxI2k.roa (hash: h28Y5SLCkXSu2nNw0njBdHdQWxez9aqEeYAyLE+jLNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:a9:cc:a8:65:a3:ca:b0:93:87:4e:06:bb:bc:4e:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e776c51980c751ea5e31dddac8ef61fb56c9700f
        Validity
            Not Before: Sep 26 03:02:13 2026 GMT
            Not After : Sep 27 03:02:13 2026 GMT
        Subject: CN=562084d5fb809493dc30d45c647b44a0db4f9d35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:42:ba:ee:bc:70:8c:5d:35:98:67:1c:fa:19:
                    2e:0a:24:35:66:4d:f9:05:e0:24:ef:28:9b:37:b4:
                    2a:89:a9:6c:89:1f:83:40:a7:0d:6f:35:ea:48:58:
                    56:0b:9b:a1:ab:92:9e:a8:ff:00:bb:73:66:96:08:
                    27:04:2a:0a:ed:89:bf:06:eb:c7:43:cb:f2:03:c0:
                    05:75:88:0c:12:94:11:62:2d:06:c7:9c:a5:f1:da:
                    8a:9a:81:1b:d1:3a:a5:56:f5:78:f0:8e:2f:f4:70:
                    94:3a:65:d1:ae:a0:27:ed:53:cb:5b:88:23:5a:c4:
                    50:b7:59:96:11:9c:c5:44:5d:d9:08:aa:1f:a5:7d:
                    0b:d0:9c:b0:17:c8:45:eb:3d:3c:da:8d:4a:8e:e5:
                    36:23:ef:23:a7:b6:20:a5:17:5e:eb:ac:7b:0b:2d:
                    bd:b7:44:81:7f:b3:55:2e:e5:73:e6:72:4e:35:91:
                    51:fa:f6:ae:b2:01:7c:31:21:72:95:b7:f3:c2:d1:
                    41:76:d0:cb:08:c3:a5:b2:c5:91:57:77:8e:6c:50:
                    eb:2e:71:f2:3d:10:ca:93:d6:3f:b8:ab:3f:8a:e9:
                    de:7e:92:65:31:2a:2d:b8:a3:0a:dd:00:36:ff:fa:
                    90:64:48:97:9e:b3:0e:4f:80:a2:93:78:43:7b:4d:
                    ce:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:20:84:D5:FB:80:94:93:DC:30:D4:5C:64:7B:44:A0:DB:4F:9D:35
            X509v3 Authority Key Identifier:
                keyid:E7:76:C5:19:80:C7:51:EA:5E:31:DD:DA:C8:EF:61:FB:56:C9:70:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:49:bf:e4:bf:e6:0d:45:36:80:46:19:61:5d:b1:b0:09:8e:
         3b:0b:eb:68:c2:41:1b:46:d2:3b:3f:d4:fa:12:cd:5e:2d:a1:
         1a:cd:69:b4:27:97:3f:e5:5e:22:c3:30:0c:d6:82:5f:37:56:
         a6:86:1d:2c:f7:1f:57:00:95:26:4b:e0:75:5f:be:ea:0b:54:
         06:2d:19:7f:08:7c:85:8a:46:8b:7a:60:12:8d:4d:0f:03:1d:
         31:76:c7:5f:cc:4f:92:7c:e9:06:84:57:ca:c3:83:51:b7:aa:
         0f:9f:cb:69:a9:0e:b0:59:3c:06:6f:65:54:ee:08:0b:e8:79:
         61:9b:bb:5c:35:5c:f9:15:d8:bf:dc:39:42:a7:75:08:9c:60:
         c8:2b:0d:58:98:86:f7:74:10:1d:2d:9a:d9:2e:2c:be:89:37:
         7f:77:eb:78:34:f1:8b:44:ec:45:19:91:57:34:03:fc:f2:52:
         16:8f:12:e6:e2:65:47:b3:21:b1:1c:1b:53:01:f3:dc:1b:da:
         c2:7a:82:57:42:fc:70:b4:85:42:10:d0:96:6d:8a:f6:be:ef:
         d3:0c:77:17:36:59:78:c5:0d:19:f4:06:39:c3:5b:20:8f:3a:
         02:f9:10:1b:7e:8d:62:ee:87:1e:09:f3:f5:d7:48:fb:d1:df:
         7f:e1:57:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:37:24 2026 by rpki-client