Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
File:                     E5YC73YK3ApbekhYPPv5tg_LcTA.mft (raw, json)
Hash identifier:          CGYDC/3gyqn0kGaOEsYHo62Ym7DVKbstqIoQcNHTeDY=
Subject key identifier:   0C:4C:50:1D:F4:8F:AD:0A:71:77:34:FE:21:A1:5F:BF:5D:01:9D:92
Authority key identifier: 13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30
Certificate issuer:       /CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
Certificate serial:       01A0EC9CC1636ADD0CE4D1CCC524D9C42474
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
Manifest number:          12EE
Signing time:             Tue 29 Sep 2026 10:01:30 +0000
Manifest this update:     Tue 29 Sep 2026 10:01:30 +0000
Manifest next update:     Wed 30 Sep 2026 10:01:30 +0000
Files and hashes:         1: E5YC73YK3ApbekhYPPv5tg_LcTA.crl (hash: 9jvy+PoNkaKDBvGPOYdfMNBjcgJjaCiDI3zxTNBar6U=)
                          2: eIvGRKEJzXb2weR4zx6UQcOzf-I.roa (hash: fXtGDiQR6bCST/6YzQ1DTyETQIkxGKJAAeEFWx1ditk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ec:9c:c1:63:6a:dd:0c:e4:d1:cc:c5:24:d9:c4:24:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
        Validity
            Not Before: Sep 29 10:01:30 2026 GMT
            Not After : Sep 30 10:01:30 2026 GMT
        Subject: CN=0c4c501df48fad0a717734fe21a15fbf5d019d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7e:97:4c:67:ec:6c:ca:89:41:26:80:a8:db:
                    5d:7b:db:11:1a:3c:52:23:54:72:56:6d:18:24:d9:
                    15:f2:2e:e0:16:19:b2:dc:df:da:fb:24:58:65:f0:
                    6d:5c:b9:0a:7a:c0:c0:0e:d9:f5:2f:6f:31:63:62:
                    9f:15:4d:48:46:93:b2:34:ac:2a:a3:74:fd:66:96:
                    cc:c6:1b:30:d6:93:f7:3b:54:ec:b8:7d:63:43:ee:
                    92:96:2c:d6:ff:b5:e5:41:be:1e:26:dd:1e:9a:1e:
                    3f:80:18:93:7c:29:8f:d5:00:17:62:12:ce:4a:d8:
                    99:97:c4:b8:ae:55:af:d4:9a:ed:81:da:06:ef:b6:
                    be:57:5e:6d:48:9b:28:98:a2:dd:d5:c5:4c:89:45:
                    36:c4:df:fe:2e:a1:ba:34:0e:bb:b7:b0:7d:1a:b3:
                    76:f0:d2:0d:d9:bf:93:63:4e:5f:49:2e:77:c9:88:
                    a6:43:28:86:ad:15:b0:3f:60:2b:99:e4:88:99:14:
                    25:95:c0:e4:b8:2b:15:fc:de:fa:4d:1a:3a:f1:4f:
                    2a:e1:e6:e6:c9:c3:e3:ad:c5:9e:62:33:e1:93:bd:
                    19:28:29:3f:bb:e2:d9:50:10:3e:98:8d:5d:76:94:
                    f4:bb:99:a2:25:55:c6:3f:d6:4e:2a:30:1a:88:db:
                    93:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4C:50:1D:F4:8F:AD:0A:71:77:34:FE:21:A1:5F:BF:5D:01:9D:92
            X509v3 Authority Key Identifier:
                keyid:13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:3c:b5:69:7e:50:8d:f1:61:ee:31:bf:57:af:61:5d:7d:24:
         54:2b:b6:64:fb:75:0e:33:59:da:21:93:12:13:4c:57:a1:a5:
         9f:ca:df:9b:71:2f:03:d6:12:e3:48:61:d2:b9:ab:45:da:d3:
         89:93:0e:f3:10:14:1c:2c:5a:f3:9a:9b:53:3e:52:48:fc:7d:
         cf:0f:ef:bb:c9:fc:51:71:83:9c:e2:b6:0f:41:21:cd:37:fb:
         1e:9b:37:9c:8d:fc:8d:4a:2c:1c:88:af:6c:18:5e:97:9e:49:
         c8:6b:63:c6:2c:1d:e1:dc:c6:35:71:82:5f:cc:ee:ef:fe:ba:
         fd:f5:01:cd:d5:eb:ae:94:70:e6:81:f0:d1:29:c6:a2:da:ec:
         32:8b:f0:d4:b4:19:3f:ed:ca:e3:0e:66:99:69:7f:90:6c:0e:
         a6:cd:df:5b:49:75:1b:b0:66:07:4e:07:79:90:48:99:90:2a:
         23:0c:dd:2d:60:db:68:c6:f5:fa:a3:0d:a5:d5:e7:88:6c:1c:
         7a:b5:1e:4f:fc:cf:f2:03:c6:e0:9d:4f:b0:ca:3a:f0:8b:cd:
         bf:ec:f1:ee:c0:de:c5:2d:d5:b9:bb:f8:b8:87:7a:cb:0a:c5:
         9f:1a:7f:29:b5:3f:32:bb:0f:da:64:18:1e:9e:ba:1c:af:f2:
         0d:90:ab:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:18:09 2026 by rpki-client