Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft
File:                     5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft (raw, json)
Hash identifier:          tNyuwS8vd1XV5pYqVhzrez75rc8IMzI/8fp1F+qZgvM=
Subject key identifier:   C9:5A:0B:93:56:13:59:3C:B4:82:82:59:DE:B6:FB:BB:A8:3F:3C:4E
Authority key identifier: E4:67:3E:6D:6E:1C:F6:F6:01:15:E3:05:08:BE:15:BB:BF:E5:EA:AD
Certificate issuer:       /CN=e4673e6d6e1cf6f60115e30508be15bbbfe5eaad
Certificate serial:       01A0C9A2215B2469C8491161C2BBFA186733
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft
Manifest number:          1A6E
Signing time:             Tue 22 Sep 2026 15:00:40 +0000
Manifest this update:     Tue 22 Sep 2026 15:00:40 +0000
Manifest next update:     Wed 23 Sep 2026 15:00:40 +0000
Files and hashes:         1: 5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.crl (hash: pwsvsBaz3JUK1qkbIBxkKwV4GRiQH75n9FnOV22Ca6A=)
                          2: pGPIjgXbqa3E4qtB9K-nnRy5nwE.roa (hash: r9BkXCN77JVUwf1Rk1CC7NUcp98tk3M5Xo6C9+zBv3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:a2:21:5b:24:69:c8:49:11:61:c2:bb:fa:18:67:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4673e6d6e1cf6f60115e30508be15bbbfe5eaad
        Validity
            Not Before: Sep 22 15:00:40 2026 GMT
            Not After : Sep 23 15:00:40 2026 GMT
        Subject: CN=c95a0b935613593cb4828259deb6fbbba83f3c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2e:e9:fe:ac:8b:8d:2f:0d:52:72:a8:89:20:
                    b0:3d:61:8f:63:74:f2:c4:47:c7:6f:e7:55:e7:df:
                    4b:72:ee:18:db:9c:3c:2f:72:95:ca:fd:be:3e:ce:
                    17:b7:fa:f9:74:b4:1c:88:87:91:65:55:1a:02:41:
                    cb:b3:1a:60:96:1f:78:48:af:ea:79:1d:24:f5:f0:
                    30:a8:97:21:46:7a:0c:38:d1:dd:e4:54:68:93:e9:
                    ca:5b:bb:b8:74:a4:f1:35:c3:f8:b9:07:46:50:c7:
                    52:3c:96:97:75:16:06:db:05:3d:8c:4a:04:f5:54:
                    12:5d:b7:66:bd:3b:cc:9e:1f:02:24:e9:cf:98:f2:
                    ce:19:8b:02:28:85:68:f0:b5:30:da:05:56:74:56:
                    dc:02:da:c1:2c:66:c5:8e:d0:4d:8e:bd:2e:5f:95:
                    75:25:85:25:e5:bb:60:46:4d:ad:e5:cb:9e:8b:2a:
                    7a:16:bf:08:e3:8c:13:58:a6:1d:b0:a7:cb:e1:d5:
                    b3:1e:79:89:bc:91:5d:8c:f8:e6:9d:46:42:a1:92:
                    15:35:9b:7a:3c:00:68:32:99:65:cb:ec:c4:11:93:
                    1e:ed:73:6b:e3:22:0e:a9:3c:a4:c9:71:ad:c9:0e:
                    6e:f4:6b:0f:5a:0f:09:d6:85:f8:d7:f9:b3:3d:c6:
                    b3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:5A:0B:93:56:13:59:3C:B4:82:82:59:DE:B6:FB:BB:A8:3F:3C:4E
            X509v3 Authority Key Identifier:
                keyid:E4:67:3E:6D:6E:1C:F6:F6:01:15:E3:05:08:BE:15:BB:BF:E5:EA:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:50:8a:92:07:00:80:a0:7e:9b:01:00:9b:88:0f:7c:7b:37:
         82:84:a0:e2:2d:58:99:7f:3d:59:58:da:59:7f:b7:d3:ee:8a:
         74:90:06:7c:a3:50:b3:a9:36:bb:be:de:09:6a:e9:7d:1f:a9:
         70:7b:39:0d:d2:79:d9:76:ae:b1:83:08:ae:1d:1a:11:a2:7e:
         25:13:6a:ea:0c:f9:96:8a:56:db:6f:02:c5:61:2d:4e:0f:ed:
         06:d2:5f:e5:7e:65:30:88:ea:cd:d7:83:ad:8c:35:39:a2:97:
         eb:d8:d9:46:e8:9f:c7:58:6b:94:ec:72:98:b5:c2:4a:39:d3:
         34:e7:4c:b4:f8:2a:4a:72:44:26:da:84:f6:85:64:2c:e1:87:
         a1:5d:d4:04:fb:11:77:ef:d5:91:47:b9:2f:2a:bd:85:c4:be:
         6c:78:28:a0:4d:4f:f3:c5:41:86:1b:15:01:c1:83:18:99:67:
         78:ec:0d:15:fe:5f:53:96:45:54:7d:ab:d2:5c:dc:d9:c9:f4:
         47:40:bc:2a:9d:1b:9f:32:8a:57:97:f1:b7:01:22:f7:a4:b4:
         ea:c3:e7:94:68:0b:97:c4:ab:9d:37:b9:70:d3:65:10:b9:c5:
         4d:3e:14:03:2a:43:94:dd:14:c2:fc:c8:ff:cb:0b:f3:32:59:
         75:e7:18:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:05:17 2026 by rpki-client