Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft
File:                     5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft (raw, json)
Hash identifier:          E5/TQFVnhYorjoHj8M58thLfrfG/ZWA7oM0+xMy0BMc=
Subject key identifier:   25:25:CE:2A:44:BF:CA:6C:96:28:A2:0E:9A:5E:9F:36:66:DE:74:B1
Authority key identifier: E4:FB:64:09:46:D8:CF:AE:FE:56:48:94:87:02:AD:60:34:A0:E8:B9
Certificate issuer:       /CN=e4fb640946d8cfaefe5648948702ad6034a0e8b9
Certificate serial:       01A0CF6CBC92F6EFBA1B8A8A96A77958ED8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5PtkCUbYz67-VkiUhwKtYDSg6Lk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft
Manifest number:          0F01
Signing time:             Wed 23 Sep 2026 18:00:04 +0000
Manifest this update:     Wed 23 Sep 2026 18:00:04 +0000
Manifest next update:     Thu 24 Sep 2026 18:00:04 +0000
Files and hashes:         1: 5PtkCUbYz67-VkiUhwKtYDSg6Lk.crl (hash: nCKN6MxRkQ4Y8NMqOvV1WmfRGM6t6p3mti1iNhZZc4k=)
                          2: P14uHlGf2lrMoUspqcAN6H9BcUc.roa (hash: qn6hIwu5/DuOQPvMM2Oe2W+KkeROqHy0+cq0AjAaLwQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5PtkCUbYz67-VkiUhwKtYDSg6Lk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:6c:bc:92:f6:ef:ba:1b:8a:8a:96:a7:79:58:ed:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4fb640946d8cfaefe5648948702ad6034a0e8b9
        Validity
            Not Before: Sep 23 18:00:04 2026 GMT
            Not After : Sep 24 18:00:04 2026 GMT
        Subject: CN=2525ce2a44bfca6c9628a20e9a5e9f3666de74b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:15:36:4f:0b:99:97:9a:01:a8:0e:7d:9c:b2:
                    e3:0b:9f:8e:3c:00:73:ff:11:d4:03:f6:a0:dc:31:
                    a5:b6:03:86:3d:06:ab:57:43:97:f0:1b:17:43:1d:
                    04:27:f2:45:28:a9:2c:3a:29:ce:80:06:9a:d6:63:
                    1b:b9:bd:77:f2:1a:c5:9b:51:fa:f4:02:44:f7:ca:
                    53:34:9a:4f:41:43:6a:84:cd:fb:b0:8c:18:62:dc:
                    33:9b:58:e2:56:cb:6c:f1:4f:6a:3f:10:af:58:24:
                    25:87:55:56:dc:21:05:78:e9:76:7b:7c:8c:f3:e6:
                    46:67:9f:eb:77:c7:c3:df:41:0f:f6:2d:2b:b9:22:
                    58:d8:bc:dc:c8:06:9e:99:ef:e2:a6:92:cc:b2:a5:
                    64:12:7c:ac:4c:06:7f:3a:91:89:cf:3a:b6:6f:09:
                    52:43:2d:f0:41:11:40:00:d3:38:dc:f4:f3:51:69:
                    f2:1b:d2:f1:c0:1d:ce:04:ee:44:78:12:1b:5f:87:
                    a8:f1:05:c2:88:c7:92:b6:6b:94:ab:30:f7:ab:6c:
                    c2:8d:09:b9:26:bb:44:11:75:6c:9d:ed:69:6f:b3:
                    1c:69:df:af:77:6d:85:f1:d9:69:0b:e9:c9:8e:ee:
                    8a:b3:3d:40:8a:61:d3:9a:9f:89:09:ac:08:ee:26:
                    61:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:25:CE:2A:44:BF:CA:6C:96:28:A2:0E:9A:5E:9F:36:66:DE:74:B1
            X509v3 Authority Key Identifier:
                keyid:E4:FB:64:09:46:D8:CF:AE:FE:56:48:94:87:02:AD:60:34:A0:E8:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PtkCUbYz67-VkiUhwKtYDSg6Lk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:b1:45:1e:99:87:ba:27:d2:d4:44:c9:e0:91:2f:b4:e8:75:
         90:46:3e:63:72:d6:6f:3d:a9:de:77:20:3a:57:e4:c7:db:b8:
         c8:2e:38:9c:98:e2:c8:2f:15:82:f5:0e:85:85:ce:2c:ca:e9:
         1c:e1:de:58:36:23:83:8f:35:a8:70:9f:cc:e3:75:31:1b:2b:
         32:e7:42:04:52:a0:8f:c7:a2:b1:ca:f9:20:36:e2:8c:de:f6:
         88:45:8e:7a:37:0c:b8:55:17:3f:b7:ab:e9:3a:4a:ce:38:54:
         44:fa:04:d6:e0:e4:bf:2e:4a:eb:4c:41:62:e9:af:3f:c1:66:
         88:f9:00:59:38:3d:38:4b:6f:7a:53:88:6f:8d:27:d8:b9:d0:
         e6:ef:5f:b4:39:b8:72:b7:b5:80:a6:d0:b5:4f:51:14:55:9f:
         6b:6b:6f:70:a2:cf:db:77:9d:69:d8:d6:98:08:b0:97:9a:eb:
         a3:78:a8:17:ec:61:2e:e9:c7:b9:53:aa:09:5e:3f:04:bd:98:
         ee:3b:03:24:fc:36:87:8e:5c:1b:20:c5:13:05:67:dd:f1:10:
         2f:c9:37:74:84:ad:b7:4b:6a:f7:40:7e:92:b0:dc:70:66:41:
         dd:e4:ad:8f:5c:74:d2:56:55:33:09:f9:a4:dc:e5:5c:b2:91:
         16:78:dc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:36:12 2026 by rpki-client