Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft
File:                     5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft (raw, json)
Hash identifier:          rvDNAQlWjnI3ofeP8v2apOxeRbFG8fSDbP1DSfMMz88=
Subject key identifier:   A6:A5:3C:5F:DB:9A:55:F5:81:2E:E5:12:43:3C:27:3C:BC:4A:0E:FC
Authority key identifier: E6:CC:65:C2:7C:23:29:8B:0C:5A:0E:0B:C7:4B:A5:10:34:A7:04:C8
Certificate issuer:       /CN=e6cc65c27c23298b0c5a0e0bc74ba51034a704c8
Certificate serial:       01A0DC84CCF1403BE2B6E190662907C2E66C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft
Manifest number:          1A74
Signing time:             Sat 26 Sep 2026 07:01:25 +0000
Manifest this update:     Sat 26 Sep 2026 07:01:25 +0000
Manifest next update:     Sun 27 Sep 2026 07:01:25 +0000
Files and hashes:         1: 5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl (hash: Ens/xlsZADxyU0HpM41b+ZcHrM1zYvc348QHCo+jPtk=)
                          2: IcEfPnhAjewSEEO3LOP7u-TcVC4.roa (hash: BRMvl9t5zukkJheawmCAi6lNUM26ZBTh/KTKt1g+rZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:84:cc:f1:40:3b:e2:b6:e1:90:66:29:07:c2:e6:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6cc65c27c23298b0c5a0e0bc74ba51034a704c8
        Validity
            Not Before: Sep 26 07:01:25 2026 GMT
            Not After : Sep 27 07:01:25 2026 GMT
        Subject: CN=a6a53c5fdb9a55f5812ee512433c273cbc4a0efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:43:88:a0:43:3f:72:84:0c:34:4c:bd:42:10:
                    6a:c1:54:32:d8:35:33:64:9f:85:3b:d0:a5:e0:dd:
                    a1:33:19:4f:50:9e:93:b3:59:50:39:e7:93:a4:0c:
                    6b:f7:81:23:26:a7:6b:97:b9:85:81:fe:ba:17:9a:
                    4e:b5:cc:22:58:2a:c6:f6:c8:dc:a8:ee:61:71:6b:
                    26:79:11:27:d6:ae:80:6d:dc:32:90:a5:3f:da:6b:
                    16:a0:57:82:bb:a0:75:c1:ea:ce:00:fc:77:2b:7b:
                    fa:3d:93:41:1e:e6:f0:b7:62:66:4a:27:7d:3a:28:
                    f7:93:70:df:34:94:b3:d6:ee:1a:12:3e:79:c1:2d:
                    e0:f6:b4:b2:f7:96:92:df:3b:c8:35:4b:9b:39:70:
                    bd:2e:24:81:35:a1:9e:18:4c:63:3b:8c:a8:af:4c:
                    f3:a0:5c:da:15:45:19:01:31:07:da:6e:e7:9c:fe:
                    35:8f:9d:4e:7f:d0:49:76:32:f2:b0:65:78:2b:00:
                    44:30:c6:cf:83:29:e8:32:37:8d:cc:a3:7e:a2:38:
                    f3:30:1f:f5:21:1b:6d:20:a9:88:38:88:5c:99:7f:
                    95:3a:c4:dc:42:36:c2:9d:66:11:9c:2b:50:e5:77:
                    72:20:4e:29:e8:88:f8:49:05:13:7c:50:ed:e0:7d:
                    e6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A5:3C:5F:DB:9A:55:F5:81:2E:E5:12:43:3C:27:3C:BC:4A:0E:FC
            X509v3 Authority Key Identifier:
                keyid:E6:CC:65:C2:7C:23:29:8B:0C:5A:0E:0B:C7:4B:A5:10:34:A7:04:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:dc:cb:c1:2d:0b:cf:73:64:4c:60:a7:a8:cd:57:f1:71:2c:
         ce:42:78:e3:66:5c:3a:b7:b2:ba:f8:b8:87:da:7d:e4:8c:27:
         5b:1a:1b:b3:8b:22:55:bb:c4:fc:31:f8:e4:af:ca:dd:b4:f9:
         01:b8:a7:05:e5:f5:9f:19:39:44:7f:8e:66:4a:e1:2d:c8:46:
         fe:90:96:28:aa:3a:91:5d:74:81:f4:70:15:43:f6:63:1b:a5:
         8d:40:d1:b1:2d:fb:c1:0e:0f:35:ab:da:5a:01:b2:5b:42:96:
         f8:7d:1b:e6:e1:8c:f5:d4:03:9f:6f:3a:51:da:c8:3a:ab:db:
         fa:4b:96:bb:07:83:41:3a:3a:2e:de:cd:a5:f2:80:f9:62:dc:
         e3:b5:cb:46:c2:9f:a9:9e:4b:59:f6:1f:c5:52:1e:6d:42:62:
         20:cc:dd:ca:d3:a4:9a:f7:b3:c5:66:5f:e4:86:7c:e6:f1:52:
         0e:89:f1:d5:f0:bf:88:4f:ef:ba:38:c4:27:36:aa:44:76:56:
         a4:42:1f:ca:3c:e7:7f:d2:6a:7b:60:4e:89:f8:aa:fc:a9:b3:
         a4:bc:1d:f3:b5:28:e3:bb:47:11:3c:3d:66:d6:e5:5b:be:58:
         fe:d2:32:89:7e:28:1b:53:ab:b0:d9:e0:ee:fb:d7:06:8e:38:
         09:91:40:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:38:06 2026 by rpki-client