Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.mft
File:                     5hU_zqGfHUn68-R-mJ22v15v5ak.mft (raw, json)
Hash identifier:          x4+G+oqX7q9cM0/dcixkpBeBGI7MZhYHRf/k0VLmQu8=
Subject key identifier:   2B:4C:76:FB:EC:7F:86:C2:21:E2:7E:96:18:5C:03:B0:13:EC:BD:76
Authority key identifier: E6:15:3F:CE:A1:9F:1D:49:FA:F3:E4:7E:98:9D:B6:BF:5E:6F:E5:A9
Certificate issuer:       /CN=e6153fcea19f1d49faf3e47e989db6bf5e6fe5a9
Certificate serial:       01A0D1249F5D626EC8DEE161DE946F7668C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hU_zqGfHUn68-R-mJ22v15v5ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.mft
Manifest number:          1A6D
Signing time:             Thu 24 Sep 2026 02:00:33 +0000
Manifest this update:     Thu 24 Sep 2026 02:00:33 +0000
Manifest next update:     Fri 25 Sep 2026 02:00:33 +0000
Files and hashes:         1: 5hU_zqGfHUn68-R-mJ22v15v5ak.crl (hash: 06D+cnXfMn5+jxbHeKgDTeg6lNSsVhzMYRHfRFqzFxk=)
                          2: wSyM0gz4zx6p84uHauOvtvDMKGs.roa (hash: WZ6TV+R46SR5wmwXRRLIlAJ/bQgYVkvtoX9ha3Mmbrg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5hU_zqGfHUn68-R-mJ22v15v5ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:24:9f:5d:62:6e:c8:de:e1:61:de:94:6f:76:68:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6153fcea19f1d49faf3e47e989db6bf5e6fe5a9
        Validity
            Not Before: Sep 24 02:00:33 2026 GMT
            Not After : Sep 25 02:00:33 2026 GMT
        Subject: CN=2b4c76fbec7f86c221e27e96185c03b013ecbd76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:55:53:0b:8e:21:5a:31:b8:74:0c:09:6f:44:
                    2c:8b:96:a8:02:0a:2d:b7:8a:ae:15:9c:57:68:89:
                    53:2a:6a:9b:3d:b9:b8:0c:bf:33:8d:0b:9d:89:6a:
                    88:63:86:8a:0a:7d:36:56:d6:9f:ba:22:67:51:99:
                    5d:1a:a1:d1:9f:84:e5:80:6d:4b:eb:78:34:f0:66:
                    9e:5d:83:4e:07:0a:d7:af:d5:6e:3e:48:6a:69:3c:
                    84:90:06:f4:25:52:07:a3:14:e0:ec:f8:21:ce:29:
                    1b:72:f8:c4:38:c6:24:9a:b3:ad:4a:f6:43:cd:53:
                    d0:fd:01:82:b2:fb:00:d8:3e:17:cb:ae:6c:15:2c:
                    78:e0:04:cb:48:e3:9f:ff:c2:8a:47:65:48:e8:99:
                    87:3f:94:ac:c3:5a:9d:ae:f8:ef:a6:3b:97:be:7d:
                    f5:6b:d9:4e:c9:86:d5:3c:5d:a7:d7:1f:af:b9:9f:
                    b8:d8:53:8b:29:92:bb:f0:c2:43:b6:be:03:ab:64:
                    21:17:33:98:e8:0e:55:32:aa:1d:5e:dd:b2:6c:ee:
                    2e:ca:46:aa:74:38:96:49:70:4b:73:49:7a:3b:75:
                    e4:95:de:d4:48:61:7a:9c:07:9b:0f:31:d7:c0:46:
                    79:9a:5d:03:cb:03:60:06:79:86:44:c0:de:d0:03:
                    5f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4C:76:FB:EC:7F:86:C2:21:E2:7E:96:18:5C:03:B0:13:EC:BD:76
            X509v3 Authority Key Identifier:
                keyid:E6:15:3F:CE:A1:9F:1D:49:FA:F3:E4:7E:98:9D:B6:BF:5E:6F:E5:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hU_zqGfHUn68-R-mJ22v15v5ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:ba:5e:ab:af:5e:ef:f3:8e:6e:6b:ac:ea:34:7c:50:ae:9a:
         20:9e:4c:38:e0:94:64:64:6c:19:40:86:35:78:d0:b4:cf:9e:
         75:91:f7:2c:4a:8c:09:02:f7:01:82:5f:fa:db:32:66:54:42:
         b5:c6:5b:61:ec:4a:ef:1a:46:11:59:96:f8:f4:23:b8:43:f4:
         2c:29:1c:6b:17:77:56:38:aa:26:1c:d6:e8:af:2d:bf:ad:6d:
         0e:51:0e:26:58:d8:e5:9e:f1:a6:d1:fc:e0:a0:65:29:69:cc:
         e6:b5:44:c2:f7:ad:73:12:87:68:c5:1c:ef:a0:22:04:bf:dd:
         14:f1:c2:d8:93:24:c9:e0:7d:10:93:10:1f:6a:54:d4:a9:86:
         d8:74:e8:e9:67:21:ad:73:6e:5a:83:d2:32:0d:24:4d:a4:2c:
         82:ad:eb:01:d7:44:b9:8d:99:31:4e:32:b4:1d:3b:78:7e:6d:
         04:00:2d:70:39:79:32:83:da:45:44:0c:92:79:80:26:db:43:
         3c:e9:9c:1d:b6:02:a8:67:fb:02:39:51:ba:d4:db:0f:bc:45:
         32:5b:e7:f9:d1:b9:76:af:6d:1f:ba:c5:79:5a:65:f9:be:f2:
         16:87:33:7f:45:ac:04:ae:2f:d4:be:1f:fc:72:7e:f2:8a:88:
         08:02:52:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:24:33 2026 by rpki-client