Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft
File:                     5TmMlveEeBsu3CA8dRxOh5h4X6E.mft (raw, json)
Hash identifier:          TucJ7iABs8yI/TOasWjYzX3zxEkRIDRVabEc9uLX1/M=
Subject key identifier:   85:21:48:6C:A2:A0:E5:6D:D7:39:BE:9F:4B:FA:67:A1:C2:B9:32:85
Authority key identifier: E5:39:8C:96:F7:84:78:1B:2E:DC:20:3C:75:1C:4E:87:98:78:5F:A1
Certificate issuer:       /CN=e5398c96f784781b2edc203c751c4e8798785fa1
Certificate serial:       01A0D61535F894D70C135DDFE292A748B4EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft
Manifest number:          0690
Signing time:             Fri 25 Sep 2026 01:01:49 +0000
Manifest this update:     Fri 25 Sep 2026 01:01:49 +0000
Manifest next update:     Sat 26 Sep 2026 01:01:49 +0000
Files and hashes:         1: 5TmMlveEeBsu3CA8dRxOh5h4X6E.crl (hash: 6eEOXoLM861Yx+r8OcjiKSEgADOrZT7U9nhZYAtnVsI=)
                          2: TlB35RpoAYh9JfFwZIdprGXzgU8.roa (hash: XzBThBrqkP0celJU8AjVVtRAPROC88dRjyzplXxnsx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:15:35:f8:94:d7:0c:13:5d:df:e2:92:a7:48:b4:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5398c96f784781b2edc203c751c4e8798785fa1
        Validity
            Not Before: Sep 25 01:01:49 2026 GMT
            Not After : Sep 26 01:01:49 2026 GMT
        Subject: CN=8521486ca2a0e56dd739be9f4bfa67a1c2b93285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6b:c8:10:25:6a:e8:6f:dd:c7:9b:e9:a7:cc:
                    ae:44:ce:ce:67:f0:2d:07:d1:c3:31:5c:2d:10:1e:
                    d9:5d:03:f9:06:b6:90:ca:fd:6b:27:70:65:bc:74:
                    93:bb:ad:a4:38:dd:c3:f7:8e:97:d9:5f:bf:ac:dd:
                    d8:4b:97:16:1a:17:48:ea:04:04:b7:17:f9:34:41:
                    1f:e7:c4:09:34:bf:15:27:4d:b5:e5:e3:dd:e8:2a:
                    43:ec:df:b4:0a:89:6f:c4:11:89:92:5f:da:8f:56:
                    d9:77:1e:32:b1:97:76:98:aa:57:1b:09:01:47:93:
                    bd:c5:5c:c5:df:e0:84:f6:03:9d:79:49:2c:5c:34:
                    2a:33:13:0a:90:9c:5c:b2:7c:83:cf:62:22:3b:7b:
                    c3:9a:9f:0d:b9:56:89:cc:12:0a:e5:49:d2:c4:bd:
                    a2:f9:ea:96:d2:f1:0c:66:d5:b4:1b:7b:bd:9d:59:
                    6e:22:8c:7b:35:07:d3:74:86:9d:de:7a:3f:81:4a:
                    b4:14:81:b1:5c:d1:fb:97:0b:06:60:4a:14:a2:17:
                    8c:40:b2:79:d4:04:f0:59:62:35:24:41:4b:65:6c:
                    98:ee:ad:12:20:58:63:f0:aa:0b:c1:7f:84:77:46:
                    81:a0:49:4e:ea:93:6f:d9:21:dc:e9:2d:00:04:6d:
                    f9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:21:48:6C:A2:A0:E5:6D:D7:39:BE:9F:4B:FA:67:A1:C2:B9:32:85
            X509v3 Authority Key Identifier:
                keyid:E5:39:8C:96:F7:84:78:1B:2E:DC:20:3C:75:1C:4E:87:98:78:5F:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:63:fc:e3:1c:42:f3:aa:c0:b3:1d:17:d3:4c:a5:ae:b1:af:
         7f:22:eb:7a:21:69:a7:d4:9d:13:70:e5:75:36:13:89:a4:3b:
         8a:0c:3a:d8:30:e1:07:2b:cf:5a:f6:3b:58:6e:8c:c5:f7:09:
         ed:a4:37:f4:f7:3e:b5:52:50:9c:75:97:ea:93:b4:af:97:26:
         52:37:74:14:97:5f:3d:46:31:7a:94:66:08:0f:f1:e5:dd:15:
         61:7b:7b:1f:09:cf:0b:69:2b:2d:b0:8f:4c:06:65:f1:f5:74:
         d9:ba:45:00:9d:ae:f6:c6:24:96:24:bf:f7:15:4b:ce:0f:e5:
         57:4c:7a:71:ce:a7:a8:f7:19:94:3f:13:a6:94:bb:90:51:0f:
         58:7b:44:0c:7c:14:ec:f3:de:ae:47:36:c8:ad:d3:a6:ef:83:
         78:fd:51:b7:df:f2:05:62:e2:a6:1a:7a:28:bc:3c:4e:33:cc:
         45:9d:9a:88:21:4b:d1:2a:26:f0:32:79:8c:61:45:f2:1f:e9:
         63:0b:39:a4:17:94:ee:b3:8c:88:b0:f8:45:1b:5c:59:f9:aa:
         ad:76:f1:83:e4:20:3f:41:e1:33:2d:21:d3:6f:7d:0e:99:ea:
         3d:c4:e6:e2:00:3f:64:ec:ed:0f:d7:5a:74:7a:66:09:41:e7:
         4d:e4:51:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:55:08 2026 by rpki-client