Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
File:                     5qr3mKBsFXlcb-xweYOYvrD01m4.mft (raw, json)
Hash identifier:          1hNlbotmDfhH/Po8HLSpp9Dvg+ZqxmGHc5uLIbqPOUg=
Subject key identifier:   69:EB:2D:E3:76:F7:CA:C0:0F:2F:14:B5:36:69:82:4A:4E:D1:DC:79
Authority key identifier: E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E
Certificate issuer:       /CN=e6aaf798a06c15795c6fec70798398beb0f4d66e
Certificate serial:       01A0CF35D008D0294BB55CAEB9EF2F9FF15A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
Manifest number:          0854
Signing time:             Wed 23 Sep 2026 17:00:05 +0000
Manifest this update:     Wed 23 Sep 2026 17:00:05 +0000
Manifest next update:     Thu 24 Sep 2026 17:00:05 +0000
Files and hashes:         1: 5qr3mKBsFXlcb-xweYOYvrD01m4.crl (hash: 42mhGGbvAKwMroad77QzMd1rGONyC1LEDtlfWIJIpOY=)
                          2: UKBweaqhrh1zuvqXS-71Vo4JffI.asa (hash: 7tMXOEFGnqTeI5De8GDOWfignh7b2YflpskEzceDR2Q=)
                          3: febei7ElndSA55KLJAxPmYsaSA8.roa (hash: 3rk22KTNdwadb2vDfYhZFH+AJY/gYjCaDrWeCZ+y2x8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 17:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:35:d0:08:d0:29:4b:b5:5c:ae:b9:ef:2f:9f:f1:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6aaf798a06c15795c6fec70798398beb0f4d66e
        Validity
            Not Before: Sep 23 17:00:05 2026 GMT
            Not After : Sep 24 17:00:05 2026 GMT
        Subject: CN=69eb2de376f7cac00f2f14b53669824a4ed1dc79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8e:4d:bf:d6:c0:29:2c:3e:80:bb:b2:12:23:
                    b7:29:ab:6e:09:08:b4:38:bd:94:4f:10:e6:ea:07:
                    3a:ab:28:e0:81:b3:cf:7f:ab:a8:69:71:b6:1d:e8:
                    69:eb:e6:a8:40:ea:53:34:8e:94:43:52:c4:b0:d1:
                    e2:50:7f:20:ae:09:c4:f8:51:de:45:6b:61:d2:b6:
                    4f:2e:dd:3e:8a:02:d5:f9:38:08:b5:6a:ee:4e:c7:
                    3d:b6:0f:72:28:16:ba:0d:97:f8:65:51:e8:de:5b:
                    4b:13:54:2f:62:92:7c:05:06:1e:37:8a:2d:dc:79:
                    9e:a6:c7:2d:6f:23:b5:fa:34:5b:9a:25:f7:9e:3c:
                    c0:ad:ba:23:4b:03:13:0b:e0:13:f3:6d:45:6f:06:
                    bf:ba:34:b5:9f:ee:48:f0:be:ec:c5:8c:2a:06:34:
                    69:3a:32:2b:91:9b:d1:1f:94:c0:b6:07:48:4d:dc:
                    85:0d:51:0a:f9:d7:16:f2:a5:13:a8:73:a8:29:19:
                    d2:51:67:d8:3a:2c:5b:93:42:2c:5a:f2:4c:49:0a:
                    18:77:9d:6f:cc:a0:f1:8f:f5:40:53:3d:d6:d8:4a:
                    ee:37:00:30:c6:97:7e:ee:2c:43:12:77:03:d2:db:
                    f8:ca:8e:a4:f9:a5:53:d3:86:48:aa:33:d4:1f:8c:
                    d0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:EB:2D:E3:76:F7:CA:C0:0F:2F:14:B5:36:69:82:4A:4E:D1:DC:79
            X509v3 Authority Key Identifier:
                keyid:E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:ea:5f:91:da:2a:18:2b:40:39:7b:b5:4c:79:92:8f:ba:6d:
         97:ef:22:43:f2:a9:c6:6e:f0:88:8c:c2:1c:e8:97:ff:eb:13:
         8f:05:54:87:11:05:96:25:e7:1f:0c:0f:be:55:e2:fe:cd:62:
         5b:27:f7:62:b3:fd:31:87:e4:bb:a7:5e:57:0a:c4:fe:da:20:
         57:02:af:80:2a:f8:42:1a:e4:a1:bd:dc:9a:93:b9:a6:07:69:
         0b:fc:aa:32:ce:5e:a6:e9:1f:d5:7b:f7:83:1a:17:c4:c3:55:
         ab:3e:2c:5d:cb:dd:7c:fc:3b:2f:4a:50:97:98:22:eb:f7:dd:
         26:f3:a9:9c:a7:af:e2:b4:52:dc:36:78:4b:db:b8:f6:13:69:
         82:94:e2:a2:e0:cc:cc:4e:84:70:98:e3:7c:c7:2c:af:db:ca:
         98:92:5a:ea:d0:e9:06:e2:b8:c8:ac:8c:3e:fd:b8:36:07:bf:
         98:2b:49:51:6c:31:06:f8:fb:78:d3:c8:d2:68:b3:7f:73:83:
         71:35:eb:96:fa:87:b9:bc:41:60:09:98:b5:11:e2:f3:bd:98:
         dd:57:ac:69:d8:3a:57:a9:e2:49:31:71:eb:98:0b:7a:67:e0:
         a9:72:93:52:c5:8c:4e:0d:3e:cc:8e:a0:22:e3:92:8a:3e:b5:
         a3:2b:2e:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPNdAI0ClLtVyuue8vn/FaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YWFmNzk4YTA2YzE1Nzk1YzZmZWM3MDc5ODM5OGJlYjBm
NGQ2NmUwHhcNMjYwOTIzMTcwMDA1WhcNMjYwOTI0MTcwMDA1WjAzMTEwLwYDVQQD
Eyg2OWViMmRlMzc2ZjdjYWMwMGYyZjE0YjUzNjY5ODI0YTRlZDFkYzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY5Nv9bAKSw+gLuyEiO3KatuCQi0
OL2UTxDm6gc6qyjggbPPf6uoaXG2Hehp6+aoQOpTNI6UQ1LEsNHiUH8grgnE+FHe
RWth0rZPLt0+igLV+TgItWruTsc9tg9yKBa6DZf4ZVHo3ltLE1QvYpJ8BQYeN4ot
3HmepsctbyO1+jRbmiX3njzArbojSwMTC+AT821Fbwa/ujS1n+5I8L7sxYwqBjRp
OjIrkZvRH5TAtgdITdyFDVEK+dcW8qUTqHOoKRnSUWfYOixbk0IsWvJMSQoYd51v
zKDxj/VAUz3W2EruNwAwxpd+7ixDEncD0tv4yo6k+aVT04ZIqjPUH4zQsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnrLeN298rADy8UtTZpgkpO0dx5MB8GA1UdIwQY
MBaAFOaq95igbBV5XG/scHmDmL6w9NZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXFyM21LQnNGWGxjYi14d2VZT1l2ckQwMW00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny81MTY5NDYtZDViNi00ZjBlLTk2NWMt
NTM3OGRlNDMwMzc3LzEvNXFyM21LQnNGWGxjYi14d2VZT1l2ckQwMW00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny81MTY5NDYtZDViNi00ZjBlLTk2NWMtNTM3OGRlNDMwMzc3
LzEvNXFyM21LQnNGWGxjYi14d2VZT1l2ckQwMW00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl+pfkdoq
GCtAOXu1THmSj7ptl+8iQ/Kpxm7wiIzCHOiX/+sTjwVUhxEFliXnHwwPvlXi/s1i
Wyf3YrP9MYfku6deVwrE/togVwKvgCr4Qhrkob3cmpO5pgdpC/yqMs5epukf1Xv3
gxoXxMNVqz4sXcvdfPw7L0pQl5gi6/fdJvOpnKev4rRS3DZ4S9u49hNpgpTiouDM
zE6EcJjjfMcsr9vKmJJa6tDpBuK4yKyMPv24Nge/mCtJUWwxBvj7eNPI0mizf3OD
cTXrlvqHubxBYAmYtRHi872Y3Vesadg6V6niSTFx65gLemfgqXKTUsWMTg0+zI6g
IuOSij61oysuig==
-----END CERTIFICATE-----
Generated at Thu Sep 24 04:06:09 2026 by rpki-client