Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
File:                     5OF-B7BNx2ydbJH6_C1ahALGS44.mft (raw, json)
Hash identifier:          WU/9LdDwt2kFnQh7z6B9PqDeJEJkaJPhM9cMixOvGFY=
Subject key identifier:   10:B7:FC:5D:F5:76:2B:9E:9B:EE:A3:9E:DC:CA:44:00:8E:1B:30:9A
Authority key identifier: E4:E1:7E:07:B0:4D:C7:6C:9D:6C:91:FA:FC:2D:5A:84:02:C6:4B:8E
Certificate issuer:       /CN=e4e17e07b04dc76c9d6c91fafc2d5a8402c64b8e
Certificate serial:       01A0D0B70BC172B43A3029DC006665188C35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
Manifest number:          17F5
Signing time:             Thu 24 Sep 2026 00:00:51 +0000
Manifest this update:     Thu 24 Sep 2026 00:00:51 +0000
Manifest next update:     Fri 25 Sep 2026 00:00:51 +0000
Files and hashes:         1: 5OF-B7BNx2ydbJH6_C1ahALGS44.crl (hash: u5FlWcpGycJ7ef9u6dPXKS1764GsLBl9YoRICUroaIs=)
                          2: t6BhcYXg4KwNaqu8cpBYdqYEnU4.roa (hash: 5MkCV/QjwB3662GkBqLGKddzdkOwO6U/3b1//vjDeiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:b7:0b:c1:72:b4:3a:30:29:dc:00:66:65:18:8c:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4e17e07b04dc76c9d6c91fafc2d5a8402c64b8e
        Validity
            Not Before: Sep 24 00:00:51 2026 GMT
            Not After : Sep 25 00:00:51 2026 GMT
        Subject: CN=10b7fc5df5762b9e9beea39edcca44008e1b309a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:35:b2:cd:3d:4c:39:be:05:2d:da:f3:b1:ca:
                    1e:15:14:28:74:32:a9:ec:97:3d:bb:9d:81:b2:d6:
                    67:28:dc:10:a5:94:5f:5f:f4:f1:6f:dd:0a:6a:70:
                    86:a3:0d:37:6b:6a:87:dc:87:5e:08:ab:e0:71:dc:
                    21:2f:fd:70:cf:c8:fe:2f:3e:4d:b0:19:99:79:c8:
                    0f:0f:b5:81:9e:78:54:51:9c:0f:8e:bb:2a:61:18:
                    1c:35:e8:93:d0:40:4f:f6:6d:9e:8f:a5:cf:44:6c:
                    57:3e:55:bc:af:df:9a:0a:65:5a:bb:1d:52:be:37:
                    ad:53:5d:56:f6:1f:39:23:f9:6c:55:6c:80:ce:80:
                    83:a3:7c:fe:31:24:ea:57:fc:32:be:a2:6f:db:72:
                    65:34:02:aa:71:b7:cb:c9:e5:e1:fb:de:c3:0c:6b:
                    4e:dc:3d:fd:a8:88:21:d3:51:95:f3:48:3f:10:54:
                    07:4c:fc:29:f5:7d:02:ea:69:aa:1e:86:21:04:b0:
                    a3:1e:30:e3:ac:e5:38:a8:e3:fc:cd:6c:db:ac:0a:
                    53:eb:5b:af:5f:9c:d4:d3:75:3b:9b:28:e5:c9:52:
                    c6:f3:c0:ee:69:d2:e5:03:fa:34:f2:b1:34:3d:07:
                    70:05:7e:30:a4:27:ef:96:0f:80:2b:f5:65:ca:13:
                    d7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B7:FC:5D:F5:76:2B:9E:9B:EE:A3:9E:DC:CA:44:00:8E:1B:30:9A
            X509v3 Authority Key Identifier:
                keyid:E4:E1:7E:07:B0:4D:C7:6C:9D:6C:91:FA:FC:2D:5A:84:02:C6:4B:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:a0:3c:b1:cf:6c:e7:ff:cf:6f:8b:54:cb:87:ef:87:30:f4:
         f5:94:b7:84:ed:88:cf:3f:da:c1:85:a4:78:b5:30:af:9b:74:
         f2:ab:7a:f2:eb:ea:f1:47:59:7a:05:05:1c:8d:87:ab:a4:02:
         0d:1c:e1:b5:f9:ea:f2:fa:47:07:1f:4e:8e:07:0e:07:62:b6:
         56:d3:91:07:aa:0d:26:23:bb:63:59:91:eb:ed:88:3a:25:8d:
         8b:6c:9e:4a:02:6d:38:79:5d:1b:8b:50:df:bb:1b:17:56:75:
         9d:10:be:a0:23:8b:9c:82:ef:4a:ba:6b:e6:4a:65:17:3e:97:
         25:47:10:f5:11:1f:55:0a:be:b6:88:8a:4d:ff:d5:54:20:87:
         1c:fd:67:d5:da:b4:58:b4:8d:e7:ee:96:56:d3:47:31:d2:29:
         01:c1:a4:d3:c1:f1:ae:6f:d0:7a:bb:5b:df:05:a4:16:3b:1a:
         46:ab:56:88:22:42:1a:39:c2:ad:e4:0f:d2:b7:24:55:11:4f:
         82:8f:ca:b6:93:c8:96:4a:a5:61:31:6a:93:26:8c:73:b7:4b:
         ac:87:ef:ca:2f:11:e4:41:6e:4a:61:43:69:ac:df:9c:33:d2:
         eb:a6:87:22:12:f6:17:bf:c8:b5:0c:a3:0a:70:a8:26:7a:c1:
         7b:01:e3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:24:07 2026 by rpki-client