Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/b973fb-f0c2-4b9d-87fd-63a2048699a4/1/5I2Sm9kM-ES_C_wv_YK2ovFD8Jc.mft
File:                     5I2Sm9kM-ES_C_wv_YK2ovFD8Jc.mft (raw, json)
Hash identifier:          x4Eum1UroZLo1sYC2bdS+deyhDzG9k0sazVNKVXDzQY=
Subject key identifier:   09:F4:86:B1:9B:58:86:B1:38:25:CB:A7:56:D8:64:45:38:BB:0A:0D
Authority key identifier: E4:8D:92:9B:D9:0C:F8:44:BF:0B:FC:2F:FD:82:B6:A2:F1:43:F0:97
Certificate issuer:       /CN=e48d929bd90cf844bf0bfc2ffd82b6a2f143f097
Certificate serial:       01A0CE5A995B693FEA5B6D59BA3B997FDCBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5I2Sm9kM-ES_C_wv_YK2ovFD8Jc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/b973fb-f0c2-4b9d-87fd-63a2048699a4/1/5I2Sm9kM-ES_C_wv_YK2ovFD8Jc.mft
Manifest number:          0E
Signing time:             Wed 23 Sep 2026 13:00:38 +0000
Manifest this update:     Wed 23 Sep 2026 13:00:38 +0000
Manifest next update:     Thu 24 Sep 2026 13:00:38 +0000
Files and hashes:         1: 5I2Sm9kM-ES_C_wv_YK2ovFD8Jc.crl (hash: lVN30pxa/vCbvn6Rc0u6ai/N5OtHnnFlAMvEt8gtrjc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/b973fb-f0c2-4b9d-87fd-63a2048699a4/1/5I2Sm9kM-ES_C_wv_YK2ovFD8Jc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/b973fb-f0c2-4b9d-87fd-63a2048699a4/1/5I2Sm9kM-ES_C_wv_YK2ovFD8Jc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5I2Sm9kM-ES_C_wv_YK2ovFD8Jc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 13:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:5a:99:5b:69:3f:ea:5b:6d:59:ba:3b:99:7f:dc:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e48d929bd90cf844bf0bfc2ffd82b6a2f143f097
        Validity
            Not Before: Sep 23 13:00:38 2026 GMT
            Not After : Sep 24 13:00:38 2026 GMT
        Subject: CN=09f486b19b5886b13825cba756d8644538bb0a0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9c:de:75:9d:b5:a4:54:27:3c:43:21:e4:6c:
                    20:d6:a6:db:8e:08:27:8c:0e:5b:3d:dc:12:58:55:
                    82:36:36:c3:1a:76:5a:9d:9a:e5:80:a9:f5:2c:be:
                    1a:9b:0e:ec:8b:3e:72:1d:54:48:db:62:00:ff:78:
                    61:e5:e5:69:46:85:e1:d1:87:b0:7b:81:c0:f1:d2:
                    29:73:5d:18:55:fc:cb:77:ba:d6:e5:02:11:34:45:
                    f4:31:7c:02:fe:a4:1c:29:a4:ce:dd:17:4c:ad:17:
                    27:06:ab:ab:b6:55:93:54:77:13:13:27:7b:3f:38:
                    f9:78:7e:0f:40:4f:02:f8:0e:c2:f7:43:94:e7:7f:
                    4a:a0:f8:66:89:8a:d9:0a:c2:e0:ec:ca:29:c1:ad:
                    d4:a5:c1:0e:4a:7f:e2:b2:c3:92:58:47:39:22:85:
                    1c:15:a5:5d:39:1f:9d:b7:b4:81:45:2d:cc:ee:a6:
                    d1:69:f6:33:23:86:a9:3c:f8:55:a5:94:88:5a:9d:
                    5e:42:8a:ae:41:9c:6a:8f:a3:81:66:5e:e8:d9:13:
                    39:3a:8a:56:86:a8:1d:cd:8d:3f:bb:0d:5c:6f:1c:
                    cc:06:04:8c:ae:af:fa:b7:29:9b:3f:a7:96:9b:9b:
                    c2:0f:20:d6:75:57:16:51:7c:7c:75:6f:1f:2e:8c:
                    07:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F4:86:B1:9B:58:86:B1:38:25:CB:A7:56:D8:64:45:38:BB:0A:0D
            X509v3 Authority Key Identifier:
                keyid:E4:8D:92:9B:D9:0C:F8:44:BF:0B:FC:2F:FD:82:B6:A2:F1:43:F0:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5I2Sm9kM-ES_C_wv_YK2ovFD8Jc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b973fb-f0c2-4b9d-87fd-63a2048699a4/1/5I2Sm9kM-ES_C_wv_YK2ovFD8Jc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b973fb-f0c2-4b9d-87fd-63a2048699a4/1/5I2Sm9kM-ES_C_wv_YK2ovFD8Jc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:e6:b5:38:84:32:c7:b5:ff:91:9b:af:cd:53:b1:82:99:12:
         28:f6:ca:b6:3f:e3:46:b6:66:30:9c:2b:a8:96:59:00:80:31:
         28:30:02:63:23:ca:91:7c:a2:07:fb:a3:f9:25:d4:44:5a:b9:
         de:a4:4e:04:f7:f1:0a:3c:2e:0e:ed:96:06:f1:b0:b7:09:35:
         ea:b0:f3:cc:13:c1:9e:07:c9:d4:db:ba:7d:27:76:dc:39:73:
         34:9c:bb:cd:60:8d:a0:d5:42:47:f6:df:f8:53:18:75:86:c0:
         ef:51:40:e7:d0:f6:81:6c:3e:32:64:56:25:96:ae:52:bc:c7:
         b1:66:ec:59:cd:db:34:2f:9d:a7:d1:9e:5a:71:6c:5b:97:39:
         a6:13:41:c0:b0:ed:c2:ba:26:6a:f7:6c:7a:87:96:bb:69:85:
         fe:7e:db:e8:11:bf:ea:5b:b0:d5:68:0d:f6:f4:a7:84:0b:98:
         b0:c7:36:c3:81:f8:e6:f9:91:f1:0d:5a:d5:43:d3:d4:96:36:
         c4:3b:a5:62:0b:d8:30:c1:71:a7:a7:68:42:7f:73:61:fc:be:
         7b:97:df:df:2c:94:57:6b:ea:5a:cb:5e:92:a5:1c:a6:e3:3e:
         cb:73:98:84:47:a3:77:c6:00:48:9e:2c:c4:fd:0d:81:fd:9c:
         3d:6d:62:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOWplbaT/qW21ZujuZf9y9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0OGQ5MjliZDkwY2Y4NDRiZjBiZmMyZmZkODJiNmEyZjE0
M2YwOTcwHhcNMjYwOTIzMTMwMDM4WhcNMjYwOTI0MTMwMDM4WjAzMTEwLwYDVQQD
EygwOWY0ODZiMTliNTg4NmIxMzgyNWNiYTc1NmQ4NjQ0NTM4YmIwYTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZzedZ21pFQnPEMh5Gwg1qbbjggn
jA5bPdwSWFWCNjbDGnZanZrlgKn1LL4amw7siz5yHVRI22IA/3hh5eVpRoXh0Yew
e4HA8dIpc10YVfzLd7rW5QIRNEX0MXwC/qQcKaTO3RdMrRcnBqurtlWTVHcTEyd7
Pzj5eH4PQE8C+A7C90OU539KoPhmiYrZCsLg7Mopwa3UpcEOSn/issOSWEc5IoUc
FaVdOR+dt7SBRS3M7qbRafYzI4apPPhVpZSIWp1eQoquQZxqj6OBZl7o2RM5OopW
hqgdzY0/uw1cbxzMBgSMrq/6tymbP6eWm5vCDyDWdVcWUXx8dW8fLowHBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAn0hrGbWIaxOCXLp1bYZEU4uwoNMB8GA1UdIwQY
MBaAFOSNkpvZDPhEvwv8L/2CtqLxQ/CXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUkyU205a00tRVNfQ193dl9ZSzJvdkZEOEpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9iOTczZmItZjBjMi00YjlkLTg3ZmQt
NjNhMjA0ODY5OWE0LzEvNUkyU205a00tRVNfQ193dl9ZSzJvdkZEOEpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9iOTczZmItZjBjMi00YjlkLTg3ZmQtNjNhMjA0ODY5OWE0
LzEvNUkyU205a00tRVNfQ193dl9ZSzJvdkZEOEpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjea1OIQy
x7X/kZuvzVOxgpkSKPbKtj/jRrZmMJwrqJZZAIAxKDACYyPKkXyiB/uj+SXURFq5
3qROBPfxCjwuDu2WBvGwtwk16rDzzBPBngfJ1Nu6fSd23DlzNJy7zWCNoNVCR/bf
+FMYdYbA71FA59D2gWw+MmRWJZauUrzHsWbsWc3bNC+dp9GeWnFsW5c5phNBwLDt
wromavdseoeWu2mF/n7b6BG/6luw1WgN9vSnhAuYsMc2w4H45vmR8Q1a1UPT1JY2
xDulYgvYMMFxp6doQn9zYfy+e5ff3yyUV2vqWstekqUcpuM+y3OYhEejd8YASJ4s
xP0Ngf2cPW1iGw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 18:08:47 2026 by rpki-client