Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
File:                     00_-5-di-aBv4vR-eh5S2eun-v0.mft (raw, json)
Hash identifier:          LpsXYeEq5rlA4mbRa7gd+k/I/yDUeDF/cinxRPbbLPc=
Subject key identifier:   F6:E8:E5:D6:22:69:6B:0C:7A:E6:66:B7:6F:9B:B6:E5:BD:E5:31:71
Authority key identifier: D3:4F:FE:E7:E7:62:F9:A0:6F:E2:F4:7E:7A:1E:52:D9:EB:A7:FA:FD
Certificate issuer:       /CN=d34ffee7e762f9a06fe2f47e7a1e52d9eba7fafd
Certificate serial:       01A0E061797D03C139AF1DE1CEDF460578BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
Manifest number:          14C1
Signing time:             Sun 27 Sep 2026 01:01:19 +0000
Manifest this update:     Sun 27 Sep 2026 01:01:19 +0000
Manifest next update:     Mon 28 Sep 2026 01:01:19 +0000
Files and hashes:         1: 00_-5-di-aBv4vR-eh5S2eun-v0.crl (hash: zx17yVvaaxf7DBm9wO96hrS7OLOUq1YBFDBGXJ8piYE=)
                          2: NaC2EXhqguVissfFb8R9GK-pfWk.roa (hash: /tVqb/8j9ibKJcyJbXGCxzBW5/AN/dkNicwbisF6Ij8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e0:61:79:7d:03:c1:39:af:1d:e1:ce:df:46:05:78:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d34ffee7e762f9a06fe2f47e7a1e52d9eba7fafd
        Validity
            Not Before: Sep 27 01:01:19 2026 GMT
            Not After : Sep 28 01:01:19 2026 GMT
        Subject: CN=f6e8e5d622696b0c7ae666b76f9bb6e5bde53171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:df:7b:b1:28:8a:0e:85:22:5c:04:57:f8:22:
                    59:6c:53:0b:ec:c4:de:11:8f:06:73:76:d7:4c:34:
                    37:18:a1:4e:c9:7e:7d:68:52:b1:9d:5b:dd:b5:db:
                    8c:18:0f:3e:e7:ac:4e:bd:0e:6a:52:4e:68:6a:eb:
                    23:bc:dc:cc:23:c2:ed:88:e8:59:cf:5f:88:c9:0b:
                    8c:8c:73:d0:51:88:f5:1b:06:83:d4:04:ee:84:07:
                    17:57:2f:0a:3e:f3:af:11:cc:a5:83:fc:39:20:02:
                    6a:04:3a:4d:d4:27:8f:3a:d5:f7:35:14:d7:30:7b:
                    5a:23:79:9c:ac:b6:13:1d:59:f7:fa:89:1e:54:33:
                    b2:b8:db:de:35:e0:27:b1:42:cf:23:aa:6f:c1:32:
                    d1:da:10:e2:97:0b:1e:0d:c4:a4:cd:99:f3:87:83:
                    46:90:c3:99:c0:c8:c2:75:cd:a4:c9:10:24:c6:36:
                    fa:b5:43:4f:d4:34:40:b0:06:40:3c:94:e7:44:a9:
                    a5:1f:f8:bf:81:7d:19:78:28:6f:78:88:d2:a7:05:
                    06:ae:ba:be:6f:51:54:68:13:e8:f3:77:3a:a4:c6:
                    b7:d8:09:4c:82:fe:29:17:68:2c:89:7c:b5:00:53:
                    df:8c:5f:41:62:c5:14:20:92:b2:94:5b:e6:6f:76:
                    0e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E8:E5:D6:22:69:6B:0C:7A:E6:66:B7:6F:9B:B6:E5:BD:E5:31:71
            X509v3 Authority Key Identifier:
                keyid:D3:4F:FE:E7:E7:62:F9:A0:6F:E2:F4:7E:7A:1E:52:D9:EB:A7:FA:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:48:4d:57:b2:53:eb:b5:56:86:78:ea:9c:4a:e6:43:61:26:
         fe:03:9f:f1:b5:d6:21:88:d4:1a:28:aa:c9:d3:1d:15:85:40:
         81:a9:76:cb:d4:38:c5:45:99:d4:74:ea:13:5e:af:09:ff:37:
         84:e5:ae:10:9a:8e:8f:9c:19:b7:5b:71:5a:5c:ee:a6:0e:56:
         42:4e:04:da:92:e3:6e:34:13:31:e4:f4:67:c2:38:4a:d5:ee:
         64:1f:f5:24:38:47:82:6e:ff:50:df:59:6c:dc:45:fa:00:ff:
         cc:ad:8c:1c:3a:2b:5b:af:c3:77:ce:de:4b:5b:97:02:b3:1f:
         22:36:71:1b:de:19:fb:2a:50:81:fc:58:b4:e1:66:cb:69:2f:
         2a:9f:0a:6b:d7:40:66:d6:dc:d8:93:ae:b5:78:31:f3:1c:54:
         9a:ef:5b:af:c1:6d:d2:7c:67:bd:f4:dc:97:df:a6:8c:e9:32:
         ee:07:bf:e3:6a:ad:7a:f8:bf:19:61:c0:4b:08:51:dd:63:f4:
         9b:45:86:4d:38:51:b7:ae:16:12:4b:37:65:50:9e:56:49:a7:
         1e:d8:38:79:7a:67:3e:2b:85:17:9f:de:fb:18:f3:7b:5b:51:
         64:93:da:19:17:6c:67:5f:10:75:eb:c7:d4:39:4d:dc:3a:78:
         20:12:54:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:32:26 2026 by rpki-client