Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.mft
File:                     5wVXsySVkhfZJZvs0aBUm2_6n2U.mft (raw, json)
Hash identifier:          0F7p99wa74UKYsc6FNtTH6A0GItHm1vPZVVnlHTiDFs=
Subject key identifier:   3C:BD:DD:0D:52:BB:92:83:33:4C:15:11:A8:C2:39:84:2A:ED:67:75
Authority key identifier: E7:05:57:B3:24:95:92:17:D9:25:9B:EC:D1:A0:54:9B:6F:FA:9F:65
Certificate issuer:       /CN=e70557b324959217d9259becd1a0549b6ffa9f65
Certificate serial:       01A0CAEB97CFDC4BB0C489D7DDF55E7857F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5wVXsySVkhfZJZvs0aBUm2_6n2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.mft
Manifest number:          07C8
Signing time:             Tue 22 Sep 2026 21:00:32 +0000
Manifest this update:     Tue 22 Sep 2026 21:00:32 +0000
Manifest next update:     Wed 23 Sep 2026 21:00:32 +0000
Files and hashes:         1: 5wVXsySVkhfZJZvs0aBUm2_6n2U.crl (hash: ZWv+UKmyCGz9xU/5qQpOCFvxbaptl0Cz5Ve7i3+BZ3w=)
                          2: 6Yzr3OVTJb9VB8KOsOxhQRp4BfY.roa (hash: 1ZZncd6nFuezEkjQjpjvgnWBLsAhF4uDMkbMpIZAlJU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5wVXsySVkhfZJZvs0aBUm2_6n2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:eb:97:cf:dc:4b:b0:c4:89:d7:dd:f5:5e:78:57:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e70557b324959217d9259becd1a0549b6ffa9f65
        Validity
            Not Before: Sep 22 21:00:32 2026 GMT
            Not After : Sep 23 21:00:32 2026 GMT
        Subject: CN=3cbddd0d52bb9283334c1511a8c239842aed6775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:26:2a:61:92:d7:d4:08:0a:00:40:63:e2:6f:
                    df:ec:97:50:61:47:42:8c:5c:41:d2:7a:80:57:2c:
                    80:77:f4:46:83:27:ad:49:3b:0b:15:a0:3e:f4:97:
                    41:5f:17:fb:c8:95:d1:19:6b:07:10:04:65:17:7d:
                    71:f6:c1:56:1b:a4:ca:72:79:6f:f5:e3:00:a8:c9:
                    5d:24:f1:59:d0:ac:ee:71:53:5f:d8:f6:ea:15:20:
                    00:34:79:dc:59:65:6e:1c:11:5a:5a:07:9d:75:8b:
                    7f:4f:d2:13:3a:70:81:2f:5a:86:42:93:42:4f:12:
                    12:62:42:e3:df:3c:15:17:3c:c4:9a:2e:a9:d1:ec:
                    7d:26:39:1f:00:18:21:11:55:f2:40:33:eb:47:3d:
                    f5:7f:76:56:d0:ec:60:b6:5d:e0:bc:73:ed:20:b0:
                    90:b4:87:c5:c7:f5:56:6c:f3:c6:c6:a7:df:40:15:
                    69:2f:7e:c0:ee:9d:32:09:bd:ad:3d:b1:72:3b:5b:
                    34:3f:f6:d0:12:5c:66:b5:0a:0b:b8:c8:3a:77:11:
                    61:66:eb:29:c3:fc:9e:15:05:1f:80:e2:72:20:14:
                    bb:3b:86:89:f0:56:45:53:75:54:4e:70:76:2a:07:
                    d7:7a:68:b6:09:74:d0:6d:02:a1:21:81:55:81:44:
                    15:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BD:DD:0D:52:BB:92:83:33:4C:15:11:A8:C2:39:84:2A:ED:67:75
            X509v3 Authority Key Identifier:
                keyid:E7:05:57:B3:24:95:92:17:D9:25:9B:EC:D1:A0:54:9B:6F:FA:9F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wVXsySVkhfZJZvs0aBUm2_6n2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:b5:97:ff:91:32:5e:6c:67:89:72:ba:67:e6:42:3c:14:21:
         02:4a:27:b9:50:07:95:76:e0:04:b5:e4:c7:f4:35:b6:a8:b8:
         11:ef:8e:e9:0e:4a:09:8b:c7:cc:e0:38:79:58:93:f0:3c:f2:
         12:f5:94:8c:c9:93:e1:a3:a8:23:36:9f:dc:a5:60:66:23:36:
         0a:bc:f2:56:7e:06:9c:d7:49:86:b3:a1:2e:57:7a:21:8d:2d:
         e5:ad:ca:d4:15:0d:fb:89:79:c6:aa:f0:6a:e1:8e:4e:04:ec:
         02:7b:c0:e1:e6:bb:bb:73:69:73:79:29:0b:25:77:42:e6:d2:
         5c:85:2c:5c:c2:45:e4:61:a8:c7:f4:a4:74:1b:21:1c:80:cd:
         10:11:0e:d0:f6:e8:4d:54:8b:d9:64:bf:5a:22:56:8c:38:e5:
         d1:6a:a0:56:cf:7a:b0:31:9b:9c:82:d3:8e:4f:94:53:90:a8:
         f9:3f:f5:6f:2a:23:6b:77:f3:3c:89:4e:5b:61:1d:08:07:c1:
         54:f4:6e:98:2b:4c:8b:78:73:bf:1a:cd:76:81:46:49:40:99:
         d0:b6:96:2e:24:5f:87:74:b8:d7:71:d1:33:80:ac:83:20:6d:
         76:32:99:a6:78:c6:9a:0b:8c:5e:93:be:e7:d1:fb:b4:4f:67:
         94:09:3b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:23:22 2026 by rpki-client