Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
File:                     5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft (raw, json)
Hash identifier:          zCF94FSjeO33ksT5D0p8pefIHgNNCFpkvezyhVii+fU=
Subject key identifier:   80:E7:AC:5C:2C:75:FC:38:C8:88:9D:51:5E:C0:AA:24:27:60:8C:17
Authority key identifier: E4:95:AC:BA:FE:46:EF:2F:4D:6C:51:FC:F2:3B:D7:2F:63:9C:FD:0B
Certificate issuer:       /CN=e495acbafe46ef2f4d6c51fcf23bd72f639cfd0b
Certificate serial:       01A0D1C9ADFC548AD4EEDC8F9D097EAF196B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
Manifest number:          0D26
Signing time:             Thu 24 Sep 2026 05:00:50 +0000
Manifest this update:     Thu 24 Sep 2026 05:00:50 +0000
Manifest next update:     Fri 25 Sep 2026 05:00:50 +0000
Files and hashes:         1: 5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl (hash: XGh2BpNx7BBPqI79Ktc593kKYnxvtmq1dvoukYLAK3E=)
                          2: o45AvLtTXWpofzL1ORN3GJy42Sw.roa (hash: Kb4YnS6qGzK3YXYEHAE784icfkL1K33dQHPHFIXS48c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 05:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:c9:ad:fc:54:8a:d4:ee:dc:8f:9d:09:7e:af:19:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e495acbafe46ef2f4d6c51fcf23bd72f639cfd0b
        Validity
            Not Before: Sep 24 05:00:50 2026 GMT
            Not After : Sep 25 05:00:50 2026 GMT
        Subject: CN=80e7ac5c2c75fc38c8889d515ec0aa2427608c17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ce:fa:a1:9f:c9:bd:04:74:67:2b:0e:f3:3a:
                    58:83:32:1d:28:0f:6f:98:6c:3d:ab:8c:bd:ab:b1:
                    89:65:80:4d:e1:19:45:24:61:86:05:f9:a5:e0:36:
                    53:21:60:49:2d:03:c7:9c:c0:86:36:97:e6:34:d9:
                    cd:f6:98:56:72:8f:32:53:d0:f5:98:e7:3b:28:12:
                    2a:ac:06:aa:d9:b5:1b:70:8a:0a:14:8f:4d:36:0b:
                    33:47:48:f9:f4:fc:3b:6a:e1:26:6c:b0:b6:de:da:
                    a1:76:f8:b2:1b:24:3c:41:dd:c1:bc:af:3c:3c:32:
                    8f:44:5e:dd:7d:19:90:af:c9:9b:f5:ba:fa:99:6c:
                    43:a6:8c:ce:7e:23:42:49:d1:a5:be:3d:69:96:5f:
                    f8:9e:72:14:92:f8:53:9e:30:5a:bf:31:4b:9e:7c:
                    aa:84:60:49:a3:2f:55:fc:e7:56:3c:0f:c4:de:fc:
                    87:cc:4a:0a:61:e9:80:d6:d2:d9:da:ee:32:ab:76:
                    24:0d:93:bc:59:21:42:9b:3e:5b:99:25:bf:33:f2:
                    b3:f6:5d:5f:ae:c3:67:49:45:8b:18:d0:df:fe:9c:
                    a5:ee:f9:dd:4f:1d:32:0e:03:3a:a5:cb:c4:91:76:
                    24:b5:6e:00:8d:c7:e7:d7:9f:31:9d:5d:d5:36:ed:
                    8a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E7:AC:5C:2C:75:FC:38:C8:88:9D:51:5E:C0:AA:24:27:60:8C:17
            X509v3 Authority Key Identifier:
                keyid:E4:95:AC:BA:FE:46:EF:2F:4D:6C:51:FC:F2:3B:D7:2F:63:9C:FD:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:ce:7e:83:ed:93:88:c9:38:4e:ca:30:d4:4c:1a:73:3e:d8:
         17:cf:d6:fc:a9:38:47:47:38:e5:1a:c9:74:72:1c:1c:50:e6:
         4e:a9:fc:63:32:b4:d4:dd:7d:2d:3d:5a:a9:a9:17:53:f3:1d:
         8a:b4:48:53:49:50:e9:5e:a1:40:4e:85:ae:a7:55:b8:a9:70:
         40:6c:27:fa:8c:38:74:19:15:16:92:a0:48:00:70:7f:2c:7c:
         95:18:50:6a:8a:5c:8c:5a:79:c1:2b:2b:f5:8a:4b:78:76:e9:
         bd:dc:28:54:bf:4d:d6:23:05:40:f2:35:50:e8:89:b5:1d:49:
         f1:0a:1c:1a:ff:d8:59:2a:2d:bb:99:46:31:37:48:00:d0:c3:
         87:78:98:0e:29:ce:82:87:6c:59:6f:85:8e:4f:fb:01:fd:ba:
         85:e4:44:3d:7c:27:de:3b:60:97:3c:5d:24:e2:df:9b:ec:7a:
         76:f8:2c:30:78:7e:ea:5a:da:af:8e:4f:ae:f1:b2:ee:dc:3c:
         4e:be:4b:d5:87:20:db:3f:7c:1a:17:7a:cd:2c:a4:2d:1d:67:
         30:b6:b0:00:6c:0c:41:a3:78:68:53:15:b8:b6:b0:97:bf:c8:
         7f:f6:2e:8f:54:a6:59:aa:6f:c8:5a:83:7c:77:90:a2:98:c1:
         da:ca:6a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:33:47 2026 by rpki-client