Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft
File:                     5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft (raw, json)
Hash identifier:          Lfo/PpdcTzs+cQNgPTXMnaIdS9Br68DxXLdpuW2NpRE=
Subject key identifier:   A0:98:9E:A9:72:BA:A6:50:4D:CA:9F:BF:AC:F8:49:72:A9:9D:D6:11
Authority key identifier: E5:94:69:56:5F:71:9B:ED:86:AD:C7:3F:B6:E6:C8:86:F6:0B:DA:AB
Certificate issuer:       /CN=e59469565f719bed86adc73fb6e6c886f60bdaab
Certificate serial:       01A0E81C1CB4480F8FD9922497E7888D909D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5ZRpVl9xm-2Grcc_tubIhvYL2qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft
Manifest number:          02B0
Signing time:             Mon 28 Sep 2026 13:02:31 +0000
Manifest this update:     Mon 28 Sep 2026 13:02:31 +0000
Manifest next update:     Tue 29 Sep 2026 13:02:31 +0000
Files and hashes:         1: 5ZRpVl9xm-2Grcc_tubIhvYL2qs.crl (hash: WtEuXUNjVAxFoUeriWfz5fIrumdv+WIJqUx1X1awKtM=)
                          2: k_j9kCZuBTWuvSVZ-WdJ_g1t6wY.asa (hash: dESwUIcXPpUiW9oc03it11tJGDFnuCkshgfLGftBad8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5ZRpVl9xm-2Grcc_tubIhvYL2qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 13:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e8:1c:1c:b4:48:0f:8f:d9:92:24:97:e7:88:8d:90:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e59469565f719bed86adc73fb6e6c886f60bdaab
        Validity
            Not Before: Sep 28 13:02:31 2026 GMT
            Not After : Sep 29 13:02:31 2026 GMT
        Subject: CN=a0989ea972baa6504dca9fbfacf84972a99dd611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5d:c2:99:3d:5a:29:2f:d5:08:5d:b7:04:3a:
                    28:2b:c3:29:e7:16:ff:77:7a:8e:5a:99:a1:3b:fc:
                    70:e1:63:de:69:ae:0e:3a:32:14:7e:de:9f:fe:b5:
                    7a:22:81:38:ca:7a:e6:4e:58:42:2f:e8:69:f9:23:
                    9b:80:5e:8e:cd:cc:ea:42:e4:e6:cd:70:7b:21:42:
                    82:5d:ec:3b:ae:08:f8:c1:4c:ee:9b:11:66:bf:ba:
                    f4:55:4a:a5:6a:c7:74:7b:73:29:ea:57:a2:7d:8a:
                    eb:9e:68:06:2a:62:a9:01:db:d2:8f:1f:cf:a2:70:
                    d7:97:52:21:fa:e3:c6:34:06:e9:46:16:cb:e9:80:
                    c6:f1:71:5d:05:3d:b8:64:da:33:ff:4a:17:70:6a:
                    cf:4d:16:0e:81:b7:37:f6:02:60:93:0f:32:64:bd:
                    a9:c7:74:92:dd:a2:61:d2:7b:36:f5:1a:33:bc:83:
                    f0:09:55:50:06:e7:b0:34:5c:64:10:9d:e9:a2:63:
                    cb:55:d0:f4:59:59:e0:5e:0d:8b:20:30:74:cb:11:
                    54:19:b0:02:a7:cd:a4:b8:e7:ae:e4:9e:64:1b:98:
                    14:69:4e:d1:ce:2f:89:c6:8f:1c:49:84:15:50:07:
                    f4:10:c5:d3:8e:ab:b6:74:4f:10:02:18:34:fc:7a:
                    c0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:98:9E:A9:72:BA:A6:50:4D:CA:9F:BF:AC:F8:49:72:A9:9D:D6:11
            X509v3 Authority Key Identifier:
                keyid:E5:94:69:56:5F:71:9B:ED:86:AD:C7:3F:B6:E6:C8:86:F6:0B:DA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ZRpVl9xm-2Grcc_tubIhvYL2qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:2b:bb:1a:a4:06:86:6c:0c:b2:3c:84:cd:7c:bf:7c:eb:ab:
         0b:e1:a5:da:37:af:c1:1f:14:2d:55:d1:65:fb:2f:3a:80:61:
         40:d5:95:c8:b0:d1:eb:66:dd:99:42:5d:f5:a8:dd:41:9c:92:
         a8:ed:16:0e:53:a3:b3:fa:74:05:63:31:13:bb:b8:2f:9a:06:
         d2:26:92:4f:b1:cf:74:0f:a8:cb:77:de:ff:63:b7:82:ab:74:
         01:5f:5e:0c:9a:90:d6:9b:54:8b:9c:15:52:3f:34:ac:eb:95:
         91:70:36:00:d5:3d:53:e7:fd:d4:ee:d1:f3:38:8c:91:da:3a:
         df:8a:71:0d:1e:9f:4b:9b:c4:77:1a:19:eb:2f:8f:2b:4d:bc:
         c9:93:21:58:bb:f6:47:0a:e4:fe:83:5f:49:c0:3e:bf:5a:11:
         93:0c:6d:32:19:78:8b:5b:38:80:2c:51:83:2c:64:1f:6f:2d:
         c2:ce:a2:9b:aa:a4:c5:02:68:9e:5b:d7:b2:04:3b:48:12:72:
         98:7a:71:e8:73:c6:f8:75:b8:61:cf:59:d5:38:f4:0b:d1:b3:
         29:09:00:c3:7f:48:52:33:1a:9d:e5:42:5d:54:e5:40:30:f1:
         38:7f:09:31:aa:2b:41:3f:c7:97:80:e4:66:a3:c0:99:a0:b5:
         75:0b:4f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:18:48 2026 by rpki-client