Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.mft
File:                     t1OsA5RSieGGvylzeyVhjTzNRDA.mft (raw, json)
Hash identifier:          I5f9nasipuom1MJlt1NHTHrLoTaquTMUArHNA4qOyB4=
Subject key identifier:   58:D0:31:64:A7:AA:DC:F5:49:B6:A7:DC:BB:6A:1B:D6:A5:0F:77:F1
Authority key identifier: B7:53:AC:03:94:52:89:E1:86:BF:29:73:7B:25:61:8D:3C:CD:44:30
Certificate issuer:       /CN=b753ac03945289e186bf29737b25618d3ccd4430
Certificate serial:       01A0D9BB138ED74B695A28ABB790E8C68411
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t1OsA5RSieGGvylzeyVhjTzNRDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.mft
Manifest number:          EA
Signing time:             Fri 25 Sep 2026 18:01:51 +0000
Manifest this update:     Fri 25 Sep 2026 18:01:51 +0000
Manifest next update:     Sat 26 Sep 2026 18:01:51 +0000
Files and hashes:         1: 1-5yL_Q-nYPf2CLV3tjpWzClJnPw.roa (hash: k8H40R+fMFH7wBdsLB91Y9l2eozFqsIfXqragAiM93E=)
                          2: ea_Ab_KVnKlMEbYPrAJZWmJhhsc.roa (hash: 6cSn8uzwyUxMJNcnfAeGMw+pCS/UoUALDhF7qixnWRg=)
                          3: fPtQuFsuVeGkMlwHU_sA5LSJu_E.roa (hash: WDhKtqp/PbP0mGK261CVF4VxFxH7CTo0soaxOvLBySA=)
                          4: t1OsA5RSieGGvylzeyVhjTzNRDA.crl (hash: 5ZCQK/FyKI8AqjaUO+NJdNWxwdmRpaMQHI17lguL+T4=)
                          5: tr8FATLSUssLeZoYd6_aJnbXdq8.roa (hash: 7GIhmLkuSFB1irvbk3E504lE/D2UrFS2bjn5VxfkzOQ=)
                          6: wrNDqIGL46GbPFlLV3ftdAx_UK4.roa (hash: 5QK1F45BImfUqKNV131htGF5A+1+6XK2Skgx/nv8vZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t1OsA5RSieGGvylzeyVhjTzNRDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:bb:13:8e:d7:4b:69:5a:28:ab:b7:90:e8:c6:84:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b753ac03945289e186bf29737b25618d3ccd4430
        Validity
            Not Before: Sep 25 18:01:51 2026 GMT
            Not After : Sep 26 18:01:51 2026 GMT
        Subject: CN=58d03164a7aadcf549b6a7dcbb6a1bd6a50f77f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2b:02:73:2f:76:b9:0c:93:4a:71:04:7f:aa:
                    fa:86:fc:1f:71:18:b1:1f:a1:36:61:b6:30:5f:d1:
                    3b:26:d1:aa:09:11:46:ef:f5:e9:74:31:cf:fc:7d:
                    e3:6b:00:14:d5:e2:a8:d6:b2:7e:b4:77:46:f1:e9:
                    fd:29:16:a8:c1:ed:24:86:10:7a:19:b5:87:20:bb:
                    d7:bc:06:c7:65:8b:0b:3e:a1:ff:2a:bd:95:75:cc:
                    fd:87:df:ac:b1:8d:70:3c:bf:94:4e:c3:1b:78:dc:
                    77:fe:5e:bd:ea:76:c5:08:71:07:e1:65:b3:1b:f4:
                    eb:76:0b:87:7a:f7:56:e7:64:ff:87:6b:4f:b7:7a:
                    66:80:46:34:92:42:0c:29:31:8b:f2:55:8a:57:f4:
                    c5:6e:be:11:bc:68:53:2b:0f:c3:03:b9:9a:30:76:
                    92:91:26:34:5f:ef:82:41:a9:42:d6:e2:0b:c4:e3:
                    4e:cf:9c:ba:39:c5:90:15:bf:a8:6d:b6:90:1b:6e:
                    27:61:e8:92:f5:a3:f9:3a:31:41:54:ff:03:9e:a5:
                    47:6a:b8:66:a8:89:53:f7:8c:50:cf:d0:7e:36:f3:
                    4a:17:d8:ed:08:42:b0:d5:c6:4d:96:2e:b4:e3:11:
                    74:16:a1:03:f7:82:9f:82:89:73:e6:72:d9:72:0d:
                    87:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D0:31:64:A7:AA:DC:F5:49:B6:A7:DC:BB:6A:1B:D6:A5:0F:77:F1
            X509v3 Authority Key Identifier:
                keyid:B7:53:AC:03:94:52:89:E1:86:BF:29:73:7B:25:61:8D:3C:CD:44:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1OsA5RSieGGvylzeyVhjTzNRDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:30:2d:ac:05:d2:37:6d:88:80:48:62:8f:da:be:8c:0f:9f:
         22:cf:7e:0d:85:db:c4:d5:41:42:7b:88:75:3e:06:f0:83:e6:
         86:ff:b3:f4:4b:8d:a6:0a:53:26:00:08:6b:a2:86:9f:93:02:
         75:00:ee:21:30:44:f6:a2:21:1b:14:cd:dc:0f:ba:b9:98:5b:
         5b:83:e9:cf:6a:5e:f2:60:aa:9e:03:4b:85:29:67:93:0b:9d:
         60:17:55:27:6c:29:a2:e5:01:1c:7f:cf:87:bd:96:96:d7:ee:
         23:60:71:86:fc:00:29:7e:02:52:29:a1:17:c9:40:a6:7e:28:
         a4:c4:d2:c2:b2:02:7e:49:ae:97:e2:ae:91:03:d7:a1:4f:fb:
         1b:46:d7:0e:db:a8:8d:f0:9d:49:ae:1d:25:78:18:d8:c7:27:
         b0:20:64:49:20:fd:f4:ed:30:cc:2e:fb:dd:4f:d0:a3:f3:e7:
         a1:d7:79:69:0b:95:4d:a8:4b:fb:cd:5b:27:c7:57:5d:64:87:
         bd:20:b7:28:06:2c:65:e7:26:67:be:fe:da:33:03:5c:45:3b:
         09:1b:7c:18:ec:c6:79:2d:7e:2b:6d:a9:24:56:8a:4c:60:2a:
         c8:3e:31:58:4f:aa:a1:24:b8:43:df:8a:1f:29:1e:36:27:36:
         4e:55:46:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:49:52 2026 by rpki-client