Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.mft
File:                     t1OsA5RSieGGvylzeyVhjTzNRDA.mft (raw, json)
Hash identifier:          9AdG45E2+WQHpWkZAm5GtHokdiWBgeZOpXA4VHxSNfg=
Subject key identifier:   32:3F:83:F2:EE:D8:14:87:3B:E1:FE:50:0A:63:04:73:C6:0C:8A:59
Authority key identifier: B7:53:AC:03:94:52:89:E1:86:BF:29:73:7B:25:61:8D:3C:CD:44:30
Certificate issuer:       /CN=b753ac03945289e186bf29737b25618d3ccd4430
Certificate serial:       01A0D0120E91CC57A98436CFFA52BE3CCBD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t1OsA5RSieGGvylzeyVhjTzNRDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.mft
Manifest number:          E5
Signing time:             Wed 23 Sep 2026 21:00:39 +0000
Manifest this update:     Wed 23 Sep 2026 21:00:39 +0000
Manifest next update:     Thu 24 Sep 2026 21:00:39 +0000
Files and hashes:         1: 1-5yL_Q-nYPf2CLV3tjpWzClJnPw.roa (hash: k8H40R+fMFH7wBdsLB91Y9l2eozFqsIfXqragAiM93E=)
                          2: ea_Ab_KVnKlMEbYPrAJZWmJhhsc.roa (hash: 6cSn8uzwyUxMJNcnfAeGMw+pCS/UoUALDhF7qixnWRg=)
                          3: fPtQuFsuVeGkMlwHU_sA5LSJu_E.roa (hash: WDhKtqp/PbP0mGK261CVF4VxFxH7CTo0soaxOvLBySA=)
                          4: t1OsA5RSieGGvylzeyVhjTzNRDA.crl (hash: TdAcQ4lB6el9fBqvSTzIYGzXrqF6lGr4gR3KO0cb1M8=)
                          5: tr8FATLSUssLeZoYd6_aJnbXdq8.roa (hash: 7GIhmLkuSFB1irvbk3E504lE/D2UrFS2bjn5VxfkzOQ=)
                          6: wrNDqIGL46GbPFlLV3ftdAx_UK4.roa (hash: 5QK1F45BImfUqKNV131htGF5A+1+6XK2Skgx/nv8vZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t1OsA5RSieGGvylzeyVhjTzNRDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 21:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:12:0e:91:cc:57:a9:84:36:cf:fa:52:be:3c:cb:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b753ac03945289e186bf29737b25618d3ccd4430
        Validity
            Not Before: Sep 23 21:00:39 2026 GMT
            Not After : Sep 24 21:00:39 2026 GMT
        Subject: CN=323f83f2eed814873be1fe500a630473c60c8a59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fb:39:48:65:a4:48:38:42:5a:75:bf:02:aa:
                    8b:e1:bc:88:00:13:2c:e6:cb:93:4b:9f:a0:db:87:
                    e9:e5:3f:c2:13:60:50:43:62:73:cd:bd:27:7f:b1:
                    f0:62:1e:ea:cf:1c:04:13:6d:fd:f8:7e:97:c1:ac:
                    35:38:0c:25:c2:32:b1:d1:64:8a:09:9c:77:a9:17:
                    60:39:70:53:72:be:f1:77:a7:75:5d:20:b6:4c:34:
                    df:be:bb:20:22:4d:e2:0f:ea:74:7d:86:d7:c3:35:
                    bc:3e:97:16:3d:63:2b:ff:9b:71:74:4e:0c:3f:71:
                    ab:d8:06:df:f6:6c:de:1b:6b:1a:2b:9d:66:30:2e:
                    92:1b:67:d7:bb:15:a9:98:43:52:e9:f2:d9:79:8e:
                    20:ef:2a:33:2d:01:29:f3:3d:46:39:30:6f:62:0f:
                    a4:f1:6b:bb:6f:78:6f:28:77:9a:e2:80:30:c8:44:
                    0e:36:55:6f:7e:43:33:77:f7:e3:6f:00:89:ef:62:
                    b0:fa:c0:d3:d1:ff:f5:f1:c0:e0:b6:e2:e4:93:89:
                    40:e1:f2:4f:1f:41:be:c9:b6:e9:07:09:9c:ea:2d:
                    8b:a4:fa:ba:4a:5c:3c:82:91:8f:89:5b:8a:21:4c:
                    3f:30:f1:89:36:ca:4d:10:21:57:44:c1:00:a6:b1:
                    fc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3F:83:F2:EE:D8:14:87:3B:E1:FE:50:0A:63:04:73:C6:0C:8A:59
            X509v3 Authority Key Identifier:
                keyid:B7:53:AC:03:94:52:89:E1:86:BF:29:73:7B:25:61:8D:3C:CD:44:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1OsA5RSieGGvylzeyVhjTzNRDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:14:da:30:bd:b0:40:90:49:1b:c3:ce:14:83:0a:91:ff:ec:
         d5:78:7b:1a:8c:bc:a4:50:61:89:73:fe:87:04:57:aa:34:55:
         fc:64:60:d0:a9:1f:72:d3:6a:68:35:a4:a1:dd:c7:25:1e:fc:
         98:03:62:f8:09:6d:2f:ca:1c:7d:c6:c6:bc:21:50:b0:84:39:
         bf:93:a8:77:67:d8:c4:a9:31:d1:c1:fa:db:9b:76:6d:63:6c:
         f9:af:45:46:9a:94:76:17:a6:df:28:35:60:84:f8:1d:42:77:
         39:b3:6b:fb:38:bb:87:c7:74:43:c1:d7:7e:7e:ac:28:4a:7c:
         0a:8a:b1:d0:d2:5c:d0:24:0b:64:3c:03:c6:2c:94:db:38:35:
         1a:1e:ac:93:e8:96:92:4a:6c:f5:17:48:44:53:b9:46:2c:f0:
         ab:10:82:45:00:f4:3d:5f:d1:d6:0e:c5:61:8f:b7:be:a5:e0:
         42:f5:66:65:dc:ce:0c:e3:31:a9:5d:df:8e:fd:74:a8:16:f1:
         8c:f4:ba:f3:14:b7:b5:e8:79:aa:2f:4f:44:da:52:97:84:15:
         24:d7:83:33:c9:bd:5f:c0:46:2a:56:0a:65:6c:9e:8a:ff:fb:
         6e:b7:e0:36:17:a0:77:43:2f:43:d4:79:19:52:15:9a:16:43:
         e7:8b:66:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:03:18 2026 by rpki-client