Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.mft
File:                     5eewNLTnyobXFrEUD8pbWQ8-eMA.mft (raw, json)
Hash identifier:          zXHc1uyvKbnWVMD0MW92Dg2ez7ZxEk+XBCtObux45Mg=
Subject key identifier:   29:B5:3E:01:26:5B:09:A2:22:B8:9D:37:03:75:F2:A0:83:19:30:5E
Authority key identifier: E5:E7:B0:34:B4:E7:CA:86:D7:16:B1:14:0F:CA:5B:59:0F:3E:78:C0
Certificate issuer:       /CN=e5e7b034b4e7ca86d716b1140fca5b590f3e78c0
Certificate serial:       01A0D011DFE93887C823F49E107A1D8780E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5eewNLTnyobXFrEUD8pbWQ8-eMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.mft
Manifest number:          19FC
Signing time:             Wed 23 Sep 2026 21:00:27 +0000
Manifest this update:     Wed 23 Sep 2026 21:00:27 +0000
Manifest next update:     Thu 24 Sep 2026 21:00:27 +0000
Files and hashes:         1: 5eewNLTnyobXFrEUD8pbWQ8-eMA.crl (hash: MCO8UCUND8cyS6RThNhWOcls8FrYEtr9/1kTnVYU4ro=)
                          2: BtVpbbRhTPSI_oH1xQFlA8VjaKU.roa (hash: hu9eE1y2abyGZOSyCMK7xsTStFETWYiRnLL7jNqyXrA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5eewNLTnyobXFrEUD8pbWQ8-eMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 21:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:11:df:e9:38:87:c8:23:f4:9e:10:7a:1d:87:80:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5e7b034b4e7ca86d716b1140fca5b590f3e78c0
        Validity
            Not Before: Sep 23 21:00:27 2026 GMT
            Not After : Sep 24 21:00:27 2026 GMT
        Subject: CN=29b53e01265b09a222b89d370375f2a08319305e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:30:26:f2:3c:fd:f8:8d:17:8f:e2:5f:06:f3:
                    c7:5c:d2:d5:36:04:1a:1d:bb:75:31:47:09:00:95:
                    8a:8f:6b:c7:af:9d:8b:60:1f:f4:cb:2a:e7:c3:b3:
                    92:a7:00:75:76:c4:87:d4:6b:60:dd:3e:6c:a1:0f:
                    6c:b7:85:fc:e5:4b:28:da:07:38:7d:52:a4:84:e2:
                    3d:d0:db:5b:86:2b:77:82:6f:0c:f6:ba:f4:9f:02:
                    0a:a2:50:fe:bc:54:5d:d5:0c:f6:9a:d8:50:d2:ba:
                    9f:71:2d:7b:f2:e6:98:91:04:48:ca:b4:c9:63:63:
                    14:25:27:da:ae:fd:18:af:e8:e4:69:99:11:c5:3e:
                    e7:35:1b:ff:12:1c:0e:e2:6f:1d:ce:0e:65:c7:24:
                    17:2a:c5:cc:98:43:98:c0:fa:93:5c:39:02:35:ea:
                    fb:1a:d1:96:a2:06:6e:db:59:59:b1:47:3e:81:e4:
                    a2:c8:f5:e1:17:9c:95:f0:ec:05:7b:0b:c6:c5:cb:
                    32:67:ec:c3:f0:38:a8:96:58:22:24:9d:1b:e6:72:
                    4c:68:7c:cf:63:8d:c5:40:7e:e6:55:49:58:83:ed:
                    e8:52:8c:9b:8a:56:e4:c1:bb:73:6c:15:35:f4:75:
                    8c:dc:51:38:71:92:3f:f8:10:e3:2d:fa:a3:50:5c:
                    9e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B5:3E:01:26:5B:09:A2:22:B8:9D:37:03:75:F2:A0:83:19:30:5E
            X509v3 Authority Key Identifier:
                keyid:E5:E7:B0:34:B4:E7:CA:86:D7:16:B1:14:0F:CA:5B:59:0F:3E:78:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eewNLTnyobXFrEUD8pbWQ8-eMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:20:ef:17:e4:51:6c:8c:06:dc:52:59:bc:37:c5:44:0f:b2:
         8a:25:a5:dd:cc:e9:1e:1f:17:33:24:dc:91:d8:fe:e1:21:dd:
         a1:3f:b4:c8:ba:d2:67:db:d4:c9:32:b0:5d:fd:2f:ec:75:00:
         9a:b3:13:f9:de:88:62:4d:6c:1c:e3:76:68:2c:12:89:b9:a1:
         0c:0c:83:94:74:5d:17:45:6d:7c:eb:b2:d7:58:d7:1d:d9:8e:
         fd:91:c8:11:2f:7a:f4:58:fd:c4:98:0f:0e:d8:60:cf:b2:dd:
         45:e9:94:e7:22:ef:56:da:41:e2:08:6d:e1:72:bf:80:8a:5c:
         ad:fe:40:f8:07:d1:b5:16:83:f6:b7:a2:98:91:fe:dc:8c:d6:
         7f:f1:df:6a:ed:e1:90:bf:ab:59:05:66:cc:16:f4:67:c7:5a:
         0f:18:0a:04:44:4a:14:f7:99:cf:85:33:d6:1d:88:9c:78:b4:
         0d:e1:9d:1c:02:ff:b3:22:60:e2:22:da:27:5f:03:40:a7:ca:
         9a:f7:ea:60:7f:44:06:32:20:39:b6:8d:a6:52:d1:2e:36:6e:
         e1:d6:4a:6a:41:5e:5d:a7:07:a0:2a:82:31:41:7c:69:f1:e1:
         c9:a8:1a:4a:91:76:6d:bb:89:f9:42:43:c5:be:6c:be:a0:ed:
         e7:61:d0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:06:00 2026 by rpki-client