Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
File:                     5lAiAKbmP3Y5etuU39g0wRaAm58.mft (raw, json)
Hash identifier:          rzDTDGGM7b6bObdiVmtAFPwmM+sXXfz1EDIk502CRsw=
Subject key identifier:   F1:1A:77:60:D1:8E:F1:65:C0:CE:FC:77:AA:85:58:3A:F1:91:47:19
Authority key identifier: E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
Certificate issuer:       /CN=e6502200a6e63f76397adb94dfd834c116809b9f
Certificate serial:       01A0CB9077C7B607F82253B837C1C1BB9920
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
Manifest number:          10F6
Signing time:             Wed 23 Sep 2026 00:00:37 +0000
Manifest this update:     Wed 23 Sep 2026 00:00:37 +0000
Manifest next update:     Thu 24 Sep 2026 00:00:37 +0000
Files and hashes:         1: 5lAiAKbmP3Y5etuU39g0wRaAm58.crl (hash: 5G3iKYZXM1RM3grGU4//5Eobd9TPXOQ9KseYT9/8XQY=)
                          2: VbpHqTm4InVPfeEhfG1houFen0s.roa (hash: mGh4WVGrOaH38U0K8XkAxbYr95lc2nJQTlFAMtTdwzU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:90:77:c7:b6:07:f8:22:53:b8:37:c1:c1:bb:99:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6502200a6e63f76397adb94dfd834c116809b9f
        Validity
            Not Before: Sep 23 00:00:37 2026 GMT
            Not After : Sep 24 00:00:37 2026 GMT
        Subject: CN=f11a7760d18ef165c0cefc77aa85583af1914719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8e:dd:a4:28:3c:41:93:1c:51:45:8b:84:93:
                    e0:eb:18:1b:92:dd:77:6a:48:1c:10:f6:06:a9:3c:
                    d0:4a:72:45:93:57:9a:44:7c:0b:14:21:13:21:be:
                    86:2d:28:61:cf:b2:0c:be:16:d6:4e:05:e4:80:52:
                    d9:0f:de:4c:9a:74:bf:75:33:bd:c1:5d:5d:8c:d0:
                    25:dc:59:e1:ae:85:38:29:80:2a:e2:38:55:30:64:
                    e0:b0:37:a9:75:7f:9e:bb:e2:69:fa:1b:73:23:6e:
                    31:8f:67:4a:4f:6d:a3:ad:86:db:5f:20:d3:4f:8b:
                    19:48:75:11:46:57:1a:99:a1:60:3a:b4:35:32:8e:
                    bc:66:74:02:50:7e:9b:bd:8c:41:08:3e:3e:bd:2e:
                    13:94:4b:ae:5d:cf:3f:3d:26:6b:43:0f:fe:52:f5:
                    34:eb:07:ba:f9:78:af:b2:24:fe:fc:7d:42:89:ce:
                    fe:66:26:a9:07:4b:92:2d:c6:e9:ae:fc:4d:2e:b2:
                    6b:8c:a4:70:c4:db:64:1a:62:7e:22:aa:a8:a2:b1:
                    7d:be:1c:21:1a:6d:01:61:c9:9b:bf:52:d2:c0:94:
                    c5:0c:22:ed:d1:69:3e:2e:a7:73:0d:1c:40:56:42:
                    9e:17:d7:73:9e:67:82:08:65:2c:f1:39:c3:b8:1c:
                    58:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:1A:77:60:D1:8E:F1:65:C0:CE:FC:77:AA:85:58:3A:F1:91:47:19
            X509v3 Authority Key Identifier:
                keyid:E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:ec:30:a4:f4:13:f1:b1:7b:4e:82:28:e7:95:37:d2:3b:46:
         50:dc:55:c3:66:f2:e9:1c:39:8d:e0:27:7f:46:8f:4f:7f:0e:
         06:e0:b9:c8:f3:18:14:8a:9d:61:90:41:ee:cf:3e:48:07:6b:
         f7:9a:2d:a9:52:22:7f:2b:1c:31:61:36:ba:33:26:7e:a3:93:
         da:be:c1:49:fa:fe:73:2b:ed:bc:8a:dd:95:cf:40:1f:df:7d:
         ad:ae:fb:1b:f4:d7:b0:47:26:91:a2:be:5b:71:b3:29:5e:8f:
         38:91:2d:b0:89:53:b4:41:ab:86:30:49:37:9d:7d:57:53:03:
         1c:c6:21:d4:0a:ef:71:8d:97:b8:dc:c4:56:9e:61:0f:07:de:
         0b:f9:45:b5:e4:2d:a7:34:c1:ad:8f:8c:4f:27:15:68:8a:a9:
         e9:92:9b:40:7e:95:6f:69:fb:b5:92:27:69:32:92:c4:fd:82:
         d0:03:52:9f:ec:33:4f:39:74:73:fb:38:cf:d2:61:e8:d3:fa:
         37:cf:ec:b2:ff:08:0d:71:12:71:6e:0d:a2:97:02:81:e3:d3:
         b3:9a:92:d3:04:ba:62:dd:c5:b6:82:ed:2f:21:30:d4:c5:9e:
         e1:d0:57:83:28:dc:d5:fc:fc:e7:83:81:39:5a:af:e5:3b:77:
         c4:01:f9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:40:10 2026 by rpki-client