Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
File:                     5eaQaKix-3-geVuvm7OrhslORvw.mft (raw, json)
Hash identifier:          uNn5k2OtMoR0T/xVUKhM1eX/dtP7ZbouHtzyC3fxUR4=
Subject key identifier:   BA:BA:22:0A:BD:80:CE:58:5A:75:0E:04:0E:21:B0:55:1E:C5:0E:4B
Authority key identifier: E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
Certificate issuer:       /CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Certificate serial:       01A0CC35DADE30277842EC3A69D01601798D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
Manifest number:          171B
Signing time:             Wed 23 Sep 2026 03:01:16 +0000
Manifest this update:     Wed 23 Sep 2026 03:01:16 +0000
Manifest next update:     Thu 24 Sep 2026 03:01:16 +0000
Files and hashes:         1: 5eaQaKix-3-geVuvm7OrhslORvw.crl (hash: +mDbQ3YLIM7JVHK+xQfjlv+f/deCnOuav/HU+EdPg9I=)
                          2: CBtJzFMoigMYechG5k_lhWICkAA.roa (hash: 6qcOp5zAWvjz4mUxBNJFQHjpgjjuwwz7xV3uMQfNfLc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:35:da:de:30:27:78:42:ec:3a:69:d0:16:01:79:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
        Validity
            Not Before: Sep 23 03:01:16 2026 GMT
            Not After : Sep 24 03:01:16 2026 GMT
        Subject: CN=baba220abd80ce585a750e040e21b0551ec50e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:de:c1:95:1d:cf:97:ee:13:d1:25:35:92:f5:
                    b8:8e:25:e7:09:1c:c5:37:ad:64:d7:4a:a8:09:90:
                    be:2f:99:d7:bd:26:63:a0:26:80:4d:21:0e:9f:29:
                    85:eb:6a:31:a2:90:eb:95:4a:e2:fa:d7:43:17:86:
                    02:26:33:ab:21:c4:5e:4e:bf:bf:7d:4b:32:1c:ad:
                    0e:ee:b6:bc:62:51:24:10:a6:4a:35:bb:5d:21:9a:
                    8b:a1:93:9b:e2:12:c0:51:ce:f5:c0:47:60:3b:3d:
                    4d:26:56:05:58:dd:18:3e:01:46:2a:d7:bc:4c:3a:
                    d3:ab:23:7f:40:68:aa:c0:a4:79:f0:c4:01:da:c4:
                    79:45:03:9e:de:7b:4d:1d:1c:b5:83:78:ed:8a:68:
                    06:07:97:06:f7:b4:54:e0:86:25:30:4a:e6:f8:b8:
                    c1:69:0e:fd:8a:7f:41:d1:1a:1a:84:09:37:9c:4f:
                    93:9b:32:8c:13:33:e1:3d:a2:a3:c0:88:8e:35:b0:
                    d4:aa:bd:f1:24:41:32:58:be:6e:36:07:70:89:67:
                    5f:11:d2:6c:2a:44:6a:45:dc:d3:8a:ad:6f:4f:73:
                    27:dd:36:fd:2b:c4:39:40:75:87:ad:2f:06:b2:bb:
                    b4:04:c8:52:1a:06:ce:e3:90:ed:2e:fa:ca:a6:37:
                    4d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:BA:22:0A:BD:80:CE:58:5A:75:0E:04:0E:21:B0:55:1E:C5:0E:4B
            X509v3 Authority Key Identifier:
                keyid:E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:42:8d:d1:5f:ab:92:7c:35:3e:ef:6e:be:4d:eb:b0:48:fb:
         6c:e5:ac:2a:7f:cd:70:7e:8a:f4:9e:14:47:27:16:93:29:28:
         9c:b5:e9:e0:ab:94:50:11:b9:ec:1e:90:d3:2e:91:ef:4d:f1:
         1f:da:dc:c8:46:5b:c7:c7:5c:20:29:a8:18:4e:77:52:b4:5a:
         07:77:1e:fb:9c:2e:d2:dd:d4:86:ec:65:90:e1:58:b9:93:0c:
         99:ec:83:e4:ef:ed:d0:32:8b:57:bb:5b:d1:f8:3d:55:77:0e:
         1e:5d:96:e6:1f:e9:c2:7d:02:b1:9b:5b:0d:88:6c:49:09:ca:
         22:fb:9e:2b:d1:b1:20:4e:11:21:06:d7:25:0a:c2:e4:72:8d:
         ec:49:f9:5b:7b:97:a8:c4:7c:a2:91:b0:0c:64:64:48:6b:62:
         11:19:3e:06:61:4a:42:5a:9c:bf:71:e8:81:30:71:11:56:7c:
         60:b3:96:44:ff:64:ee:35:47:f2:13:ad:33:9d:28:b2:1c:9c:
         77:97:72:95:83:26:00:2e:6e:a0:74:6c:98:8f:8b:b9:67:65:
         68:8c:b7:28:6f:0b:58:b5:53:1b:a7:4a:4f:30:ee:52:d9:a3:
         84:47:12:ce:36:7f:2f:2b:7c:67:fa:3d:2b:59:5d:0a:f3:65:
         3a:b8:57:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:37:20 2026 by rpki-client