Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
File:                     5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft (raw, json)
Hash identifier:          o5F7doqxWrfukXAo5LK59ozElnkQ3wzufFAnWmgBKc4=
Subject key identifier:   9C:D3:A4:5F:53:A6:C4:43:56:B6:EF:7D:48:25:9E:7B:1F:D6:44:C5
Authority key identifier: E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C
Certificate issuer:       /CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
Certificate serial:       01A0DDCEC3EBE95A7488A414435FCB0DCD5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
Manifest number:          0E22
Signing time:             Sat 26 Sep 2026 13:01:50 +0000
Manifest this update:     Sat 26 Sep 2026 13:01:50 +0000
Manifest next update:     Sun 27 Sep 2026 13:01:50 +0000
Files and hashes:         1: 5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl (hash: B6xhnI6bcf3Lq4ODJUsobxRDGOlgFcg8JKlitHb6gWk=)
                          2: cHSnTM0TIgMVZV_Pq7Op9CcRxNw.roa (hash: AyIttbsE/zYFTDAmxKD+ND4Xjn5eOSnndB3Dk5UaIJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dd:ce:c3:eb:e9:5a:74:88:a4:14:43:5f:cb:0d:cd:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
        Validity
            Not Before: Sep 26 13:01:50 2026 GMT
            Not After : Sep 27 13:01:50 2026 GMT
        Subject: CN=9cd3a45f53a6c44356b6ef7d48259e7b1fd644c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:11:53:da:1e:c7:22:ea:f5:13:56:71:48:f7:
                    0f:d4:53:fd:00:f4:34:9b:4b:e5:ca:33:6c:54:ae:
                    24:c1:68:44:3a:a4:37:1d:46:10:8a:b6:d6:17:d1:
                    ed:36:29:77:10:33:e5:54:0e:04:b3:cc:ae:79:4f:
                    41:ae:40:28:ad:69:b6:70:cf:f1:b2:ce:2c:fb:e2:
                    63:bc:d4:08:19:97:7f:ea:a6:b0:b0:49:0c:c3:9b:
                    d0:03:cb:b6:2c:22:a7:df:d3:4a:e8:52:43:79:81:
                    92:c3:7b:2e:d5:90:3c:9d:ba:c4:45:c2:5a:fb:32:
                    34:15:7d:34:32:a4:65:23:fa:98:c0:cf:5a:49:2c:
                    12:15:28:cb:57:93:b8:8c:dd:06:62:79:ae:65:a3:
                    ef:ae:08:07:f9:29:06:00:96:c4:83:ac:44:fa:13:
                    39:91:90:e9:60:5b:cc:8c:41:37:52:b9:99:09:f0:
                    ae:0d:c1:f0:36:6a:d0:90:80:a2:c5:4b:8d:c0:9b:
                    0c:1d:ee:f8:68:d9:6d:c9:47:f1:74:2b:a9:9e:eb:
                    4a:5d:0f:52:3f:c5:45:c7:37:16:97:a6:23:8b:b2:
                    33:18:1e:14:70:61:8f:96:75:5f:5f:1d:89:32:45:
                    13:a6:92:a6:d6:5b:61:98:d5:ea:48:36:a6:a8:35:
                    5f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D3:A4:5F:53:A6:C4:43:56:B6:EF:7D:48:25:9E:7B:1F:D6:44:C5
            X509v3 Authority Key Identifier:
                keyid:E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:dd:8d:74:4b:d3:ad:80:4d:a7:32:da:a1:b0:74:3f:f3:b4:
         c9:29:b2:9f:64:72:15:65:2b:a8:8d:19:a9:97:1c:47:c7:14:
         3a:bd:03:0c:34:5f:0e:77:55:71:78:3d:73:0b:3a:e9:4e:f7:
         4f:59:43:b5:b0:82:9f:21:fe:75:8b:12:c6:15:69:73:23:9d:
         1e:5f:c4:fb:2d:eb:ff:ef:4a:12:4c:50:91:7f:1c:01:55:ff:
         6c:30:2b:59:95:d1:36:89:3b:ee:7c:72:cb:94:7f:fa:c5:27:
         67:47:a1:58:a0:f1:99:22:bd:23:09:da:7a:d1:8e:d7:8e:a5:
         66:df:a7:68:d5:78:1d:a4:ad:28:6d:9f:93:6d:32:48:31:5b:
         b7:f6:37:ec:a4:a0:39:91:41:24:25:0d:85:33:f4:f1:96:74:
         bd:9d:0f:b7:ff:b1:c8:cc:ae:0f:75:fa:65:02:14:40:58:55:
         48:4c:de:0b:da:17:76:63:06:ea:ab:ae:fb:dd:46:a5:3a:6a:
         b9:95:c8:78:4d:da:8b:dc:24:57:6b:7e:4e:10:a8:7c:bf:c2:
         aa:b0:0b:5c:40:26:3f:b4:52:f6:21:b2:3b:64:67:60:7f:cb:
         35:f2:ad:f7:dc:8e:59:d8:05:2b:de:8b:a0:03:e5:16:19:47:
         24:4c:6c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 20:51:09 2026 by rpki-client