Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
File:                     e5RH_ppKzH1v9y1seY1D1mzVDD8.mft (raw, json)
Hash identifier:          Ccr/DPAff+GLzm1rvQ7aXjR6CsZjbEfErjk589FRePU=
Subject key identifier:   F1:9D:5B:23:86:6F:E1:BF:7A:56:7B:99:FD:7D:57:92:AB:59:0D:A8
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Certificate issuer:       /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial:       01A0D804887081A4CBEA240D1B83E4C0F982
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
Manifest number:          05BA
Signing time:             Fri 25 Sep 2026 10:02:50 +0000
Manifest this update:     Fri 25 Sep 2026 10:02:50 +0000
Manifest next update:     Sat 26 Sep 2026 10:02:50 +0000
Files and hashes:         1: 3WwCnnTd8cSzdKjbYhNI8g53NPE.roa (hash: aIhbguXWgQO1tJI+20Jt3xw4Dn8zy1ZDD/ntTtEtp2c=)
                          2: 4kwKLdh3RM_T2CHdwfr7djNqFPw.roa (hash: fMhCuCyOrPdsWFDfGoHBSeCFarYrpqQUzcCOvftK41o=)
                          3: 5aspwc_EZRXz1DI0gfzYlq249Jw.roa (hash: z9a5ybEJbOBjedVWskB8FQIQDP7WVIXqlcDq4xwBtUE=)
                          4: FwV9_soW4dQWq_CwmZwM9y_Yg24.roa (hash: xPzL9Tf4VzlH+kYxMAxG9MOUeYhbFQVm/oBhO2qB2hw=)
                          5: KFPTzEg4Y0L6aJGjreTB0eGWtcY.roa (hash: 8tieHB2/IwsPF3XmJYABOmkTWjKNGkzX0/aPiwcDseA=)
                          6: KvNF-GNwZ3nupnOa4r1l2jy1zCI.roa (hash: atOFPKEzfFHxFdsBH5bVAxThEg5GX7FYolGtUJKktyc=)
                          7: M5z_FJkpC3bqs6y8rNLlO6L7mt4.roa (hash: pnzeAaisjISO2SuVi7e+PqwovvETfQV3LOc/UO86oM4=)
                          8: RFitIfzbelUgTTUVvMm_6P7Qua4.roa (hash: k1QiINtX4yKyCSBsMvwbViWzQ/ACbhcMG/vPDPVXV8c=)
                          9: S1JnSXKRylQf_Uh5rIFy-LkjUjc.roa (hash: vNnVXt5NopYDCqipg2PS3dWJG6ySbA9t5QTX1gIkUow=)
                          10: VaLOykeeFU8I2YIJdyOEx8ZVuUc.roa (hash: kAYhfT6Miw9r4z05yf2O6XBU1ToH3EWuwwXPo6D2N2A=)
                          11: X6gkbQD7XKjlpDCPmtrSBjhNhNY.roa (hash: J9AA0VeAPAZJB/+l+EvDES1QGP6dLWqo5ps91vAe5bc=)
                          12: bY71skCcBRy3_7E1b-YloIxj3EI.roa (hash: wz4302B/D0gTMZmb2I2/ICofgsbTDyh3vJJUmvhGTb4=)
                          13: dIdr6CdHDFmEHdvXrAfl7icIYxY.roa (hash: WfzmExFAW5iLs+d61FaP+J5J9DI0CoXqdTMcrCDFzqo=)
                          14: e5RH_ppKzH1v9y1seY1D1mzVDD8.crl (hash: 2NLxhcgoG54GYAoQ3SM2U+m2erN2Y7Z7jPn3d/4U/Hs=)
                          15: hgcz_S5xSTbLKn2JgFiffzoE0Lc.roa (hash: DEovq/0Otm5xzo+ikKL6F1zlfXWLyId8aTGFI9Mt6iE=)
                          16: lwr4ujjVRZ9lTT6n38RaTmGl6zA.roa (hash: 0muOjArSKM5mL3HgrEoutlOx4J3NtUU/jA3sEiadzN8=)
                          17: oaPiDgiUp4N6eHimpviCBvIRiXs.roa (hash: gi5GPHcvQqzHHbSUnrSphPBhz1cqoAOg4ko/yRoF0WM=)
                          18: w0LVoZ_uYiC7toDXnKtxvHDd4Jo.roa (hash: 6prvU2oZ/9BgwQzBcdZM3Omry4kQSL9zaJJkXMdKxqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:04:88:70:81:a4:cb:ea:24:0d:1b:83:e4:c0:f9:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
        Validity
            Not Before: Sep 25 10:02:50 2026 GMT
            Not After : Sep 26 10:02:50 2026 GMT
        Subject: CN=f19d5b23866fe1bf7a567b99fd7d5792ab590da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c5:70:03:50:14:7c:5f:29:d2:e4:c3:5c:b1:
                    57:24:3b:09:b9:32:3c:ea:b7:91:9e:8e:70:65:06:
                    5f:fb:ac:33:7f:dc:95:d2:12:52:4d:2a:b8:5f:9a:
                    0a:60:81:4f:7d:6b:3c:25:a9:b3:bb:65:ba:b4:7e:
                    b5:7a:fd:73:90:83:d2:62:4a:23:09:c0:fb:a4:f8:
                    31:fc:3d:54:cc:b0:71:59:6a:70:f3:49:4c:ad:d8:
                    25:e1:e6:23:09:8d:18:2e:9c:49:37:36:e8:a3:6f:
                    24:53:6b:1d:87:00:d6:e3:d4:53:c3:d9:98:cc:cd:
                    5a:2c:14:09:c6:ec:af:0f:74:ae:d9:f8:4c:cc:85:
                    0b:09:9c:2d:5f:16:33:34:b6:0f:a6:4b:78:30:18:
                    c7:fc:0b:ab:ca:e7:b6:f8:dd:0e:70:01:d6:0a:ac:
                    ed:64:4f:14:01:e1:ad:28:18:0c:bb:fa:f7:31:ab:
                    a7:fe:c3:85:ec:8d:16:68:0a:6e:c2:1f:ab:27:5b:
                    ca:3e:9e:91:4f:a2:95:ac:d6:91:c7:ef:56:fd:1b:
                    61:c6:67:57:a1:27:d5:24:4d:e1:99:86:5f:80:17:
                    d7:82:29:89:2d:27:71:14:f1:4a:75:47:3f:eb:28:
                    52:64:95:9a:16:ff:3d:01:26:ca:f5:55:96:4b:32:
                    55:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:9D:5B:23:86:6F:E1:BF:7A:56:7B:99:FD:7D:57:92:AB:59:0D:A8
            X509v3 Authority Key Identifier:
                keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:71:e8:9b:d6:22:69:90:d9:79:c2:42:9c:6d:57:59:9f:2a:
         2b:b9:f2:13:d5:23:83:e6:32:88:80:13:67:d8:f8:c1:34:6a:
         a0:ec:a4:14:f9:75:2d:75:10:54:c2:2e:9d:b2:70:b0:10:67:
         ba:78:bb:2a:81:2f:57:29:fb:68:b3:25:a2:ad:56:8f:00:34:
         d5:41:06:bf:bf:d6:23:2c:40:7e:2b:34:dd:1f:26:e0:98:b2:
         ad:ca:2a:8e:2b:d5:3c:9f:87:8e:bf:a6:b9:7d:36:77:a2:64:
         2a:18:40:d7:08:17:9c:c2:4d:77:c0:40:46:e4:6d:5f:e2:4a:
         d8:37:ff:bf:2d:14:a6:23:80:46:4a:3d:a9:fb:8e:1b:1d:a6:
         c4:86:00:b3:2e:69:75:02:14:dc:20:65:0c:1a:4b:3a:c6:46:
         29:7c:15:c7:9d:30:c4:3f:ed:a1:04:e7:75:ac:71:8a:1c:83:
         d2:5f:b8:da:e0:cf:51:bc:7e:70:35:1d:41:d3:b1:ea:5b:ad:
         ca:f4:72:20:d6:5f:41:6a:2d:b1:e5:1c:25:76:84:ba:e6:30:
         78:8d:23:47:4e:af:c3:19:e7:40:93:01:73:f7:fa:7e:d1:dc:
         54:a2:18:03:ba:e6:61:7d:a9:b6:33:35:ca:d8:0c:42:f5:27:
         04:11:5d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:25:51 2026 by rpki-client