Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft
File:                     F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft (raw, json)
Hash identifier:          eZrYhl5B5avKIYVAxOrR2rfy7UJ6n8IkfcME+hgwOPo=
Subject key identifier:   2D:A7:BE:53:60:78:92:8A:BE:11:1E:72:B4:BE:C2:4D:A0:B6:2F:DB
Authority key identifier: 17:96:61:A1:64:D2:D5:17:EA:76:77:FB:22:9C:AF:A1:9E:BA:97:F3
Certificate issuer:       /CN=179661a164d2d517ea7677fb229cafa19eba97f3
Certificate serial:       01A0D8DEFB4A03E3D3681832E6FD7905DA00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft
Manifest number:          1A71
Signing time:             Fri 25 Sep 2026 14:01:26 +0000
Manifest this update:     Fri 25 Sep 2026 14:01:26 +0000
Manifest next update:     Sat 26 Sep 2026 14:01:26 +0000
Files and hashes:         1: F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.crl (hash: IAQGUo0KZ6xPJ9/xPtdSYhyoT+4WEsWIp/VByAqiBhs=)
                          2: b-TOc8izqpc5msF8KPMLjpjPE_Q.roa (hash: p/3L6t3Nc/a548YZku/GmrhmMy5Eya4d57uhNk9tYCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:de:fb:4a:03:e3:d3:68:18:32:e6:fd:79:05:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179661a164d2d517ea7677fb229cafa19eba97f3
        Validity
            Not Before: Sep 25 14:01:26 2026 GMT
            Not After : Sep 26 14:01:26 2026 GMT
        Subject: CN=2da7be536078928abe111e72b4bec24da0b62fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:81:72:e9:10:4c:e9:73:ac:da:8c:b3:3c:2f:
                    16:e3:37:b0:1d:3e:62:2d:c1:50:f3:de:c3:2d:27:
                    8c:70:0c:64:b6:0f:a8:a1:b1:28:61:cd:91:f7:75:
                    5e:4e:33:51:79:60:71:a0:95:dc:cb:07:e3:f6:49:
                    11:ad:d6:5b:58:b6:00:31:7b:3f:ad:69:12:64:9c:
                    a3:27:d7:2f:80:5b:55:88:48:fb:63:09:e9:27:3d:
                    f3:a8:eb:a0:f7:e3:ba:65:7a:9f:9a:8f:7e:47:f3:
                    ed:13:40:09:b8:fa:2b:35:6e:31:3b:77:f6:74:28:
                    f1:0c:db:ef:ce:1b:3b:43:0f:8d:50:8e:51:4a:75:
                    e9:ae:0c:58:8f:13:f2:94:1e:91:37:97:41:e1:fa:
                    5c:68:94:e5:2f:6f:09:12:23:eb:d9:72:4a:8b:da:
                    1d:f4:b0:43:30:29:8d:a5:5e:87:47:ed:df:6f:f0:
                    ff:78:53:a4:7c:bb:2f:ae:29:61:2f:b6:79:6e:3d:
                    3b:32:53:c9:75:bf:47:4e:e5:4b:ed:71:d5:dd:2a:
                    4d:08:46:50:5e:a9:e6:e8:ec:8a:78:c1:f1:b4:65:
                    3c:d6:f6:10:64:c8:d2:3d:63:dd:97:00:66:d5:c8:
                    70:7c:61:cd:d7:7d:df:2c:0c:ba:58:66:0b:d0:e8:
                    05:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A7:BE:53:60:78:92:8A:BE:11:1E:72:B4:BE:C2:4D:A0:B6:2F:DB
            X509v3 Authority Key Identifier:
                keyid:17:96:61:A1:64:D2:D5:17:EA:76:77:FB:22:9C:AF:A1:9E:BA:97:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:d4:0b:43:58:ea:f6:66:90:ad:00:e2:c9:f7:37:1f:71:18:
         11:58:bb:ba:53:c6:ab:e4:78:ea:5e:57:50:f3:f1:6a:f9:c4:
         ca:79:23:0b:0b:fe:48:24:74:ce:97:e6:ba:aa:25:9a:68:15:
         d5:a9:3c:ed:75:1b:e0:7a:d6:13:be:a4:68:5c:5f:af:b9:82:
         92:15:9a:91:45:f1:ae:30:b6:2c:02:46:76:ba:1d:1b:b7:7b:
         1f:40:1f:6d:2d:ab:78:5b:fa:8d:d5:6b:c5:f1:41:7d:cd:00:
         97:ed:29:2d:24:c4:a1:b8:01:2d:68:40:1a:7f:f3:ef:63:43:
         8a:7d:eb:77:c9:ab:4a:7f:62:d7:dd:cb:1c:31:f6:b5:e0:5c:
         8f:70:e2:cd:30:07:d6:40:3e:eb:19:9e:82:bd:89:8a:44:36:
         66:51:2d:b0:ef:a1:d2:1c:c4:d1:40:db:7e:0e:ce:af:3d:ae:
         1d:48:19:0a:5d:3f:47:cf:87:26:b3:3f:53:c0:cf:de:65:2b:
         b9:76:df:52:c7:88:a5:52:18:67:a7:30:03:d7:8b:fa:ad:55:
         1e:e9:cc:79:e5:13:72:aa:2a:5f:64:43:fb:0c:b0:2a:a2:26:
         5c:02:53:74:8d:67:10:4e:a0:73:c8:1a:69:1f:96:e4:50:95:
         3d:f2:25:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:42:40 2026 by rpki-client