Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft
File:                     V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft (raw, json)
Hash identifier:          yskB6dIXhzcoFxazrJ4UGAtLG6hPw+bD/Bqx4OyEP6Q=
Subject key identifier:   F7:3D:E2:22:D8:85:2A:A1:29:0F:29:69:31:C7:1A:C2:CF:C9:00:07
Authority key identifier: 57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC
Certificate issuer:       /CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
Certificate serial:       01A0DC4DD0D781347DC1334D1534F6E14B00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft
Manifest number:          18BC
Signing time:             Sat 26 Sep 2026 06:01:22 +0000
Manifest this update:     Sat 26 Sep 2026 06:01:22 +0000
Manifest next update:     Sun 27 Sep 2026 06:01:22 +0000
Files and hashes:         1: V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl (hash: gTBE7Q7xw0zZVDj0rk4nBUekozgkCfWzvAjRu33XAjM=)
                          2: dANWkRCCHuBBFlFGWa8d8ypBMTw.roa (hash: GTvH+k2+GKl5Ck2oK//xlFuwXDGpMb+fH35y7U42rl0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:4d:d0:d7:81:34:7d:c1:33:4d:15:34:f6:e1:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
        Validity
            Not Before: Sep 26 06:01:22 2026 GMT
            Not After : Sep 27 06:01:22 2026 GMT
        Subject: CN=f73de222d8852aa1290f296931c71ac2cfc90007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c5:af:00:0d:05:30:69:c7:f7:dc:64:04:2f:
                    bd:c6:aa:c1:fc:59:7c:0e:57:53:10:56:ae:d6:b8:
                    39:28:6b:a9:17:b7:fd:fe:bb:68:b9:f8:f0:e7:49:
                    ad:e7:f7:16:8a:48:b8:8f:b1:ee:ed:01:08:97:d3:
                    b8:aa:36:b1:7d:94:42:70:43:db:c8:7d:17:58:ae:
                    f3:2d:71:7b:68:b5:4e:27:d4:61:dc:0b:75:35:17:
                    19:2b:a4:d0:ee:01:90:bf:a7:01:3a:43:56:14:88:
                    b3:5c:52:c9:9e:ed:01:31:2b:b4:a9:bb:ec:6b:4e:
                    f8:3f:ca:d2:29:ed:c9:d2:39:0c:63:3d:a1:04:d5:
                    42:03:59:8e:fd:8e:d6:cd:70:ca:63:f2:c1:49:59:
                    13:8f:52:7f:49:77:b9:7f:4b:56:8a:bb:ac:a9:af:
                    a8:d3:df:24:d4:2a:1a:37:9a:51:dd:1d:c2:36:a1:
                    51:51:47:25:fa:93:ed:9d:5a:3c:18:a9:c2:b1:45:
                    84:c0:ae:7a:81:d9:dd:48:65:be:97:25:3a:48:28:
                    22:01:e8:bc:f0:64:79:28:59:24:20:6e:65:fa:38:
                    d5:07:3b:06:87:a2:fd:7d:8b:bc:ab:d5:a4:1a:39:
                    78:7b:79:f6:82:32:25:75:86:26:8b:92:30:0c:54:
                    36:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3D:E2:22:D8:85:2A:A1:29:0F:29:69:31:C7:1A:C2:CF:C9:00:07
            X509v3 Authority Key Identifier:
                keyid:57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:3d:10:a4:5e:60:75:2c:18:89:b6:b9:79:ce:b4:93:a3:31:
         43:11:e0:6e:5b:fd:eb:28:4a:f7:cc:6e:24:42:a2:e7:62:ab:
         e6:07:86:35:d4:33:53:67:7d:a5:49:3f:bf:12:9e:fe:dc:d8:
         37:a5:5c:9c:50:62:ab:c5:52:64:aa:3c:80:a4:6c:57:08:ab:
         34:5e:9e:b1:3e:63:e2:6d:91:68:dd:5f:64:bc:45:64:a9:53:
         b5:6b:46:ee:13:1e:f8:5d:d1:89:56:89:08:0a:f0:19:1f:7e:
         b5:b6:66:a2:82:4e:91:cb:e8:a4:dc:94:eb:3b:c5:e1:a0:f7:
         36:c3:91:d9:f3:69:92:70:cd:7d:d8:8b:51:ef:23:bf:9f:63:
         ff:07:9a:76:59:70:3e:77:c3:c8:ea:7c:1a:85:f4:66:96:fa:
         8a:63:8e:b3:9b:9e:5b:d7:4d:99:79:97:87:b8:f9:f2:91:e1:
         b9:1a:0d:e4:69:b0:58:b0:cb:67:8b:7f:2e:9a:9c:05:1c:18:
         37:ae:7d:ce:94:ba:b4:2f:5d:7f:24:fe:49:86:f7:f5:dd:e4:
         6f:64:43:28:ee:07:76:3a:31:f2:33:bf:b6:35:6d:6d:e4:ee:
         0f:a1:5e:52:78:46:75:f1:60:d6:e0:55:a5:3e:74:4e:10:65:
         34:06:56:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:35:44 2026 by rpki-client