Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
File:                     5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft (raw, json)
Hash identifier:          n47ivelzLs+FbBkDFTzBJRfD1RKaRon/XCZxZF68L/Y=
Subject key identifier:   DB:60:F4:E9:31:48:BC:84:B5:DE:C9:32:90:39:3F:C9:97:EF:94:CB
Authority key identifier: E6:E2:57:52:67:FF:83:2D:97:9E:38:DD:AF:3D:D6:74:20:16:2C:DA
Certificate issuer:       /CN=e6e2575267ff832d979e38ddaf3dd67420162cda
Certificate serial:       01A0E1E1EC86A85218FCF10EE111FD4FF48C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
Manifest number:          068A
Signing time:             Sun 27 Sep 2026 08:01:14 +0000
Manifest this update:     Sun 27 Sep 2026 08:01:14 +0000
Manifest next update:     Mon 28 Sep 2026 08:01:14 +0000
Files and hashes:         1: 5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl (hash: 0u19p+HqNVUaJd4TmhIZLNuzzHRFDtkGfK0X4KViHGI=)
                          2: EYjq5PTntQ_pzWKcs1u7ceeGxQY.roa (hash: V6IVhgWxUM0HbEed6VcScjqL3JGVYEaJss+a2Pf1dk0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 08:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:e1:ec:86:a8:52:18:fc:f1:0e:e1:11:fd:4f:f4:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6e2575267ff832d979e38ddaf3dd67420162cda
        Validity
            Not Before: Sep 27 08:01:14 2026 GMT
            Not After : Sep 28 08:01:14 2026 GMT
        Subject: CN=db60f4e93148bc84b5dec93290393fc997ef94cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b9:2b:9f:af:89:78:7a:9a:66:c6:1f:50:1f:
                    1b:c8:8c:23:6a:dc:eb:82:17:35:0a:a0:75:be:89:
                    f3:21:17:4c:19:0d:bd:49:ff:ee:a1:77:78:0a:4e:
                    14:ff:a1:08:0f:cb:0e:d8:c2:a9:14:e5:9e:2e:67:
                    5f:ca:bb:4e:46:3f:64:94:b9:3f:72:2d:1b:5f:cd:
                    ef:3b:22:66:17:51:43:8b:a7:14:ce:4c:2c:c0:97:
                    9c:a4:a5:b0:a6:91:c4:48:97:f3:73:42:99:72:47:
                    51:ba:94:45:65:4b:cb:76:b2:60:97:4f:a6:2b:a2:
                    04:72:cc:7a:d6:bd:32:65:a1:29:53:53:fe:23:3d:
                    c1:00:dc:a4:0a:f8:22:63:e7:9c:e3:c6:fc:21:fb:
                    a2:3b:12:a3:c4:7e:69:9f:57:1a:8d:7f:07:12:78:
                    4c:35:4b:ee:5e:3f:02:9b:53:6f:f8:6a:27:f1:d4:
                    f3:2c:bb:d8:62:f9:ec:ed:d1:40:87:d6:a9:5d:81:
                    e2:8f:83:13:db:ac:85:f2:40:10:bc:53:76:9a:50:
                    7d:d5:f9:30:4c:f3:e8:4d:68:c2:37:a7:2e:42:52:
                    2b:48:40:5c:e2:73:7b:aa:a0:ed:d4:40:26:66:15:
                    4e:6d:ca:ab:33:7c:98:49:ee:92:df:a4:27:0e:ac:
                    c1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:60:F4:E9:31:48:BC:84:B5:DE:C9:32:90:39:3F:C9:97:EF:94:CB
            X509v3 Authority Key Identifier:
                keyid:E6:E2:57:52:67:FF:83:2D:97:9E:38:DD:AF:3D:D6:74:20:16:2C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:f3:e2:4a:5a:4a:cf:9a:15:7e:04:d1:e5:99:35:6c:93:b6:
         9e:a9:63:b4:5d:34:11:c9:8f:25:1a:d6:95:83:67:79:f3:95:
         bf:43:2d:a1:7c:34:86:ae:83:49:2d:35:eb:1e:94:d9:1d:85:
         57:38:9f:a6:9b:94:38:49:cb:03:bd:e3:71:e4:17:10:61:5c:
         d1:52:da:2b:9e:ee:02:af:2c:be:76:d5:af:2d:82:d1:a4:59:
         6a:6c:0c:38:85:59:b5:32:25:d8:da:8e:7f:be:72:db:bc:65:
         a3:ff:b0:92:6d:d7:f7:7f:9f:a2:ec:e9:48:4c:df:b4:cf:09:
         1f:33:fe:11:7c:22:58:f1:57:27:2b:7d:09:87:fe:bb:9a:0d:
         2b:35:56:8a:08:2e:c4:10:05:48:32:91:03:d3:8a:74:9a:92:
         93:44:af:a7:0e:36:12:20:a3:46:55:b5:72:9b:42:e9:68:56:
         97:c6:cb:fb:69:3d:d5:4e:bb:b3:5d:79:34:b6:d6:9e:6f:02:
         f2:d4:cd:d9:54:02:33:4a:f1:51:7d:3f:c3:d8:9d:76:90:0f:
         00:b8:2f:b5:5c:e1:c7:e0:9c:31:e6:1a:1d:eb:99:e9:f6:d0:
         e2:c1:6c:21:80:20:bc:44:ac:3a:47:30:30:d0:a8:f4:1f:13:
         fd:76:9b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:12:19 2026 by rpki-client