Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft
File:                     5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft (raw, json)
Hash identifier:          GyG7T+bLIjAbHjw2ti7943QCyIyXQw0aBAAxqrG7vHI=
Subject key identifier:   03:AC:42:A2:A4:BE:B6:AA:C8:AF:52:E0:28:FF:13:29:86:21:0F:84
Authority key identifier: E4:79:AF:17:16:DC:46:1E:5B:B3:F8:76:21:5B:CB:94:E8:80:8B:A0
Certificate issuer:       /CN=e479af1716dc461e5bb3f876215bcb94e8808ba0
Certificate serial:       01A0CCA34A955B9DA199D88FD4A6A7039A13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft
Manifest number:          1A6D
Signing time:             Wed 23 Sep 2026 05:00:48 +0000
Manifest this update:     Wed 23 Sep 2026 05:00:48 +0000
Manifest next update:     Thu 24 Sep 2026 05:00:48 +0000
Files and hashes:         1: 5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl (hash: 7/KI8oDTkzvOoHRXvVHIQhC1FXpD+xN3TCzRO7KuEM0=)
                          2: Ctsfhc1buhjsP-LDtiYQgEeAvsM.roa (hash: IcpxSZEbw6wlN8c6BwrewScxYORBAdj6421Et1q2/ak=)
                          3: QyLxV1GsI9UZiOqN--9VZ1wCfac.roa (hash: p/jV8Bz6xxYxD+AW9prSPsf+g1XW829odlRFlONQHfw=)
                          4: _HACinjTIxRkle58_-0RVGUxyaY.roa (hash: 56U7Y5xzPXcpazN7C00qDGlRUzZsBIL1ftiv8gKYYpU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:a3:4a:95:5b:9d:a1:99:d8:8f:d4:a6:a7:03:9a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e479af1716dc461e5bb3f876215bcb94e8808ba0
        Validity
            Not Before: Sep 23 05:00:48 2026 GMT
            Not After : Sep 24 05:00:48 2026 GMT
        Subject: CN=03ac42a2a4beb6aac8af52e028ff132986210f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e2:77:77:d7:b1:a1:9d:d8:c8:65:0d:a0:1a:
                    d9:73:0a:7d:c1:9d:10:6e:1c:b4:26:5e:f1:45:e9:
                    28:a7:c4:e2:e6:06:a7:07:a5:80:fd:7f:13:d6:83:
                    a4:1a:f9:8a:45:9b:2d:3a:fd:2d:d7:f9:05:88:81:
                    44:60:60:9e:f7:f1:e7:94:9d:e8:a3:98:3f:56:5a:
                    fc:cc:d0:bd:54:5d:5d:29:77:85:da:79:e6:db:7e:
                    cb:3f:1e:8a:4f:7c:2d:c8:6f:4c:7e:ab:ac:54:a0:
                    95:91:89:88:9f:ee:c6:b5:81:a2:f5:61:43:ca:8b:
                    24:07:56:58:68:39:56:55:db:94:32:e5:dc:c6:f5:
                    92:15:9b:67:4e:ab:e4:02:40:81:a8:28:09:8e:14:
                    dd:5a:13:9a:47:b8:cc:25:34:da:a0:36:76:bb:6d:
                    f7:3d:f3:cb:e6:be:82:0c:8a:49:e7:ed:98:21:48:
                    58:b7:df:90:b6:6d:35:2b:6e:4c:32:e7:72:f9:7a:
                    c9:1d:ac:ae:5a:7e:1d:8e:a7:66:bd:87:58:e2:1c:
                    43:7e:ec:a4:f8:88:68:36:56:25:66:78:3b:dc:86:
                    08:7c:5d:ee:51:c1:a5:11:53:08:79:9c:ee:55:80:
                    ae:2b:70:f4:00:9e:f5:1d:51:d8:7e:ce:d1:1e:db:
                    bb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:AC:42:A2:A4:BE:B6:AA:C8:AF:52:E0:28:FF:13:29:86:21:0F:84
            X509v3 Authority Key Identifier:
                keyid:E4:79:AF:17:16:DC:46:1E:5B:B3:F8:76:21:5B:CB:94:E8:80:8B:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:c8:1a:6e:13:6f:8f:83:03:89:9e:83:9b:73:b3:d7:58:0a:
         d7:aa:22:73:9f:4b:ae:7d:5e:51:f4:ab:d1:e1:96:b2:90:c2:
         e6:45:93:52:96:65:8c:a7:18:e8:1f:f4:a1:0e:eb:61:79:2e:
         55:39:9d:65:51:2d:8e:39:27:e0:31:64:5a:79:1a:d7:1b:c0:
         7b:08:78:6e:ee:e2:c5:32:71:66:76:68:97:17:47:85:26:5d:
         a4:70:ff:87:ab:76:19:f2:51:5b:38:f9:b7:51:2d:46:ab:93:
         82:1f:42:b5:f4:06:f9:06:6d:55:9f:42:6c:1b:50:23:bc:35:
         28:9f:52:00:c8:b9:c1:e7:9a:61:1f:75:83:ca:13:3e:26:33:
         90:d8:4e:66:ed:c9:07:04:fa:e9:98:bd:ef:9d:67:8c:92:8a:
         5e:c0:53:65:11:01:17:65:8b:b5:7e:ba:f8:92:17:76:4f:6a:
         28:d3:66:36:ef:f6:46:fe:ab:2d:51:3a:1e:6b:2d:25:43:a5:
         1e:78:0a:84:b7:5b:e5:75:af:78:12:bd:ab:ef:d9:22:22:04:
         bf:72:74:ad:ab:11:4c:23:54:be:b4:14:1c:e8:0c:a2:c2:1d:
         2f:e9:ce:3a:8a:ec:5a:4e:25:78:bb:6b:fa:15:ec:f0:73:da:
         0e:e4:c0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:19:42 2026 by rpki-client