Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
File:                     5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft (raw, json)
Hash identifier:          YGjhP4AYpc3pCrA6aPJFkpuUghvZmCx/EVNNhuhZym4=
Subject key identifier:   EB:C6:99:DC:E2:11:D5:AE:59:C8:DE:13:C7:FD:3E:6D:35:B8:5F:FE
Authority key identifier: E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C
Certificate issuer:       /CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c
Certificate serial:       01A0CAEB9188329D86B8A5147CC6A4D845CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
Manifest number:          0C78
Signing time:             Tue 22 Sep 2026 21:00:30 +0000
Manifest this update:     Tue 22 Sep 2026 21:00:30 +0000
Manifest next update:     Wed 23 Sep 2026 21:00:30 +0000
Files and hashes:         1: 5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl (hash: S9AYx5KWTqntuOOOUGNwT5bD8UryUeibGtVFZelfXF8=)
                          2: oPgrYeYQdKE5w12V1Qsc5asf-z0.roa (hash: DyrqcRbA6WGivtdHIlCxrVDtSLyegGOpED1YlRSd3w0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:eb:91:88:32:9d:86:b8:a5:14:7c:c6:a4:d8:45:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c
        Validity
            Not Before: Sep 22 21:00:30 2026 GMT
            Not After : Sep 23 21:00:30 2026 GMT
        Subject: CN=ebc699dce211d5ae59c8de13c7fd3e6d35b85ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:82:e8:e6:e1:6d:b3:94:dc:44:c0:df:5a:94:
                    ae:b0:7c:3d:02:06:98:04:a2:a1:f0:66:a7:b2:fe:
                    f6:3c:1d:c1:c0:4b:be:0f:ba:6c:b8:dc:98:f5:59:
                    e6:2b:75:8e:23:97:cf:04:4b:a3:b1:61:96:f0:a6:
                    cc:91:83:1a:ba:08:3c:e8:09:d4:6b:27:38:2a:9f:
                    c4:99:26:7a:56:8f:01:23:cb:fd:15:42:50:2b:f5:
                    37:62:c7:a3:a0:d6:cf:ab:ea:d0:0f:ec:0a:26:22:
                    9c:ec:c4:08:69:d0:b8:91:13:86:d8:b4:df:98:a0:
                    ec:d9:a5:d6:6b:d4:af:e6:18:79:44:28:3f:fb:8f:
                    ed:32:84:9b:a7:ec:e9:04:ac:10:21:9a:32:b4:a2:
                    8a:0c:98:45:92:fa:56:88:e5:01:00:81:fb:31:ce:
                    55:87:17:e9:8c:47:ea:20:e8:a3:01:51:dd:f9:2f:
                    5b:00:2d:0f:86:20:d3:55:55:e4:bf:75:0a:53:8a:
                    d5:c7:29:7e:d2:02:ea:c7:ea:8f:b9:4f:f3:b7:7d:
                    41:b4:9c:53:76:da:57:df:36:db:a3:1c:61:f0:93:
                    40:ab:27:64:59:20:41:67:3a:f7:ec:5c:46:3b:9e:
                    93:4a:70:22:ad:7b:81:69:c0:82:7b:50:8d:92:a8:
                    e5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C6:99:DC:E2:11:D5:AE:59:C8:DE:13:C7:FD:3E:6D:35:B8:5F:FE
            X509v3 Authority Key Identifier:
                keyid:E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:75:8d:b0:aa:a5:3e:14:c2:0d:1f:d9:9d:65:fd:5d:f5:92:
         75:34:3a:96:e7:cb:eb:6f:a9:eb:e6:df:13:d3:5a:ed:71:1d:
         5f:e6:1c:4d:e1:f5:85:0a:9a:9e:fe:c2:3e:87:26:d4:0c:d7:
         8b:14:30:1c:fb:6a:b3:59:c8:a7:b7:44:c5:0b:be:2c:68:27:
         b4:6b:dd:7f:fc:ef:98:1a:cc:80:75:43:86:d9:b0:4b:ef:1b:
         10:14:46:aa:9d:51:0e:e5:c3:26:8c:ec:0c:c0:e2:3d:61:81:
         81:a1:7c:55:7a:bf:8e:f0:0c:ae:33:ec:15:4b:19:dc:b3:1d:
         91:32:a0:1c:ff:98:89:e1:19:c0:f0:fe:4e:4f:fe:2a:18:b0:
         6f:5d:b6:ce:97:70:92:c5:a5:32:48:58:0b:23:4c:36:2d:af:
         41:9c:00:7e:01:35:8c:a8:80:95:bc:31:0c:60:bb:88:95:3d:
         db:f1:9d:b9:32:19:a3:64:60:0e:50:da:ed:1b:04:fd:79:f2:
         b2:fb:20:c1:5e:10:a4:a3:6e:76:b9:db:5b:78:2d:4b:a1:78:
         05:44:e7:db:53:97:60:37:a6:9a:bd:78:f1:0d:52:1a:22:2c:
         a4:64:70:98:3d:7e:9e:1a:e3:e6:e0:7c:a7:47:6a:ca:c7:e1:
         13:ba:6e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:20:34 2026 by rpki-client