Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
File:                     5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft (raw, json)
Hash identifier:          Mu5A3RtFNwFXnkYGP0+CqO4Bgjhonfs+8yWgTSmPUqo=
Subject key identifier:   2D:1B:E6:DD:32:8A:17:89:21:DE:11:D3:95:18:DC:17:C2:03:72:13
Authority key identifier: E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97
Certificate issuer:       /CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
Certificate serial:       01A0CCA390B3CAA23446AF27A168D4F4BF34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
Manifest number:          154A
Signing time:             Wed 23 Sep 2026 05:01:06 +0000
Manifest this update:     Wed 23 Sep 2026 05:01:06 +0000
Manifest next update:     Thu 24 Sep 2026 05:01:06 +0000
Files and hashes:         1: 5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl (hash: E/LOFrG7KaXu7qAAh9LRCfGO0OWsat/BUjeTgKIahmg=)
                          2: IFreR7G3pVUxUHJmvWKSmdyyxV4.roa (hash: 1l0It7YxkUDUXasb2TijXHU9KlO973Zbw1AspnDQIIE=)
                          3: XvO3KugGyIUqy8DdZrWXqALiZv8.roa (hash: yUk7+RcCJLoQMsjAjhgKG5a6qMpWaeW1ZTTyneRurSc=)
                          4: ceyOuOPjIFLM94nq_gIZQX5eqOk.roa (hash: vIPUa1tUzFrPLIwsoGGabQ0ECJy+Q9gJ/RWv+H6Fq+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:a3:90:b3:ca:a2:34:46:af:27:a1:68:d4:f4:bf:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
        Validity
            Not Before: Sep 23 05:01:06 2026 GMT
            Not After : Sep 24 05:01:06 2026 GMT
        Subject: CN=2d1be6dd328a178921de11d39518dc17c2037213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d5:25:dc:08:1a:17:4f:1d:3e:df:6a:c6:d1:
                    53:4f:28:08:1d:67:50:26:49:d3:f2:49:36:7c:ef:
                    79:cc:d4:99:9d:cd:77:15:03:2a:c4:83:3c:14:13:
                    75:e1:79:f5:e5:2e:28:33:33:07:03:dc:0f:18:e3:
                    0e:f6:71:7f:9f:70:7d:a9:70:96:48:96:46:0c:2b:
                    29:6e:4e:af:ff:e1:11:2b:13:fd:91:e7:e9:3a:44:
                    c6:49:77:13:0e:50:38:d8:54:0b:6b:12:ad:9c:5c:
                    7a:5a:ca:1b:d6:e2:4e:4a:32:bf:28:8d:15:93:3c:
                    c2:6b:07:c5:32:af:a3:b3:40:dc:e4:46:d0:8a:79:
                    26:78:26:2e:0b:e8:17:24:06:fa:95:4c:4e:0e:28:
                    37:78:ab:c4:7c:2f:84:d2:fb:b1:80:15:c2:a0:fe:
                    09:88:26:15:fe:86:57:4d:31:88:41:9f:6b:d9:00:
                    16:d7:95:94:94:75:93:b7:e7:dd:4b:11:e4:b7:b0:
                    4d:e7:7c:13:cd:10:68:26:2c:d9:6a:0d:77:3e:81:
                    da:e1:69:0b:88:9f:7b:96:56:ca:47:f3:79:dc:95:
                    82:da:de:92:e5:57:79:f8:8c:a7:3f:6f:a4:ba:f7:
                    6f:fc:4e:d3:e3:af:1b:8f:49:cf:19:96:c4:24:42:
                    67:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1B:E6:DD:32:8A:17:89:21:DE:11:D3:95:18:DC:17:C2:03:72:13
            X509v3 Authority Key Identifier:
                keyid:E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:bc:ff:3f:2d:45:5d:95:fe:37:91:c1:96:41:93:2e:44:93:
         75:0a:65:47:46:6c:e0:f4:5e:33:02:7a:2e:08:59:64:fc:e8:
         8d:db:47:e6:64:b9:41:0e:db:27:02:2c:a0:55:b5:c7:f8:a2:
         3d:ea:69:85:19:a7:57:5f:07:b0:2e:f3:b7:9e:67:e5:ab:46:
         b7:bc:14:ac:bd:a9:80:7d:a5:38:e7:f2:91:5e:24:13:57:12:
         b6:37:a2:91:e2:86:b1:5e:4c:fc:16:da:33:84:f2:48:70:ae:
         a5:54:e7:55:6d:7e:45:77:04:9b:26:44:f4:d9:d5:1b:c6:14:
         a8:db:dc:da:80:6c:9e:15:d5:1a:70:ce:6c:2d:90:3a:41:7c:
         fa:7b:ea:1a:49:2a:3e:09:17:14:ce:59:85:86:11:24:89:fa:
         0e:58:36:0d:22:b6:32:06:ef:d3:68:78:e7:41:f2:c6:0c:5a:
         1c:bd:bc:80:bf:45:ff:19:eb:74:be:62:f7:e9:84:dc:d7:cb:
         e1:f8:48:20:22:0c:d1:5d:a3:10:23:77:fd:a9:6e:4f:f8:73:
         a6:f0:87:db:79:70:4f:eb:92:49:07:b6:34:72:b9:2f:4e:25:
         9e:ae:21:ec:88:54:c3:a5:65:43:ac:13:ce:b3:c5:52:80:2d:
         c2:4e:5f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:07:21 2026 by rpki-client