Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.mft
File:                     5LDTY6ChegaEUahRRc5PpGTX-hs.mft (raw, json)
Hash identifier:          vE6gTrfyPeSbVze+4pU08oy8wfYLUMdS8Nee3PQCt6k=
Subject key identifier:   F0:ED:B5:41:2A:5D:58:0D:E2:64:2F:58:15:46:26:99:C0:F2:4A:0B
Authority key identifier: E4:B0:D3:63:A0:A1:7A:06:84:51:A8:51:45:CE:4F:A4:64:D7:FA:1B
Certificate issuer:       /CN=e4b0d363a0a17a068451a85145ce4fa464d7fa1b
Certificate serial:       01A0C40D8A104006CBE7922A78D4C993DD3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5LDTY6ChegaEUahRRc5PpGTX-hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.mft
Manifest number:          1396
Signing time:             Mon 21 Sep 2026 13:00:16 +0000
Manifest this update:     Mon 21 Sep 2026 13:00:16 +0000
Manifest next update:     Tue 22 Sep 2026 13:00:16 +0000
Files and hashes:         1: 5LDTY6ChegaEUahRRc5PpGTX-hs.crl (hash: Qm+AzLq+pH3XneGwLHjDYSB6lS2Fl5gXfYdIMi/BJ84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5LDTY6ChegaEUahRRc5PpGTX-hs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 13:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:0d:8a:10:40:06:cb:e7:92:2a:78:d4:c9:93:dd:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4b0d363a0a17a068451a85145ce4fa464d7fa1b
        Validity
            Not Before: Sep 21 13:00:16 2026 GMT
            Not After : Sep 22 13:00:16 2026 GMT
        Subject: CN=f0edb5412a5d580de2642f5815462699c0f24a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e7:5a:2c:2c:4c:5c:ec:94:51:24:2a:ef:62:
                    3c:eb:92:72:53:e9:06:51:ce:bd:25:04:a7:f5:ac:
                    52:10:6f:88:cf:b3:45:c7:ce:21:41:eb:ef:64:6f:
                    f8:ee:83:6f:3c:2c:80:4e:d7:ee:66:eb:6a:8a:0d:
                    cd:a7:a2:dc:ab:12:60:7a:b7:12:76:11:85:14:d8:
                    c5:b3:1e:34:80:92:b2:f4:21:ba:f5:28:8a:98:40:
                    07:19:f6:a1:b6:d6:0f:ad:ad:f0:c9:64:07:a3:e1:
                    b0:b1:0f:f1:fd:27:30:6c:6b:14:ab:c9:e9:65:ea:
                    04:cc:fe:64:75:3b:d5:89:a6:b5:4c:96:16:44:fd:
                    dc:76:df:0e:da:1b:9f:ab:ff:4a:f6:d8:18:97:78:
                    ae:98:1a:65:45:51:17:d1:b3:94:7d:b6:10:b9:92:
                    55:1d:ce:9e:fb:f6:cf:7b:eb:ed:38:19:9a:f8:83:
                    e1:86:0e:3e:9d:bc:ba:c4:f3:6c:21:b3:c3:7b:6e:
                    7e:18:51:b7:45:ad:d1:be:ea:d3:eb:0c:70:8e:17:
                    ff:83:a8:b1:d2:17:1e:b0:e8:f0:99:22:1f:e6:9c:
                    b9:c9:3d:8c:4d:d7:0c:66:6b:40:93:f1:e6:e7:3c:
                    f3:7e:f7:96:89:2d:3f:9e:41:ce:02:7d:a5:c9:f9:
                    08:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:ED:B5:41:2A:5D:58:0D:E2:64:2F:58:15:46:26:99:C0:F2:4A:0B
            X509v3 Authority Key Identifier:
                keyid:E4:B0:D3:63:A0:A1:7A:06:84:51:A8:51:45:CE:4F:A4:64:D7:FA:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LDTY6ChegaEUahRRc5PpGTX-hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:3a:f6:af:ea:8a:39:1f:56:0c:73:ec:d3:56:64:36:3c:12:
         e0:82:12:be:eb:50:f4:59:3a:ad:01:a6:86:1f:a5:ad:d3:0b:
         21:18:09:a2:40:6d:f4:95:06:0a:95:5d:22:ea:46:0a:30:9f:
         86:40:05:8e:fd:0a:c8:70:9b:11:b4:bc:06:e7:9f:4c:7c:dd:
         ba:64:00:1f:73:81:51:a0:8a:20:db:58:52:71:78:73:c6:31:
         50:fe:c2:e6:79:33:26:c3:0c:30:f4:83:73:bf:97:b2:f3:26:
         02:c2:55:26:1b:ec:af:f4:88:99:d3:ee:e4:af:eb:93:f6:bd:
         e9:d8:fb:c2:65:d4:98:12:bc:f5:7c:74:eb:62:e5:76:24:e5:
         0a:cb:89:ba:4f:e1:b0:4c:07:39:1b:be:25:1a:f1:56:26:95:
         65:d3:0c:8a:93:f8:e7:06:f0:54:b4:5b:3f:58:45:06:fd:08:
         03:a4:08:6a:d6:a5:77:5b:19:1f:30:91:e2:ec:9d:e4:a0:09:
         da:1c:08:d0:a6:3b:ad:96:36:db:98:6c:49:0f:49:87:f6:e7:
         b1:fb:8f:5a:bc:76:4d:38:ef:0c:ae:7a:eb:34:ca:c0:4d:25:
         2d:74:37:5f:54:27:a1:55:1e:68:be:76:a2:70:df:09:a1:e9:
         07:22:80:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:32:31 2026 by rpki-client