Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
File:                     5WzVePQvjeBnI2dnxs_CusvBbgU.mft (raw, json)
Hash identifier:          7LX8r2FUU1+GHyqCeLGqCUcVoZDnKkwnPkEau8oCH8Y=
Subject key identifier:   D0:32:EF:C3:3A:37:7B:BA:21:06:4E:3B:FF:C3:87:B0:38:9D:04:3B
Authority key identifier: E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05
Certificate issuer:       /CN=e56cd578f42f8de067236767c6cfc2bacbc16e05
Certificate serial:       01A0CFA455715368AB684325C1C1A077554A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
Manifest number:          19E9
Signing time:             Wed 23 Sep 2026 19:00:48 +0000
Manifest this update:     Wed 23 Sep 2026 19:00:48 +0000
Manifest next update:     Thu 24 Sep 2026 19:00:48 +0000
Files and hashes:         1: 5WzVePQvjeBnI2dnxs_CusvBbgU.crl (hash: RKbEvrjaaDU2GCHN+RYQJuXEZjyuL/ZmhGfOehNS3Ck=)
                          2: _xb7dLIH6IMlpZq1SYlWl6nvqS4.roa (hash: oZ1UVmQ5z1c0zOrIXMtPyJxvit0yakzMpq+pTeT+fvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:a4:55:71:53:68:ab:68:43:25:c1:c1:a0:77:55:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e56cd578f42f8de067236767c6cfc2bacbc16e05
        Validity
            Not Before: Sep 23 19:00:48 2026 GMT
            Not After : Sep 24 19:00:48 2026 GMT
        Subject: CN=d032efc33a377bba21064e3bffc387b0389d043b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:25:68:62:2b:d4:8e:be:63:ab:35:e6:22:96:
                    78:c6:33:f1:05:db:3c:d5:a5:88:76:47:82:7a:7a:
                    53:fb:89:8b:b8:00:02:85:64:44:b9:ea:4c:12:e3:
                    78:1f:0c:fa:9b:b0:39:ec:04:12:67:26:d1:9b:5c:
                    00:37:b5:ef:2e:84:ea:28:c2:c2:d8:c6:19:6c:a4:
                    c5:47:7a:be:a8:17:dc:40:f4:0c:90:88:0c:d5:51:
                    85:58:2f:85:94:5e:ff:7f:ca:0a:51:80:be:5b:cf:
                    cc:95:3f:08:83:3a:61:f9:01:50:19:a0:d3:1c:d1:
                    df:c7:49:89:b9:78:bb:78:36:dd:55:d7:07:8c:ce:
                    e8:fa:84:8b:ba:1d:6e:0c:55:d4:6b:c0:44:fd:94:
                    37:bd:88:de:55:9c:94:1e:30:3d:cc:f1:10:e9:1a:
                    0e:b1:1a:3f:ca:a0:30:d0:1e:0b:3d:b5:f2:90:73:
                    63:ed:fd:f8:74:68:e3:e8:34:78:23:f4:d1:0f:4a:
                    92:4b:b6:5f:74:e7:75:b9:b1:3e:d0:74:70:f1:ea:
                    12:99:20:e0:85:99:31:92:5b:f1:0a:ef:18:9b:d0:
                    4f:f3:ea:31:12:de:2e:95:24:ca:9a:7c:cb:0f:a0:
                    ad:2c:fd:76:69:64:5d:4a:d7:f1:dd:a3:fa:c2:f6:
                    7e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:32:EF:C3:3A:37:7B:BA:21:06:4E:3B:FF:C3:87:B0:38:9D:04:3B
            X509v3 Authority Key Identifier:
                keyid:E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:4a:3e:f2:75:d3:db:d6:73:5b:23:5a:17:7e:33:4b:79:c8:
         cc:be:0f:f9:ce:59:92:1a:c7:33:82:2e:45:83:33:f2:12:db:
         0d:ab:92:0b:00:bc:b6:44:aa:07:7b:cd:60:3f:4e:c4:1e:99:
         c4:12:1c:83:f6:03:15:08:fd:d1:f5:00:58:ec:2a:7e:c9:10:
         44:06:d5:79:df:25:12:49:11:24:dc:9a:73:f5:94:e9:be:ec:
         eb:ef:e3:d6:ec:22:4a:31:b4:c0:c1:92:d4:21:53:a0:8e:fc:
         a5:5a:4e:be:e9:0e:74:e3:c3:26:f9:87:b9:f2:88:58:8c:40:
         3e:af:e7:d8:75:1e:53:ce:b4:58:7e:a3:83:ee:23:bc:db:32:
         2d:46:1e:54:56:27:ef:5c:32:bd:42:ea:11:43:e4:97:34:ed:
         a7:86:d6:00:58:13:34:df:66:57:c2:33:61:47:d2:82:3d:07:
         fc:71:ce:c3:a2:57:e8:09:1c:a5:d7:38:32:40:e2:ae:f1:0f:
         cc:2c:fd:86:fa:df:94:dd:13:37:fd:32:ee:b4:85:af:3a:f0:
         50:1b:4f:ab:a5:ef:d3:33:62:92:81:a7:86:74:b5:aa:f8:56:
         f4:e9:6a:12:c4:83:e1:79:7e:30:ea:bb:3c:a7:bd:ad:b4:5b:
         a9:19:24:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:20:53 2026 by rpki-client