Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/5nLCrkt_7GjFsRCXOqBmpQR90Nc.mft
File:                     5nLCrkt_7GjFsRCXOqBmpQR90Nc.mft (raw, json)
Hash identifier:          WcQnnfQSwPMAIve2FarOk231kUajYzRiUNXQyF3k040=
Subject key identifier:   A1:B2:F4:68:E5:E0:E1:AC:D4:90:26:EE:D8:EB:AC:E4:78:1B:D0:87
Authority key identifier: E6:72:C2:AE:4B:7F:EC:68:C5:B1:10:97:3A:A0:66:A5:04:7D:D0:D7
Certificate issuer:       /CN=e672c2ae4b7fec68c5b110973aa066a5047dd0d7
Certificate serial:       01A0CE24746C9D1A11C2C64DB1CDDA635DCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nLCrkt_7GjFsRCXOqBmpQR90Nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/5nLCrkt_7GjFsRCXOqBmpQR90Nc.mft
Manifest number:          E4
Signing time:             Wed 23 Sep 2026 12:01:30 +0000
Manifest this update:     Wed 23 Sep 2026 12:01:30 +0000
Manifest next update:     Thu 24 Sep 2026 12:01:30 +0000
Files and hashes:         1: 5nLCrkt_7GjFsRCXOqBmpQR90Nc.crl (hash: lphFtw1jzhuq8QA36+T+ZXzAx8KVPnvqqjdt2Mlf++Y=)
                          2: dJl8r4I9cKQfDAC67Fzamr6A4Ns.roa (hash: G49JKof/PjJ/pDTjMFk4RiR1s/uu+QqKOQDfL/6PwFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/5nLCrkt_7GjFsRCXOqBmpQR90Nc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/5nLCrkt_7GjFsRCXOqBmpQR90Nc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5nLCrkt_7GjFsRCXOqBmpQR90Nc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 12:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:24:74:6c:9d:1a:11:c2:c6:4d:b1:cd:da:63:5d:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e672c2ae4b7fec68c5b110973aa066a5047dd0d7
        Validity
            Not Before: Sep 23 12:01:30 2026 GMT
            Not After : Sep 24 12:01:30 2026 GMT
        Subject: CN=a1b2f468e5e0e1acd49026eed8ebace4781bd087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d3:dd:c3:0c:0d:17:ff:90:8e:c0:11:89:65:
                    da:9b:d2:70:9a:12:ba:bf:c5:ec:2e:f3:c3:b1:46:
                    c8:86:12:4f:f2:35:86:a1:91:04:57:ec:85:83:11:
                    c5:cb:4b:fc:3f:e2:c4:c4:cd:28:8f:74:f2:86:a6:
                    f4:ad:b7:a8:b3:81:4b:8c:a7:df:cb:89:30:a8:af:
                    f2:07:30:93:46:83:c8:e5:37:83:c9:83:dd:e7:41:
                    8b:5e:05:5f:7e:31:26:8c:00:15:db:0f:1f:7a:67:
                    4f:63:7a:de:1f:e9:f5:15:50:f2:c3:e3:3d:55:48:
                    52:d9:69:41:55:1c:2c:9f:95:1b:7d:27:64:13:56:
                    5a:d9:b8:b3:ab:ed:e2:f8:12:00:a3:a2:99:16:e4:
                    c9:0c:e8:1a:04:7b:a2:ab:51:a2:56:e8:7a:b1:7e:
                    a5:74:39:8f:63:c6:1b:c4:e5:d0:a5:5b:7c:1d:62:
                    78:08:e0:87:12:71:d4:e7:9c:e1:43:d6:87:8a:6e:
                    9b:32:8d:c6:05:85:8c:49:39:66:b0:f9:a1:58:5b:
                    a3:b6:e4:a9:8e:9b:be:88:8a:d6:f4:1a:f2:0c:12:
                    d2:a7:e9:0e:8b:14:3c:0e:c9:4c:65:20:94:74:78:
                    f2:f6:50:0b:2e:93:a9:0d:47:91:a7:b9:b7:9b:cf:
                    ba:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B2:F4:68:E5:E0:E1:AC:D4:90:26:EE:D8:EB:AC:E4:78:1B:D0:87
            X509v3 Authority Key Identifier:
                keyid:E6:72:C2:AE:4B:7F:EC:68:C5:B1:10:97:3A:A0:66:A5:04:7D:D0:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nLCrkt_7GjFsRCXOqBmpQR90Nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/5nLCrkt_7GjFsRCXOqBmpQR90Nc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/5nLCrkt_7GjFsRCXOqBmpQR90Nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:bf:cd:4b:db:a0:67:f8:a9:87:28:ae:d3:3a:eb:b9:5e:b4:
         f2:a9:00:f4:da:60:1f:b1:0b:c0:1f:cc:57:f7:fb:f3:33:f4:
         2c:c8:0f:5e:74:3e:1c:9c:5b:49:5d:60:89:de:ad:6f:e8:3b:
         6d:a3:98:fc:f9:19:ab:98:12:17:6d:a9:9d:fa:2a:3a:58:ec:
         c6:d2:79:22:02:f8:4b:60:ca:c0:59:66:8a:d8:3c:48:b5:5f:
         00:a2:91:12:b1:60:2e:c8:b7:e7:73:19:a8:68:8a:41:d6:bb:
         0f:94:9e:9e:72:cc:00:2a:fc:68:f3:9a:de:52:17:64:7f:7d:
         4f:7d:de:7a:bd:a4:49:74:79:2b:77:ad:ca:ea:02:8a:dd:05:
         71:6c:36:b7:8c:6e:54:6c:c2:b9:da:81:8b:e1:cc:8a:77:1f:
         20:33:59:6e:7f:2e:87:c6:c7:65:b2:03:13:7d:0f:20:13:b2:
         67:ec:dd:6c:76:90:a8:ec:11:ad:ad:8a:35:fc:00:62:9b:d1:
         18:f9:47:85:2a:b3:a2:45:d4:a4:0a:56:dd:3a:95:4d:42:9e:
         5e:da:6a:fc:93:9c:d6:de:de:27:ea:3f:b7:b0:ac:df:47:14:
         29:24:c2:72:84:22:bd:ee:2f:1f:7e:44:09:4e:a9:63:07:d7:
         37:31:7a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:18:38 2026 by rpki-client