Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
File:                     5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft (raw, json)
Hash identifier:          Oh+e+5s9xWhyMV02BPZzDEQ1R/pTB/tcLq6NAO/awtA=
Subject key identifier:   A0:3F:8A:0C:3E:4A:4A:70:17:2F:78:1D:39:2C:BF:A0:2D:3D:9C:29
Authority key identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
Certificate issuer:       /CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Certificate serial:       01A0C3699E20626F6084E23C2957A3B0BE2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
Manifest number:          165F
Signing time:             Mon 21 Sep 2026 10:01:13 +0000
Manifest this update:     Mon 21 Sep 2026 10:01:13 +0000
Manifest next update:     Tue 22 Sep 2026 10:01:13 +0000
Files and hashes:         1: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl (hash: LbC0Ks5iiGIicRFXqvtMfyImm0keBhCg6+Nu4m2UVEA=)
                          2: DJletBM0tIFFFJ-dypu-DHrFceU.roa (hash: bByHr5fnzYQ5KdGrvk8CzGr4/2zv/8Vt4xxo1eVu+A0=)
                          3: Jt8YXQnSYki_aZ_F4dCfaaJKKow.roa (hash: lv1y9n6SxRqEqaqKtDtqJfGE7WxXtWgMt7j43NvbuS8=)
                          4: l8hfM0tA1hlOp9-gmuJ6WOfIhu0.roa (hash: IAmuOAJMto9pgwbf2c7PBZN6/VWyoBQiETP/DoJwG+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 10:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:69:9e:20:62:6f:60:84:e2:3c:29:57:a3:b0:be:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
        Validity
            Not Before: Sep 21 10:01:13 2026 GMT
            Not After : Sep 22 10:01:13 2026 GMT
        Subject: CN=a03f8a0c3e4a4a70172f781d392cbfa02d3d9c29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:88:1d:3b:54:3f:55:cf:b8:aa:6a:cb:3e:5d:
                    e5:b2:2f:b0:55:3e:eb:8e:35:17:f1:06:a4:b2:6b:
                    9d:a9:00:ef:13:9b:b9:1b:39:f5:e1:44:d3:5c:00:
                    20:4f:8e:70:01:81:a6:f9:6a:68:f1:44:09:c2:b2:
                    dd:3f:c9:b7:47:8f:c1:e8:7a:6b:18:47:93:24:ef:
                    1a:fd:0b:56:9c:51:33:52:61:60:1b:ea:6f:fb:f7:
                    ae:e3:b5:c0:ea:38:c0:0b:80:dc:d3:05:0f:73:ae:
                    8e:6d:bb:d6:a2:ed:bb:75:ef:38:99:d5:9a:c9:85:
                    b9:0d:b4:68:6c:c7:f7:71:0d:66:ef:e3:e1:c7:d0:
                    4d:ce:10:d9:18:29:90:cf:a0:5e:17:aa:93:ba:40:
                    b4:0c:9d:2a:24:cf:ee:56:43:9b:2f:09:54:30:b7:
                    b5:1d:e4:39:68:86:11:91:eb:b2:9d:72:21:d9:99:
                    f5:0c:e0:1f:dc:94:ad:53:5e:88:b9:c5:45:09:82:
                    13:c5:26:c0:17:50:de:d1:77:0d:7d:55:af:d3:af:
                    2c:9e:13:11:cb:c7:59:bd:ba:a2:17:2d:fe:a2:e0:
                    c2:06:dc:a3:02:df:22:59:6a:62:dd:d7:35:b7:05:
                    09:12:f8:c7:fa:4e:a1:34:8f:5f:80:cb:d0:5f:79:
                    ee:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:3F:8A:0C:3E:4A:4A:70:17:2F:78:1D:39:2C:BF:A0:2D:3D:9C:29
            X509v3 Authority Key Identifier:
                keyid:E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:91:c5:8e:58:65:8d:a8:89:55:5d:24:89:98:1f:97:03:52:
         1c:0c:5c:8c:08:32:d8:ce:77:6d:43:d6:f7:95:f8:76:9b:dd:
         5c:9b:cd:73:01:86:6d:27:24:34:37:ca:3b:10:33:56:68:b8:
         ef:76:ed:26:80:1f:11:db:57:c4:49:52:f8:df:1c:1a:29:4c:
         b6:e8:4b:35:a2:e5:81:c4:07:a2:a4:1c:d4:f8:2c:76:08:26:
         ca:cd:c4:84:78:94:b8:b7:40:f8:be:aa:61:0a:0d:79:e3:e3:
         18:ac:b5:fc:40:cb:e8:d7:fd:8a:72:17:fa:07:41:86:44:2b:
         96:b6:bf:dc:f5:0f:24:c1:03:80:e4:c7:05:5d:ac:ef:0b:be:
         33:4f:da:8d:8a:98:36:ab:c2:0c:99:a4:29:91:8a:92:72:f7:
         db:69:f8:3b:19:14:86:ec:bd:49:9d:a8:08:81:52:a8:cb:75:
         fc:6c:68:ea:58:1f:8c:b3:11:df:e9:83:ef:5a:16:21:e6:cc:
         71:6f:42:13:57:84:6c:93:2c:20:af:45:95:3e:78:92:f6:71:
         cf:a0:d2:fe:f1:6f:63:7b:9f:c4:ee:bd:6c:fa:fd:e3:8a:1e:
         de:3b:a0:4c:02:c1:c1:bd:0e:5b:74:fa:bf:c2:fd:fe:33:6b:
         a4:6b:01:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:04:50 2026 by rpki-client