Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft
File:                     5miK6WMjwfz6tUspRVc5e0mwO8c.mft (raw, json)
Hash identifier:          Us0W7azmju7ZpBm9OZbqQ0xa6UBt9Pa27Zyfevu4nsE=
Subject key identifier:   94:7B:A1:00:37:21:7C:9D:8E:89:EF:F3:99:FA:1C:5F:48:6B:80:8C
Authority key identifier: E6:68:8A:E9:63:23:C1:FC:FA:B5:4B:29:45:57:39:7B:49:B0:3B:C7
Certificate issuer:       /CN=e6688ae96323c1fcfab54b294557397b49b03bc7
Certificate serial:       01A0E853265F5D07C31EEA457F1C956136A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft
Manifest number:          1A86
Signing time:             Mon 28 Sep 2026 14:02:38 +0000
Manifest this update:     Mon 28 Sep 2026 14:02:38 +0000
Manifest next update:     Tue 29 Sep 2026 14:02:38 +0000
Files and hashes:         1: 5miK6WMjwfz6tUspRVc5e0mwO8c.crl (hash: I8vfg4rq/Asy6XhiTzhHDb8PPsP8lSrYnZXzxVJitvg=)
                          2: s-aFo2td51VtpBYLYG1CPaknAyk.roa (hash: RjujG57h+x2URKPsUkDkS4Anzxru9fSYQ3I07HUgrao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 14:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e8:53:26:5f:5d:07:c3:1e:ea:45:7f:1c:95:61:36:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6688ae96323c1fcfab54b294557397b49b03bc7
        Validity
            Not Before: Sep 28 14:02:38 2026 GMT
            Not After : Sep 29 14:02:38 2026 GMT
        Subject: CN=947ba10037217c9d8e89eff399fa1c5f486b808c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1c:41:fc:39:80:dd:b3:99:5c:4a:a0:7f:ba:
                    fa:1f:e0:9f:81:72:2e:49:92:56:c6:4a:5f:fc:8b:
                    99:8e:a3:0a:03:0a:a9:a3:ef:ac:04:2d:f2:49:d6:
                    5a:30:9b:b9:9f:82:81:fc:67:f8:89:27:f0:69:95:
                    99:08:ff:41:13:b0:5e:d8:fa:91:cd:f4:a0:0c:26:
                    a9:b3:41:f2:27:e0:b0:de:b9:40:f8:0c:a1:f2:bb:
                    57:c7:92:13:40:31:3e:41:43:c4:3f:6a:08:e2:12:
                    28:f0:1a:8d:7a:0a:57:e8:f2:1f:de:ab:29:ec:a5:
                    ee:a5:95:a2:79:2e:90:e8:74:c0:4a:6b:5d:a2:79:
                    34:8e:3e:e3:5b:2b:9f:47:75:fb:39:44:cb:40:da:
                    fa:67:cd:0a:a8:88:a3:7d:9a:ca:9e:37:47:16:79:
                    79:cb:51:ea:b5:f1:44:1f:02:14:e2:94:f9:ec:76:
                    8a:05:72:4d:0d:b7:19:53:2d:e1:7d:05:a2:7d:3b:
                    a1:90:bf:28:85:65:01:7b:76:ac:c7:68:12:a7:be:
                    c2:f6:d6:6d:54:9e:fb:ae:cc:24:5e:9a:fe:3c:05:
                    68:c9:c6:06:a5:98:c5:7f:84:0a:34:eb:f6:ab:16:
                    7a:05:be:d5:04:7e:6e:c9:ce:6c:49:7b:0d:a7:a9:
                    c5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:7B:A1:00:37:21:7C:9D:8E:89:EF:F3:99:FA:1C:5F:48:6B:80:8C
            X509v3 Authority Key Identifier:
                keyid:E6:68:8A:E9:63:23:C1:FC:FA:B5:4B:29:45:57:39:7B:49:B0:3B:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:fd:82:1c:dd:47:f9:e6:91:42:ab:52:90:92:83:ad:5b:ee:
         db:71:75:3d:7e:ce:14:07:43:87:56:fc:8f:c1:87:94:91:a2:
         04:63:63:23:35:de:f1:09:c6:91:55:1d:e5:03:e5:07:7d:a7:
         b6:bc:15:76:87:fe:d9:b5:ea:af:0e:ee:0d:0c:b5:0a:6c:08:
         2d:8d:6e:07:e7:63:7c:f6:fc:ee:5a:ff:68:8f:82:4f:9d:9d:
         d4:55:8a:27:29:f4:42:57:b6:b0:6b:fd:e1:da:1b:bc:b6:b8:
         02:7c:14:76:3f:97:ab:52:5d:ef:3f:a9:cc:35:76:1c:15:85:
         bf:30:36:c5:fd:e5:70:1b:48:72:cb:97:91:ab:35:cf:01:8e:
         6b:f4:04:96:84:49:85:60:cb:fc:4e:3a:8b:60:2e:d4:3c:71:
         91:cb:10:49:e3:32:79:95:fb:27:37:26:21:33:57:85:c8:87:
         20:bf:d0:8b:ea:03:b0:66:12:0e:73:94:d7:47:8e:96:db:97:
         0d:23:0f:48:eb:d6:04:25:d2:7e:11:17:8e:07:c2:a0:59:fd:
         95:25:c0:ca:94:eb:88:55:48:0e:24:96:75:74:be:65:d2:94:
         5b:75:41:2f:11:79:0f:da:a3:e1:f2:93:16:02:4b:9e:46:f1:
         6e:63:5b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:36:42 2026 by rpki-client