Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
File:                     5rtLno321mTvy3e0EEFcg0phd4I.mft (raw, json)
Hash identifier:          HbjL0DCPoXk7Qb/TYWkQfyu1XWW8WngnrqnfuKgoepg=
Subject key identifier:   03:1A:D2:B9:FF:8A:DE:44:1B:DF:18:76:DD:72:86:C2:85:B0:6A:EB
Authority key identifier: E6:BB:4B:9E:8D:F6:D6:64:EF:CB:77:B4:10:41:5C:83:4A:61:77:82
Certificate issuer:       /CN=e6bb4b9e8df6d664efcb77b410415c834a617782
Certificate serial:       01A0C47B5F6947C6BA8355FD96184BC91F06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
Manifest number:          0850
Signing time:             Mon 21 Sep 2026 15:00:14 +0000
Manifest this update:     Mon 21 Sep 2026 15:00:14 +0000
Manifest next update:     Tue 22 Sep 2026 15:00:14 +0000
Files and hashes:         1: 5rtLno321mTvy3e0EEFcg0phd4I.crl (hash: ldQU8KVCYalfFu8V+Y9D4LVvqr8EZKWyvZTIDHQvUhw=)
                          2: Q92n5As_StLfCEOsCZRxLPjQigk.roa (hash: m0A5cImf1wfkQyI07Q9zPZS2LIiSLajm2W221r5jirk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:7b:5f:69:47:c6:ba:83:55:fd:96:18:4b:c9:1f:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6bb4b9e8df6d664efcb77b410415c834a617782
        Validity
            Not Before: Sep 21 15:00:14 2026 GMT
            Not After : Sep 22 15:00:14 2026 GMT
        Subject: CN=031ad2b9ff8ade441bdf1876dd7286c285b06aeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a8:bf:d8:3a:1d:c0:d1:14:51:54:fd:39:96:
                    45:0e:8d:72:8a:69:f1:fc:a6:82:57:5c:22:be:c4:
                    68:7a:61:fe:5d:3c:a2:8a:09:a4:c7:dd:39:33:3a:
                    b7:3b:1f:8f:bb:2b:6b:f6:cf:97:a5:b9:c2:9a:4b:
                    5a:7c:aa:fa:2a:5c:a5:28:30:89:41:7b:93:8a:f3:
                    a5:93:ad:f0:1e:0f:84:e6:bb:99:2b:3c:f2:b2:40:
                    1c:78:5d:0f:81:4d:e5:47:e1:03:9b:e8:bd:d0:a6:
                    9b:c6:b1:26:30:f8:a3:9c:ab:a0:67:a9:e0:9f:2a:
                    68:29:b7:d4:d8:cd:41:76:08:2d:e4:34:e8:92:23:
                    2c:0b:96:dd:59:2f:27:e9:8d:34:17:fc:53:1b:13:
                    e3:e2:3d:4a:22:84:27:ef:f2:03:01:5c:11:e3:87:
                    aa:d4:5a:c7:a4:25:7d:11:81:da:9e:d1:19:d2:6e:
                    6e:97:2f:aa:34:7f:91:95:1d:21:09:47:0c:b7:02:
                    dc:47:28:02:f3:ba:e5:32:06:e8:79:63:2b:de:4c:
                    12:57:b7:5b:f7:b9:92:13:cd:ce:a8:4b:a9:96:be:
                    d3:a5:0f:ba:5c:f5:3a:a3:48:fe:f3:0c:db:d2:8e:
                    b1:7b:42:dd:8f:41:e7:68:c6:77:af:ad:f9:75:0d:
                    ff:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:1A:D2:B9:FF:8A:DE:44:1B:DF:18:76:DD:72:86:C2:85:B0:6A:EB
            X509v3 Authority Key Identifier:
                keyid:E6:BB:4B:9E:8D:F6:D6:64:EF:CB:77:B4:10:41:5C:83:4A:61:77:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:17:99:c3:d4:8c:11:71:c0:ba:2d:da:9b:98:76:10:40:26:
         3d:36:bc:ce:93:0e:9d:d2:56:3b:b9:d8:91:10:93:cf:f4:ec:
         99:4d:e9:71:0c:29:00:ca:b1:59:2f:39:70:e2:e0:ee:f3:35:
         59:2e:9d:1a:a9:a6:2e:1b:fb:5b:a7:c3:a9:e0:e2:85:5f:63:
         f2:73:bf:f1:d4:aa:58:f1:6e:ce:4f:ee:d2:7b:c2:1c:5c:8f:
         7f:48:aa:39:1a:cf:9f:0d:ce:7a:6d:94:18:72:20:83:f3:08:
         4b:ef:3a:ca:92:a9:eb:eb:59:4a:0c:f8:1e:76:90:20:2c:b8:
         a8:57:03:52:6b:1f:29:8e:e9:9d:d9:5b:48:57:e3:59:a3:d9:
         11:8b:8a:cd:af:8b:5a:ae:75:c9:66:e6:12:65:e0:5a:8a:55:
         44:56:fb:9e:a8:fd:13:0c:00:d6:8d:ae:b4:a3:13:bc:ff:17:
         d3:28:c6:74:06:e5:12:19:59:3a:4b:2a:9f:c3:ba:0f:af:38:
         10:05:02:5e:90:94:93:de:c7:57:dc:52:3c:d9:3c:61:e3:8c:
         b6:66:4d:af:83:ba:55:a5:d7:3d:d3:a0:5f:27:01:68:f5:a3:
         e1:87:d6:4c:41:1d:02:71:fb:58:19:29:1f:33:b3:53:84:81:
         a0:49:35:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:59:53 2026 by rpki-client