Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.mft
File:                     5r62dxRfZMr7zXE26B81onSujow.mft (raw, json)
Hash identifier:          BL9M8TH4Hc43rf+uskf/nmAJY6zcSbL7HwVoVGiP37I=
Subject key identifier:   98:BD:7A:30:84:11:14:53:F5:4E:F2:96:9A:A5:EE:50:8F:86:85:BB
Authority key identifier: E6:BE:B6:77:14:5F:64:CA:FB:CD:71:36:E8:1F:35:A2:74:AE:8E:8C
Certificate issuer:       /CN=e6beb677145f64cafbcd7136e81f35a274ae8e8c
Certificate serial:       01A0C7EACD3D40615EF7A51A92E9CC0F5339
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5r62dxRfZMr7zXE26B81onSujow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.mft
Manifest number:          03AB
Signing time:             Tue 22 Sep 2026 07:00:49 +0000
Manifest this update:     Tue 22 Sep 2026 07:00:49 +0000
Manifest next update:     Wed 23 Sep 2026 07:00:49 +0000
Files and hashes:         1: 5r62dxRfZMr7zXE26B81onSujow.crl (hash: 53hPF/TjhqEq+5sE7ENF5F//4QJDg5yZQOS/qLB0cYs=)
                          2: UEVvSHR4RXiw4RWetmh_ZCqzc9E.roa (hash: bFzxJ++JMPEdKwW88mp2Ckxb5L1ulPilrj2DRxpxsNw=)
                          3: tjprewfipgbi2VkjPO3arRc-3cs.asa (hash: 6WFMJ/QA4RHzwHp7zyMKTAL+OYliyrWyqQs9rXBT3nY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5r62dxRfZMr7zXE26B81onSujow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:ea:cd:3d:40:61:5e:f7:a5:1a:92:e9:cc:0f:53:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6beb677145f64cafbcd7136e81f35a274ae8e8c
        Validity
            Not Before: Sep 22 07:00:49 2026 GMT
            Not After : Sep 23 07:00:49 2026 GMT
        Subject: CN=98bd7a3084111453f54ef2969aa5ee508f8685bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3f:2c:38:d8:8f:45:ab:9e:c2:b8:f7:6f:59:
                    ef:c6:d3:04:89:da:e0:5f:49:ed:63:df:44:d2:d1:
                    1c:f9:95:5e:4b:b0:8b:af:e4:49:67:b5:bc:6a:87:
                    d4:c0:a0:2b:8b:0b:0f:b1:bb:f2:8e:23:9a:19:14:
                    cc:ff:ea:f6:76:34:eb:5a:8e:19:4e:58:ca:51:ef:
                    38:ac:1f:d1:94:0d:92:0c:cb:3d:a0:76:bf:3f:d5:
                    f6:8c:62:93:4d:9d:2c:35:3f:42:d7:91:a6:67:1f:
                    cc:3b:97:ae:93:54:14:4f:06:0b:d0:3f:1b:a8:ec:
                    57:57:fb:b6:39:e4:a6:ce:9f:a3:8c:45:22:c0:76:
                    cf:ff:43:7a:f1:05:a8:59:4d:d2:71:3c:cd:ab:ca:
                    30:33:ef:10:d3:72:05:89:4e:e8:b2:7c:5f:21:6f:
                    fb:8f:35:a1:f1:35:4d:c8:58:d5:c5:3b:b3:88:74:
                    65:ea:23:94:9c:a7:a3:13:da:71:b3:c0:d9:85:ab:
                    83:c4:59:ad:10:54:01:dc:57:be:3f:4d:59:f3:b9:
                    48:61:b8:f2:0d:6e:a4:e3:0a:bb:76:ae:72:ac:7b:
                    ad:97:f3:92:d5:8f:8a:bd:8b:52:d1:ea:58:8d:11:
                    aa:2e:64:a2:11:d8:3a:5d:1b:32:50:b4:a1:7c:9a:
                    5d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BD:7A:30:84:11:14:53:F5:4E:F2:96:9A:A5:EE:50:8F:86:85:BB
            X509v3 Authority Key Identifier:
                keyid:E6:BE:B6:77:14:5F:64:CA:FB:CD:71:36:E8:1F:35:A2:74:AE:8E:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5r62dxRfZMr7zXE26B81onSujow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:67:ef:eb:82:95:87:57:35:20:c5:1a:6d:4d:1a:3c:e2:5d:
         49:b2:d8:d9:af:58:42:ff:09:cd:52:18:f1:a1:f5:02:7b:83:
         73:c1:08:4f:d4:12:bd:b9:8e:ed:75:b6:ad:45:ed:7d:8a:30:
         df:20:ce:55:6f:d8:ff:d5:ba:49:29:dc:a3:42:70:ba:70:28:
         c1:d4:a5:b8:59:7a:a2:f5:e3:7e:b6:b3:50:cb:c5:af:fe:67:
         6b:f1:e6:76:68:9e:ae:bd:45:ce:52:3d:89:76:17:02:86:32:
         cd:cd:dc:3d:28:1d:2c:6b:cb:53:44:81:53:4e:59:09:0c:0b:
         4a:58:54:88:07:d2:e1:04:62:0a:d7:f5:cf:d7:e8:6d:e8:70:
         4f:99:6a:19:19:e5:a2:da:45:22:3e:46:4c:f3:5f:65:b8:5f:
         f2:a9:3a:d4:07:87:2e:39:96:40:86:74:54:2c:6c:61:d5:09:
         b8:2c:19:cf:86:c4:88:7d:a3:d8:66:60:ed:b2:51:ab:ab:db:
         8e:7d:de:a8:8d:54:73:7c:48:e3:51:2a:91:32:5c:87:6e:a0:
         b8:59:4b:6c:ba:11:4a:ca:69:3d:fa:54:73:96:8d:1c:84:f6:
         e9:fd:2a:27:7b:8c:6e:11:35:e2:05:b6:7c:c6:e6:81:f4:ed:
         e1:8b:1b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:54:47 2026 by rpki-client