Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/5D_0Mpxm5bDVELjy6viwfn1ce0A.mft
File:                     5D_0Mpxm5bDVELjy6viwfn1ce0A.mft (raw, json)
Hash identifier:          3fu4zK6r71AOnLgCZpbSkZuMjTV5Ploe6I6JccCipIU=
Subject key identifier:   D4:FD:C2:DD:73:E6:AD:C9:B7:60:E9:42:B4:00:CC:D7:F9:E2:71:F0
Authority key identifier: E4:3F:F4:32:9C:66:E5:B0:D5:10:B8:F2:EA:F8:B0:7E:7D:5C:7B:40
Certificate issuer:       /CN=e43ff4329c66e5b0d510b8f2eaf8b07e7d5c7b40
Certificate serial:       01A0CA47D5FF0976BFAF932BEBB4D71D430D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5D_0Mpxm5bDVELjy6viwfn1ce0A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/5D_0Mpxm5bDVELjy6viwfn1ce0A.mft
Manifest number:          E2
Signing time:             Tue 22 Sep 2026 18:01:40 +0000
Manifest this update:     Tue 22 Sep 2026 18:01:40 +0000
Manifest next update:     Wed 23 Sep 2026 18:01:40 +0000
Files and hashes:         1: 5D_0Mpxm5bDVELjy6viwfn1ce0A.crl (hash: jlIh1KXl32tbvkBKhWSnFtMe4bOFtr0qgPocrpjPfQk=)
                          2: vMzqrHDtZQseD1IfDrA-iShDNwk.roa (hash: cIZbKSavouxTcPZPOTmND0k51VrW5LYVlRN+D9j5W+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/5D_0Mpxm5bDVELjy6viwfn1ce0A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/5D_0Mpxm5bDVELjy6viwfn1ce0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5D_0Mpxm5bDVELjy6viwfn1ce0A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 18:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:47:d5:ff:09:76:bf:af:93:2b:eb:b4:d7:1d:43:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e43ff4329c66e5b0d510b8f2eaf8b07e7d5c7b40
        Validity
            Not Before: Sep 22 18:01:40 2026 GMT
            Not After : Sep 23 18:01:40 2026 GMT
        Subject: CN=d4fdc2dd73e6adc9b760e942b400ccd7f9e271f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3e:78:f9:cb:08:fd:9f:9a:66:ea:39:f3:17:
                    f0:5e:4c:4c:d1:ff:53:57:59:ee:e6:5c:a9:26:5a:
                    93:4f:a7:ca:4c:b5:59:cc:93:3f:66:9e:f4:af:56:
                    cf:8b:e6:39:2e:1e:63:42:59:3e:d5:27:bb:a0:50:
                    a8:0b:e4:c1:2e:5f:40:34:29:73:b2:75:73:27:c8:
                    9c:09:6f:8b:53:5f:af:f8:fb:cd:79:39:ad:94:2a:
                    5e:f0:e0:b1:c1:e3:8b:23:4c:0d:37:67:b8:db:9f:
                    a2:f0:92:9b:5a:c5:49:23:2c:7a:aa:8f:0a:58:69:
                    38:d1:a0:1a:b5:99:f9:4b:7c:1b:ea:f2:00:b8:51:
                    77:b3:33:7d:5b:a8:73:54:71:69:3f:05:12:ac:6a:
                    da:39:df:69:e8:e6:d4:c0:cd:25:9a:7f:aa:a2:5e:
                    ef:fe:c9:16:6d:48:56:8e:da:e0:83:dd:62:a2:32:
                    37:84:be:ca:b8:ac:12:7f:07:15:db:3f:03:e2:6a:
                    b5:af:7a:8d:90:f9:d0:ea:a8:4f:98:5a:b0:4b:10:
                    e9:28:4f:22:6a:d3:77:df:4c:84:cd:c5:99:1c:17:
                    b1:d4:1c:1f:4b:e8:82:67:83:53:eb:3f:59:c7:b6:
                    f9:2d:8b:3b:ae:ce:8f:4b:f0:76:b1:d2:b7:52:6e:
                    46:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:FD:C2:DD:73:E6:AD:C9:B7:60:E9:42:B4:00:CC:D7:F9:E2:71:F0
            X509v3 Authority Key Identifier:
                keyid:E4:3F:F4:32:9C:66:E5:B0:D5:10:B8:F2:EA:F8:B0:7E:7D:5C:7B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D_0Mpxm5bDVELjy6viwfn1ce0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/5D_0Mpxm5bDVELjy6viwfn1ce0A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/5D_0Mpxm5bDVELjy6viwfn1ce0A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:17:86:cf:8f:93:0d:30:08:af:34:37:96:98:a1:b6:0f:6d:
         7c:0a:47:ce:0e:34:15:bf:0b:f1:f0:43:69:87:cd:6d:c4:31:
         d8:ec:f1:31:fb:a8:14:e9:a2:4c:38:36:88:c4:a8:5a:8b:a7:
         f0:60:6a:58:94:6c:6e:a5:c6:d4:c8:53:2f:fc:43:ed:3f:9e:
         d1:de:a9:09:61:a7:83:3b:f2:d1:9a:78:b8:b4:9f:56:52:7b:
         b7:ec:36:f9:72:d7:bf:1a:3b:27:78:69:55:f0:9a:34:80:97:
         d2:6a:69:31:fe:6c:b0:09:88:3e:d0:46:d7:a6:b9:0b:9d:9c:
         24:b7:01:3a:5a:d9:e3:cf:58:4a:03:7a:de:c2:44:91:bf:d5:
         00:22:0b:2e:a4:59:e6:ab:48:ed:fb:ed:e2:7b:02:6b:13:73:
         88:aa:e6:a7:c6:6d:37:3c:4a:0a:13:78:b5:41:3f:91:fb:6d:
         62:19:0b:e7:63:67:c1:4e:20:f3:55:ca:69:b3:ed:a7:11:c9:
         a9:79:fc:a0:93:dd:b0:82:17:a0:f8:c8:eb:78:f0:ae:d2:54:
         1b:f3:69:35:8b:be:ee:5d:a4:22:64:23:d2:3e:7d:23:06:79:
         89:d1:3a:33:30:72:ba:c9:c1:08:87:3b:81:80:71:d9:12:b2:
         34:08:fb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:11:17 2026 by rpki-client