Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
File:                     5UTiZtTrnMfe0pLBKwaxynvOp3g.mft (raw, json)
Hash identifier:          ATiBt2pXq2k7KaL0iPwFD6axLQJ4KW+Alm8rW/ZQpNU=
Subject key identifier:   7C:DB:7B:3B:0C:26:AA:39:29:71:06:D1:D5:74:36:BB:EB:9C:D5:7F
Authority key identifier: E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78
Certificate issuer:       /CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
Certificate serial:       01A0C6334B135CBC8B4B164AF21756539BB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
Manifest number:          1A69
Signing time:             Mon 21 Sep 2026 23:00:45 +0000
Manifest this update:     Mon 21 Sep 2026 23:00:45 +0000
Manifest next update:     Tue 22 Sep 2026 23:00:45 +0000
Files and hashes:         1: 5UTiZtTrnMfe0pLBKwaxynvOp3g.crl (hash: JL7S2pLZGnATA7j5Cfyx7oSGk+96g/KL7E63l8PMV1Y=)
                          2: q6jiQ8kIIOAVEl2Xp2qX5_pMoSI.roa (hash: nTyqp5QiWNzkKcVcQsp2jGxyBaOXuQpq1p5YA426WVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:33:4b:13:5c:bc:8b:4b:16:4a:f2:17:56:53:9b:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
        Validity
            Not Before: Sep 21 23:00:45 2026 GMT
            Not After : Sep 22 23:00:45 2026 GMT
        Subject: CN=7cdb7b3b0c26aa39297106d1d57436bbeb9cd57f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e8:93:1f:e0:b9:17:18:ac:21:de:0c:34:1a:
                    10:1b:de:53:fd:81:5c:ed:b2:00:40:50:71:2b:6a:
                    e6:7c:be:8b:4a:ae:36:94:db:84:3f:8a:e7:51:8f:
                    57:9a:00:73:13:78:ee:73:2f:60:c0:31:88:d5:9f:
                    2d:ed:ea:22:10:d7:72:b7:75:78:42:b3:ab:d2:38:
                    df:ac:11:03:3f:bf:6a:8c:5a:36:7b:d2:d4:ee:1e:
                    64:39:27:5f:aa:d9:48:b4:b6:94:4f:25:2d:46:52:
                    cc:7e:fb:48:9d:41:6a:68:68:9a:eb:3a:61:c3:ca:
                    07:bb:4a:82:d0:0c:a9:1f:fc:9b:ab:30:5a:4e:7e:
                    93:e7:69:62:b6:af:9c:2c:68:e8:62:cc:25:cc:c7:
                    30:6a:9d:5c:f9:03:29:49:39:26:1c:07:a3:88:3d:
                    73:53:72:ce:34:5e:82:a9:b3:6d:38:cc:04:7e:0b:
                    20:a6:c2:3a:87:46:ee:3a:01:95:81:78:12:de:57:
                    ae:71:77:3e:50:fd:e1:50:82:7f:65:96:ec:4b:91:
                    25:f4:e8:e7:dd:fc:b2:d3:e2:8a:01:79:f5:f8:51:
                    54:41:f7:b9:54:00:02:cd:6d:7e:3d:3e:9c:91:f9:
                    55:71:ec:0e:65:6a:ae:ac:7d:e0:96:40:c7:45:44:
                    ea:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DB:7B:3B:0C:26:AA:39:29:71:06:D1:D5:74:36:BB:EB:9C:D5:7F
            X509v3 Authority Key Identifier:
                keyid:E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:c9:8f:05:fb:83:e7:9c:da:48:88:3d:24:4e:07:54:fe:d3:
         e3:17:45:7a:76:53:38:73:8d:d6:23:22:16:a3:03:26:3b:7d:
         34:ee:45:56:05:7c:78:3f:ee:64:83:2d:f6:01:e8:3d:b3:19:
         c1:27:cc:45:1f:f2:a1:88:bb:82:d3:6b:a2:f5:e5:7b:28:93:
         75:45:b6:c2:d2:c5:83:50:f3:f8:e0:e1:fe:8a:88:10:53:3e:
         1f:63:f1:c1:2a:4e:cd:a9:9c:cb:4d:fb:8d:d3:65:cd:0d:9f:
         ff:f1:62:34:2d:b7:60:75:fe:be:17:d4:eb:2d:d7:fe:f5:36:
         4d:2a:65:c0:7e:70:72:4c:19:93:50:71:b1:1a:61:ff:df:b9:
         0e:c5:4f:c6:57:81:21:b6:d3:2b:a3:a5:78:96:81:1c:d1:65:
         d8:6f:f3:ba:0d:85:bb:7e:8a:cc:f8:84:f6:fb:be:01:9d:15:
         3b:98:30:e7:f2:59:dc:66:c8:86:69:51:00:c8:fe:65:db:a3:
         ed:8f:7b:19:6d:03:fb:21:47:51:71:b1:f3:6a:8d:1f:52:a0:
         4c:60:fd:fc:11:19:01:99:d2:53:d8:cd:18:b4:8f:20:90:4a:
         ca:31:80:b6:bf:9b:31:a8:c1:bf:cb:24:8b:23:33:f1:86:51:
         19:0a:5c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:46:24 2026 by rpki-client