Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
File:                     tEJc9VATRKxazDB6vQrwE_rGcHM.mft (raw, json)
Hash identifier:          foRC5s0Ky7vbe9gqqfgR8dN3HWbIQChzOxP+0s3P6Bw=
Subject key identifier:   5C:45:64:7C:CD:A3:AF:51:4C:3B:E3:58:D7:EA:4C:9C:B4:D1:4B:05
Authority key identifier: B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
Certificate issuer:       /CN=b4425cf5501344ac5acc307abd0af013fac67073
Certificate serial:       01A0CD11314419DC4C7B6859E05D0989094C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
Manifest number:          1677
Signing time:             Wed 23 Sep 2026 07:00:51 +0000
Manifest this update:     Wed 23 Sep 2026 07:00:51 +0000
Manifest next update:     Thu 24 Sep 2026 07:00:51 +0000
Files and hashes:         1: 1-QtHxqhDRc8Ad39doS8rj57e8O8.roa (hash: lx29AojPlQO1dFNnHX1vGuPHztiqJFCtnNtbhP7mv1A=)
                          2: 5X2xdQzfElgF3zafO63cD95jMFc.roa (hash: t+WketR4iod+dxOduLUjbSJaUEp6hc0nti9zqFInWO4=)
                          3: tEJc9VATRKxazDB6vQrwE_rGcHM.crl (hash: lUSj8VFtyDK/LTrTf1ldDjRynU8Ve1uu824Ta7bJqHA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:11:31:44:19:dc:4c:7b:68:59:e0:5d:09:89:09:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4425cf5501344ac5acc307abd0af013fac67073
        Validity
            Not Before: Sep 23 07:00:51 2026 GMT
            Not After : Sep 24 07:00:51 2026 GMT
        Subject: CN=5c45647ccda3af514c3be358d7ea4c9cb4d14b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:25:a7:ca:4a:40:06:99:80:98:8b:ae:12:38:
                    6a:bb:51:b7:fc:c9:2e:2b:ee:e6:2b:e1:9f:de:eb:
                    e8:0c:8f:ec:b3:df:83:dd:da:55:19:ae:8e:63:0a:
                    ba:b9:0b:d9:7f:ae:a5:c4:e1:88:05:be:3c:6d:10:
                    d0:8c:5e:2e:00:ef:b2:4b:c4:3d:8c:d5:58:8d:da:
                    7d:1b:4d:45:e3:54:d0:90:a5:2d:03:6a:6f:90:f9:
                    9f:ea:be:41:15:30:e6:29:57:8c:5f:2c:37:9a:d3:
                    37:ae:2b:c7:6b:cb:53:2b:05:2d:4a:6c:f2:81:b2:
                    08:4f:5b:5d:9c:b6:62:e9:51:2b:24:6f:c5:0c:d1:
                    27:30:9d:46:b5:36:de:7d:51:02:a8:b1:88:e3:38:
                    d5:3e:17:b6:6a:4b:26:0f:5c:60:8a:c6:19:74:73:
                    a2:fa:74:72:47:5d:92:b6:ee:0e:05:23:9d:71:ea:
                    69:5e:c4:ac:d0:a7:f6:2e:e2:9d:59:4a:4e:e8:ef:
                    0d:1d:b3:f5:b8:b7:6a:61:40:d0:37:11:66:78:9d:
                    34:70:10:1f:78:f7:6b:8f:c8:59:ac:97:b7:d3:86:
                    ae:cb:b8:9c:ac:7f:f4:61:40:b2:da:0f:71:8c:b0:
                    53:2f:8d:6d:55:51:6e:62:69:00:06:4a:fc:eb:78:
                    ed:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:45:64:7C:CD:A3:AF:51:4C:3B:E3:58:D7:EA:4C:9C:B4:D1:4B:05
            X509v3 Authority Key Identifier:
                keyid:B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:5d:2d:9e:15:ea:40:ed:ad:50:0d:e7:bc:e0:9e:9d:89:e7:
         8c:07:1b:2f:53:6c:eb:2a:78:2f:0a:48:7f:0b:12:8c:b9:64:
         b4:ee:0c:79:2f:f7:07:3a:e9:07:b0:36:b6:91:2f:ab:ba:0e:
         dd:43:fd:90:a9:09:e0:f5:49:50:dc:dd:bc:d5:16:41:e9:76:
         bc:c8:56:f0:26:65:c2:80:1d:01:2f:6e:37:52:08:4e:c8:a1:
         ef:02:6a:b0:07:f6:7a:ac:be:1a:71:fd:2f:cb:1b:27:05:7c:
         ac:df:a4:9c:e7:ce:db:05:34:bb:e4:16:98:ed:4a:52:5c:e0:
         bb:7b:62:25:b6:1f:49:69:82:77:90:ec:0d:73:d6:15:24:ee:
         21:b3:39:68:ef:6e:6b:0f:1d:4c:fc:4a:98:dc:38:55:ef:5f:
         ff:22:ec:cc:9f:9d:7a:61:bb:7a:f3:e1:85:f1:85:55:8a:8f:
         3a:80:77:82:dc:82:be:0f:6b:89:46:98:7f:38:71:de:0a:c7:
         ef:de:b8:34:d7:61:09:77:e8:18:34:80:d3:da:8e:58:0c:cc:
         b5:ff:24:88:80:e2:46:fe:e7:e0:b8:1c:a9:f8:25:01:29:19:
         60:12:69:fc:d0:a3:76:b2:af:c9:cb:de:33:e9:98:3b:fa:b0:
         76:fe:6e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:11:15 2026 by rpki-client