Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
File:                     E5YC73YK3ApbekhYPPv5tg_LcTA.mft (raw, json)
Hash identifier:          P4sVZPTph6Rp/vUdkWRh8UopBPIKMbMjNkJREzA8THs=
Subject key identifier:   74:43:0E:32:4A:4B:A5:E9:E9:B8:D3:C5:D1:EB:A9:DF:80:32:59:9F
Authority key identifier: 13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30
Certificate issuer:       /CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
Certificate serial:       01A0DD29782BE5BAFDD4E73CF1CB91D6C9A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
Manifest number:          12E6
Signing time:             Sat 26 Sep 2026 10:01:17 +0000
Manifest this update:     Sat 26 Sep 2026 10:01:17 +0000
Manifest next update:     Sun 27 Sep 2026 10:01:17 +0000
Files and hashes:         1: E5YC73YK3ApbekhYPPv5tg_LcTA.crl (hash: PHspAuNX3bh33IMG7U2tqOpbmuxciHUaQC17opGb4Gg=)
                          2: eIvGRKEJzXb2weR4zx6UQcOzf-I.roa (hash: fXtGDiQR6bCST/6YzQ1DTyETQIkxGKJAAeEFWx1ditk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dd:29:78:2b:e5:ba:fd:d4:e7:3c:f1:cb:91:d6:c9:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
        Validity
            Not Before: Sep 26 10:01:17 2026 GMT
            Not After : Sep 27 10:01:17 2026 GMT
        Subject: CN=74430e324a4ba5e9e9b8d3c5d1eba9df8032599f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:87:f2:d8:80:f0:bd:32:bf:31:e3:f8:89:f0:
                    91:e7:71:2b:36:15:f1:af:35:20:a7:7e:2f:18:e1:
                    98:77:78:fe:7f:3d:2d:85:de:ed:75:7b:df:b9:ec:
                    53:1c:60:d4:13:5c:4c:f7:5b:5f:de:d3:97:55:88:
                    08:94:d0:95:fb:3c:8b:8c:77:e9:67:94:9c:f3:f3:
                    15:d3:39:bd:f1:2c:38:c9:95:91:94:e9:1d:85:0c:
                    ac:80:97:42:2f:85:f4:d4:da:3e:e9:4c:fe:ca:36:
                    d6:c6:d1:43:e2:e6:79:27:fc:1c:77:84:3f:1e:36:
                    d1:70:d5:35:50:f4:a7:f6:37:86:0b:0f:1d:b2:44:
                    0a:19:72:3c:54:30:41:42:fe:e9:5f:ac:56:2d:aa:
                    2d:df:25:6e:2e:a9:6e:96:81:86:71:5f:54:74:3d:
                    0b:61:43:f5:41:d0:21:b9:93:45:78:3b:df:5b:89:
                    85:5c:07:d4:e2:0c:54:ed:83:3b:41:d9:09:c7:ed:
                    e0:8d:df:45:eb:d7:16:8f:96:a3:88:45:37:a0:d6:
                    fe:e6:2e:c1:49:9a:25:d3:70:21:5e:47:5e:06:3c:
                    23:58:0e:d1:53:f6:79:ab:ac:65:16:d8:03:ed:0d:
                    b0:e8:31:4c:01:8f:ea:df:75:cb:fd:57:b0:61:63:
                    93:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:43:0E:32:4A:4B:A5:E9:E9:B8:D3:C5:D1:EB:A9:DF:80:32:59:9F
            X509v3 Authority Key Identifier:
                keyid:13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:23:8e:92:55:dc:22:de:d9:e2:cd:69:8b:7f:68:02:e1:55:
         00:b3:56:33:32:c2:6d:de:70:6c:e7:19:54:52:10:09:e4:be:
         1b:38:58:57:28:09:69:10:24:ac:dc:ce:3d:b7:7c:3e:c8:e0:
         a6:13:be:b6:ee:7d:82:3b:f9:1c:e7:7c:2e:a5:80:78:53:ba:
         46:4e:c2:db:f0:eb:4f:73:c6:24:7a:86:67:c8:83:c8:87:2f:
         02:29:cf:0b:fc:1c:f9:14:ab:53:1c:aa:86:c2:a5:c8:22:1e:
         8b:24:a5:ea:87:de:10:91:0b:ec:33:89:ca:d3:49:4b:43:11:
         4f:0b:e1:8b:8f:b4:e5:12:a3:1b:d9:52:20:48:0e:0e:0b:db:
         5b:78:32:2a:78:79:a4:e3:ca:11:1d:fa:f2:21:6e:13:17:fc:
         a0:df:9c:5f:12:d6:1e:8c:71:ac:40:3f:c6:26:9b:de:55:6f:
         76:45:97:d8:9d:d2:f5:11:62:99:52:93:ff:71:02:c7:62:ab:
         94:da:fc:44:7e:df:79:d0:9a:c5:2c:ce:c9:d5:c4:5f:3d:be:
         78:0f:d8:d9:d5:62:10:06:37:dc:2f:fb:54:61:5e:9a:1b:fd:
         eb:57:8d:0a:41:bc:4b:46:2b:af:ac:90:d9:c5:72:cf:25:32:
         2e:68:8b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:13:52 2026 by rpki-client