Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.mft
File:                     5EV2NuWtZuHw-7LBDfKQleY-mS8.mft (raw, json)
Hash identifier:          cD/A4XlGpp6x0xP/VaSEuz/UlvD1OugfzonN68+vZ0g=
Subject key identifier:   72:97:C0:A5:E3:C5:F0:27:8F:DD:81:C8:3D:BF:AD:54:39:41:AE:97
Authority key identifier: E4:45:76:36:E5:AD:66:E1:F0:FB:B2:C1:0D:F2:90:95:E6:3E:99:2F
Certificate issuer:       /CN=e4457636e5ad66e1f0fbb2c10df29095e63e992f
Certificate serial:       01A0C6336F61B770C0DCD148AFD59E378B1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5EV2NuWtZuHw-7LBDfKQleY-mS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.mft
Manifest number:          13EC
Signing time:             Mon 21 Sep 2026 23:00:54 +0000
Manifest this update:     Mon 21 Sep 2026 23:00:54 +0000
Manifest next update:     Tue 22 Sep 2026 23:00:54 +0000
Files and hashes:         1: 5EV2NuWtZuHw-7LBDfKQleY-mS8.crl (hash: hJl4UD+4UiDtKCkfG5mBYTOcCYAbuJ8qX1Rko9NSwoo=)
                          2: xu9m0hgW8GLJqqV5sAEGFCWL3iM.roa (hash: jbb1Ol93Bc4F6xDnWgQv6CKjC8B2J+BLxGOlCtqLSLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5EV2NuWtZuHw-7LBDfKQleY-mS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:33:6f:61:b7:70:c0:dc:d1:48:af:d5:9e:37:8b:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4457636e5ad66e1f0fbb2c10df29095e63e992f
        Validity
            Not Before: Sep 21 23:00:54 2026 GMT
            Not After : Sep 22 23:00:54 2026 GMT
        Subject: CN=7297c0a5e3c5f0278fdd81c83dbfad543941ae97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:16:cf:40:20:d0:c9:a8:8c:fe:b5:a1:73:18:
                    82:87:7f:29:34:57:5d:92:0d:cf:d2:fe:85:50:cb:
                    83:7f:fe:8e:bc:0e:5d:37:7b:7c:3a:25:3b:c4:ad:
                    85:27:61:82:d9:51:49:a9:93:fd:62:05:51:cf:61:
                    26:c8:4b:a2:73:b8:ba:71:c6:cc:ee:a5:1a:e4:9e:
                    c9:ae:23:b3:fb:03:4e:ea:5e:1c:bb:74:a9:f7:3d:
                    cc:40:36:82:7a:82:53:3e:c2:ab:86:03:df:12:8d:
                    e2:b7:76:92:f0:4d:d1:e2:05:34:41:54:2c:a0:8d:
                    50:84:57:8c:6f:93:b1:2c:e2:58:ca:0d:27:f4:9d:
                    7b:68:4d:19:03:78:69:23:e9:c2:51:ec:ae:1e:61:
                    15:b8:82:0e:8f:85:62:30:d2:38:3b:ee:50:df:33:
                    96:19:95:92:6a:1d:62:c8:64:e7:1d:90:c1:4d:c9:
                    1b:8b:0f:9f:e9:08:1a:1b:db:99:df:41:fa:c7:45:
                    52:68:32:cd:e9:f5:eb:2a:8b:28:d8:5b:b2:87:43:
                    f9:3a:bd:a9:50:bc:66:6e:ac:9f:1d:db:6f:c7:30:
                    35:c1:8e:97:dc:d8:36:3c:69:42:56:f6:9d:d7:aa:
                    1b:82:b8:21:0b:06:80:9f:73:39:3f:b4:2d:5f:1b:
                    da:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:97:C0:A5:E3:C5:F0:27:8F:DD:81:C8:3D:BF:AD:54:39:41:AE:97
            X509v3 Authority Key Identifier:
                keyid:E4:45:76:36:E5:AD:66:E1:F0:FB:B2:C1:0D:F2:90:95:E6:3E:99:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5EV2NuWtZuHw-7LBDfKQleY-mS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:fd:40:5e:e9:bc:16:5e:92:5e:44:ee:c0:20:a7:36:26:e0:
         93:df:53:ad:0a:d8:7b:82:c4:bb:91:93:0b:bb:fa:52:2f:99:
         bf:f6:e8:33:2e:90:a2:32:de:5b:8c:39:30:61:16:53:56:ae:
         00:bc:46:a0:00:22:f9:8e:81:db:0e:9a:16:41:49:59:a0:6e:
         11:34:9a:cd:02:19:c6:09:7e:c4:85:fa:d2:d3:83:bc:46:50:
         29:c6:81:a4:32:4b:dc:e3:34:31:d9:d3:f9:26:06:66:58:1d:
         f7:38:b0:f9:47:e8:f1:50:d8:e1:fa:02:18:9b:b1:f5:1d:1d:
         ca:f8:98:56:81:9e:42:54:ef:37:ec:3f:3a:d6:83:15:95:22:
         62:c9:48:8d:4c:1b:f9:85:f1:a7:7e:27:8a:3a:e1:5b:fe:31:
         2d:a6:44:0a:67:2f:b9:39:d4:bf:18:43:d2:f4:e8:bb:db:8d:
         90:34:14:77:8b:a7:73:c7:9d:1b:2c:b1:29:6d:e7:d9:ac:c0:
         e6:8b:62:1c:3f:ad:23:72:10:61:ce:87:22:c2:72:aa:19:75:
         0d:6e:09:98:ba:79:59:f1:3e:ac:c9:29:92:7a:35:d0:5f:39:
         9a:7c:07:60:22:e6:fc:37:5d:eb:b4:78:d3:6b:dc:41:4e:a3:
         5e:9d:ba:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:44:54 2026 by rpki-client