Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/5bWNjuIxueK-BC3fcm4jugopQMQ.mft
File:                     5bWNjuIxueK-BC3fcm4jugopQMQ.mft (raw, json)
Hash identifier:          ST13YBHN5GUBmG4Urf7qVrEKySO50UBpwn4DGqoKJ2s=
Subject key identifier:   F2:2C:28:83:39:C1:71:EE:D2:0A:7D:7D:3E:26:51:E9:E7:2A:C6:0C
Authority key identifier: E5:B5:8D:8E:E2:31:B9:E2:BE:04:2D:DF:72:6E:23:BA:0A:29:40:C4
Certificate issuer:       /CN=e5b58d8ee231b9e2be042ddf726e23ba0a2940c4
Certificate serial:       01A0D20095E450ADF56A1F6C8FF095477153
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5bWNjuIxueK-BC3fcm4jugopQMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/5bWNjuIxueK-BC3fcm4jugopQMQ.mft
Manifest number:          E6
Signing time:             Thu 24 Sep 2026 06:00:48 +0000
Manifest this update:     Thu 24 Sep 2026 06:00:48 +0000
Manifest next update:     Fri 25 Sep 2026 06:00:48 +0000
Files and hashes:         1: 5bWNjuIxueK-BC3fcm4jugopQMQ.crl (hash: tHW2zZ8NQeRbAod/OSzPS1CrG3APZBXE+EqrorJ1cww=)
                          2: gVT7WHWOpKoeuWf1YpGh6GktCwk.roa (hash: skIYaxJD3wVcOeWH+NsicqBKZ2I8NxbZ8WrxWRzxFmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/5bWNjuIxueK-BC3fcm4jugopQMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/5bWNjuIxueK-BC3fcm4jugopQMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5bWNjuIxueK-BC3fcm4jugopQMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:00:95:e4:50:ad:f5:6a:1f:6c:8f:f0:95:47:71:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5b58d8ee231b9e2be042ddf726e23ba0a2940c4
        Validity
            Not Before: Sep 24 06:00:48 2026 GMT
            Not After : Sep 25 06:00:48 2026 GMT
        Subject: CN=f22c288339c171eed20a7d7d3e2651e9e72ac60c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:48:ca:8f:d9:ce:27:1f:7c:89:bb:fd:3f:14:
                    7c:d9:6a:89:96:51:b3:b1:31:1b:8b:5c:6a:0e:6c:
                    e8:ad:a4:bf:52:19:71:8c:18:5a:31:78:dc:70:88:
                    a9:6a:7e:67:c0:11:f2:8f:65:5d:e2:4b:f7:40:49:
                    3c:63:f3:6c:60:04:8d:2d:9a:1c:10:f2:e5:36:94:
                    4c:e6:c9:8d:32:1e:f1:f2:47:12:87:08:76:6a:5b:
                    3c:2b:ee:a3:81:d5:01:1d:27:4e:13:1d:13:da:64:
                    c6:bb:40:e4:92:24:32:52:58:b9:2f:ad:e2:68:8c:
                    d2:5c:9d:07:6f:39:b0:20:7b:31:ac:5c:a9:de:e7:
                    c3:b6:85:d1:b6:91:01:1b:d5:26:0b:e8:ac:d1:77:
                    ee:06:87:91:ca:05:4f:9d:67:e0:3b:01:ad:3e:4a:
                    d9:1e:0c:96:02:f7:00:20:3f:f7:b8:68:79:08:e8:
                    b0:74:86:68:58:8d:ef:6f:86:a8:c5:6c:d9:8b:a5:
                    54:9f:ee:55:c2:be:b5:48:ff:6f:63:a3:79:8e:6d:
                    f6:13:b6:58:00:91:f5:f5:37:a1:4f:e3:f8:0a:fd:
                    a4:db:18:65:7d:fc:5a:76:af:60:a8:a3:ad:a6:a0:
                    29:01:52:68:c9:42:e2:01:46:12:67:4e:1c:b0:4a:
                    2c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2C:28:83:39:C1:71:EE:D2:0A:7D:7D:3E:26:51:E9:E7:2A:C6:0C
            X509v3 Authority Key Identifier:
                keyid:E5:B5:8D:8E:E2:31:B9:E2:BE:04:2D:DF:72:6E:23:BA:0A:29:40:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5bWNjuIxueK-BC3fcm4jugopQMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/5bWNjuIxueK-BC3fcm4jugopQMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/5bWNjuIxueK-BC3fcm4jugopQMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:9d:e5:09:ef:d5:09:cf:32:21:6e:89:50:33:6c:e9:fc:30:
         5d:59:90:69:54:2f:e0:ef:84:18:32:40:6a:3d:63:3a:78:82:
         1f:6a:f4:40:91:35:fb:6f:8b:1a:38:d4:e5:5c:43:6d:e8:3c:
         ca:5f:b3:eb:73:4a:08:e1:bd:b7:9a:e0:41:b4:7b:4f:80:d6:
         bc:a2:98:01:c9:70:f3:c1:a2:9e:d3:ed:68:a7:4d:0a:ec:70:
         f6:3f:db:36:6b:5f:05:74:3a:d7:cd:22:f5:e1:97:24:9b:eb:
         97:88:50:5d:77:51:85:06:48:31:cf:50:23:61:56:50:76:c5:
         7b:8c:0f:60:34:78:5a:8f:c7:61:04:87:63:33:9a:9a:49:f3:
         5e:31:49:d4:b2:cc:09:49:3b:1a:b3:11:f3:a6:77:49:1b:74:
         80:76:a0:78:dc:14:4c:2b:52:dc:6f:e5:3e:e2:7c:2a:8c:28:
         cc:5d:1d:9a:1a:3d:9e:7c:74:63:3d:ef:38:61:cf:29:77:72:
         e2:84:26:7c:b2:fc:bb:8b:cc:27:9e:e6:e6:f0:6d:81:20:20:
         21:4e:d5:ee:32:08:9c:45:63:d9:05:71:7f:6e:a7:69:0b:a3:
         8c:02:26:65:75:af:61:2e:62:4b:56:8c:42:b1:95:72:a3:76:
         ae:f3:1b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:44:25 2026 by rpki-client