Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.mft
File:                     D5_5nyJzNWVWJpW7Gk8uKxje_7A.mft (raw, json)
Hash identifier:          xeKphbhM8XQGX3vBlH37slkNGjvMcsZg7nwyiOy1qPY=
Subject key identifier:   AB:5E:B0:CB:0A:C3:DB:70:35:73:FD:B9:38:00:FF:E3:2F:37:8D:99
Authority key identifier: 0F:9F:F9:9F:22:73:35:65:56:26:95:BB:1A:4F:2E:2B:18:DE:FF:B0
Certificate issuer:       /CN=0f9ff99f22733565562695bb1a4f2e2b18deffb0
Certificate serial:       01A0BD3070A379A4D68DB3C2E3DEFEDD8BE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D5_5nyJzNWVWJpW7Gk8uKxje_7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.mft
Manifest number:          0297
Signing time:             Sun 20 Sep 2026 05:01:03 +0000
Manifest this update:     Sun 20 Sep 2026 05:01:03 +0000
Manifest next update:     Mon 21 Sep 2026 05:01:03 +0000
Files and hashes:         1: D5_5nyJzNWVWJpW7Gk8uKxje_7A.crl (hash: 4s0bEaeuISUGdHDfeRkfRdtZuHNYkOBN4+nN/vtAq+w=)
                          2: H-D51HjMjjsYfo5DLvOZXJ5NZgQ.asa (hash: gpkxWbtRBEgASTgFzDt/pFMdPMHMMXFwys4WlumWGfo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D5_5nyJzNWVWJpW7Gk8uKxje_7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bd:30:70:a3:79:a4:d6:8d:b3:c2:e3:de:fe:dd:8b:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f9ff99f22733565562695bb1a4f2e2b18deffb0
        Validity
            Not Before: Sep 20 05:01:03 2026 GMT
            Not After : Sep 21 05:01:03 2026 GMT
        Subject: CN=ab5eb0cb0ac3db703573fdb93800ffe32f378d99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:16:aa:fa:b7:b5:df:52:47:80:2c:5d:55:f0:
                    45:d2:59:a5:0e:26:85:3c:b5:10:cd:65:34:df:d5:
                    26:12:78:49:37:ee:82:60:19:59:35:99:d3:80:b1:
                    60:1b:96:d7:70:0a:64:97:75:0f:e8:6d:b2:59:ef:
                    47:50:4a:b0:3e:31:02:2b:7c:53:46:40:3c:78:46:
                    ec:8d:97:b1:8c:b7:98:b3:f8:79:1d:e1:e6:f2:d2:
                    2b:89:47:7a:e1:0f:6c:76:1f:7c:6d:5c:39:17:de:
                    40:6b:98:e5:50:4c:07:4a:89:ba:93:f3:7d:b9:3d:
                    bf:e0:3a:50:89:08:52:b8:2a:e4:28:83:c4:06:fb:
                    e1:85:0c:85:88:d4:62:59:ae:83:62:eb:f6:c6:15:
                    7e:d3:a1:fb:ab:12:74:f5:5e:44:27:4f:40:41:3a:
                    e1:ed:db:d5:dd:43:d3:3e:69:d5:00:c3:43:eb:94:
                    95:bb:5b:47:1d:a3:75:d5:ea:1e:2d:3f:80:cd:24:
                    66:01:3f:75:ab:ac:f7:e8:15:27:cb:a4:24:6a:95:
                    0d:ad:dc:27:cb:74:93:6c:a5:2c:8f:9f:40:83:62:
                    d5:5d:96:6f:89:2e:20:2b:b5:7b:27:f3:bc:8a:f9:
                    aa:3c:db:a9:d3:1c:a0:0a:53:6b:c0:33:c9:4c:2b:
                    f8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:5E:B0:CB:0A:C3:DB:70:35:73:FD:B9:38:00:FF:E3:2F:37:8D:99
            X509v3 Authority Key Identifier:
                keyid:0F:9F:F9:9F:22:73:35:65:56:26:95:BB:1A:4F:2E:2B:18:DE:FF:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5_5nyJzNWVWJpW7Gk8uKxje_7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:48:a6:40:9c:23:03:b4:48:d9:ce:4b:7a:c2:1f:3e:3c:f4:
         4f:b9:fc:2f:25:28:c9:e7:4f:4e:7a:5e:35:b0:9e:bd:48:a4:
         5f:07:6a:f3:5c:08:74:59:41:25:67:5e:5e:5f:f8:67:be:19:
         15:1d:e2:c4:e3:3d:08:e3:64:8b:98:75:f4:ec:61:28:23:dc:
         d1:e7:e7:c2:e4:a0:52:ed:3b:72:69:4a:72:b7:98:74:8e:8f:
         e2:bf:1e:01:cb:01:a2:75:fd:a1:44:3c:0e:eb:98:99:6f:e4:
         f9:4f:9b:36:3e:e9:24:2f:dd:cb:97:24:1b:dc:27:09:81:34:
         2b:27:c9:83:1c:dc:fa:73:4d:4e:ec:fc:6f:71:9e:1a:5f:9c:
         bb:c8:dc:03:55:df:6e:80:65:7e:92:74:ae:c2:00:3e:df:b3:
         c1:30:d0:f2:c5:cc:01:66:8b:0f:35:ae:e2:e9:b6:bc:0b:7a:
         85:f5:96:c0:f6:3a:4d:7c:e7:44:ac:61:6c:85:23:cf:7f:42:
         aa:0e:b0:fa:9e:17:24:66:b4:8e:30:79:54:44:54:96:08:ab:
         c9:eb:92:e8:31:8f:2f:6b:3a:32:4f:63:5c:b2:9e:44:f2:62:
         cc:1d:77:b7:c3:a7:28:80:48:4d:7b:a4:21:d0:27:c7:94:00:
         33:7e:11:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:56:29 2026 by rpki-client