Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
File:                     5eAzVGZsTLKr_VFBHspdUksNW-U.mft (raw, json)
Hash identifier:          VBt0P4WssokSwQ9ve9M/Iq4M5Eo/Itpzp1G0+K1ONKE=
Subject key identifier:   E7:CD:68:76:92:C6:41:E6:62:C0:CB:65:E9:0E:76:B5:65:EA:73:93
Authority key identifier: E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
Certificate issuer:       /CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Certificate serial:       01A0C4E9CB445F176E5D88B0B5B90E9434C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
Manifest number:          021F
Signing time:             Mon 21 Sep 2026 17:00:51 +0000
Manifest this update:     Mon 21 Sep 2026 17:00:51 +0000
Manifest next update:     Tue 22 Sep 2026 17:00:51 +0000
Files and hashes:         1: 5eAzVGZsTLKr_VFBHspdUksNW-U.crl (hash: CEWRBcK7XsyePNNYTOubLRjt9GPDNz7XnrIKbxk5D10=)
                          2: T8WzAwgcqS-HDNz8qD_PiJ9i1Lg.roa (hash: IxwvcdTTbT0u6zZgntcEj3dQZBt2OszUAAD+QbaTz/M=)
                          3: brjSKEHmfS6lAMZx6RJuTagMq3c.roa (hash: N5y4NLLWfawQoJGvUgnTmwBCz+OJoUCNvs+6Sj/iEA8=)
                          4: fJYDn_pM1CSQCC01Q2M0CeYkZCg.roa (hash: 3pjRJpzPeP7KArmEEYHuE7xp3oBZ3Ocxe8kqq5qbxYw=)
                          5: hzLBg2vn0pE5jX4DAd-LZ-rg8ds.roa (hash: nkYwxfNlitpDmcR0QyJN8VtRdB1BcW9INahVEm4qvzo=)
                          6: lbM3HE18tP1n-8xfwSm36I3Kjwc.roa (hash: /lryypZYZIxOV9l6lRHbqYF9Oz+FGrmF3FgDwOxoEYQ=)
                          7: o548aWjyv_hfBdpA1bVFK3wrNP4.roa (hash: zUyBvFaEHdugGyGKIt6bIfLj0Nkxf9FI6lzJjaoR1s4=)
                          8: tNc8lG4ab6VMRM9eqy1DmQopJKk.roa (hash: /q+q6GJme4wDgpdO0tKuEImt+ywsENNfM3j/DZS/xgE=)
                          9: xqkIGkwCiGI9_ROxA-753BCeMSo.roa (hash: 6Wbd2frdsClpbkut2snIQAUUZt2yqFLdakRBdxOpvPI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:e9:cb:44:5f:17:6e:5d:88:b0:b5:b9:0e:94:34:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
        Validity
            Not Before: Sep 21 17:00:51 2026 GMT
            Not After : Sep 22 17:00:51 2026 GMT
        Subject: CN=e7cd687692c641e662c0cb65e90e76b565ea7393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f4:4e:83:74:60:22:f3:ff:ea:02:85:a2:e7:
                    4b:62:db:fb:38:1c:a3:c9:b7:3d:f8:69:5a:0f:7d:
                    e0:7e:d8:b4:0f:a4:1e:96:7c:19:8b:7b:26:af:a3:
                    bd:75:a7:de:c2:3a:71:eb:7c:02:c9:8b:bc:2d:04:
                    31:4d:a9:08:cf:6e:ef:13:ce:e5:9a:85:65:87:fa:
                    bd:a9:34:56:b5:7c:5b:c2:88:b6:3d:93:3b:3b:06:
                    2f:04:50:c0:82:c2:b5:ac:03:6f:e7:83:e2:ec:b1:
                    6c:51:63:34:bd:23:d0:14:9e:db:77:4b:44:0f:f5:
                    f8:52:70:37:2d:d2:5a:f9:20:b7:7d:fc:bb:f8:0f:
                    6e:a7:bd:87:b3:a1:65:87:40:8e:02:a9:01:e9:09:
                    d3:e1:34:79:05:ba:0c:14:d5:7f:91:07:cc:5e:2c:
                    2f:c0:4d:3d:9a:5a:69:da:ac:22:74:fb:94:96:87:
                    25:78:7d:50:04:f8:c3:de:c8:35:ac:a5:72:99:d1:
                    12:db:0b:1a:32:de:ea:a9:d1:a8:1f:2e:25:21:a6:
                    25:54:01:86:7f:c5:77:76:9c:dc:76:f4:52:d4:a8:
                    b8:b9:7e:23:ce:b9:17:b9:be:4b:fa:88:02:4c:ea:
                    e3:6c:9c:fe:a5:f2:9a:4a:d0:5d:30:01:61:34:16:
                    84:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CD:68:76:92:C6:41:E6:62:C0:CB:65:E9:0E:76:B5:65:EA:73:93
            X509v3 Authority Key Identifier:
                keyid:E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:5a:70:63:d3:46:32:c9:c4:e0:8a:00:7b:88:ca:01:2f:ee:
         45:ba:6d:8f:31:e0:8b:63:8e:b7:f6:47:b7:34:39:53:9c:e4:
         58:8b:75:91:ec:84:bd:16:2c:bc:5c:bc:3f:05:82:3d:b0:8f:
         78:8f:24:2d:82:45:db:65:dc:af:07:81:b3:df:b6:a1:3b:6b:
         94:b1:5f:1e:e0:ec:7c:9b:f3:06:a7:22:8e:a2:5a:49:09:34:
         74:10:14:05:f4:d9:aa:1c:5b:a1:8e:4e:a8:30:06:bc:10:d4:
         ad:55:67:d0:db:44:b9:07:61:32:ec:fb:21:61:10:f8:db:d8:
         52:bd:7b:ea:15:4d:b4:d8:20:ec:75:8e:dd:3a:08:aa:c2:dc:
         3d:da:21:68:06:d4:0c:37:e9:74:b1:cd:3b:5e:ef:7c:b9:fc:
         c5:89:77:34:2f:29:53:ee:bb:55:a7:23:8e:cd:81:96:5a:8f:
         45:91:94:ee:6b:49:b9:ac:c3:68:ee:ea:8d:99:49:8d:d8:5f:
         d7:79:75:84:c8:e2:e7:97:8d:62:8e:73:a7:3b:55:9b:ef:61:
         64:6c:80:63:27:aa:2c:78:67:d5:0f:4d:25:9d:ff:d7:1e:87:
         50:2c:5c:98:b6:d6:ec:e1:bf:0c:59:bf:f9:55:6b:63:3f:51:
         ce:9b:30:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:55:23 2026 by rpki-client