Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
File:                     00_-5-di-aBv4vR-eh5S2eun-v0.mft (raw, json)
Hash identifier:          mcJ2OVz+fyh2Y0d+r4K3BZek82/wKCgZxXvEdjQZ53U=
Subject key identifier:   68:4C:BC:BA:51:EE:BB:8D:A1:F1:9D:A4:34:A4:74:E0:0F:95:80:17
Authority key identifier: D3:4F:FE:E7:E7:62:F9:A0:6F:E2:F4:7E:7A:1E:52:D9:EB:A7:FA:FD
Certificate issuer:       /CN=d34ffee7e762f9a06fe2f47e7a1e52d9eba7fafd
Certificate serial:       01A0D4CB2B50072891D340BD12A45E0C547F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
Manifest number:          14BB
Signing time:             Thu 24 Sep 2026 19:01:19 +0000
Manifest this update:     Thu 24 Sep 2026 19:01:19 +0000
Manifest next update:     Fri 25 Sep 2026 19:01:19 +0000
Files and hashes:         1: 00_-5-di-aBv4vR-eh5S2eun-v0.crl (hash: v6dzV5NwnUECg7fM5oQRhGF17L59wR/uV88MoMuXf+s=)
                          2: NaC2EXhqguVissfFb8R9GK-pfWk.roa (hash: /tVqb/8j9ibKJcyJbXGCxzBW5/AN/dkNicwbisF6Ij8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:cb:2b:50:07:28:91:d3:40:bd:12:a4:5e:0c:54:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d34ffee7e762f9a06fe2f47e7a1e52d9eba7fafd
        Validity
            Not Before: Sep 24 19:01:19 2026 GMT
            Not After : Sep 25 19:01:19 2026 GMT
        Subject: CN=684cbcba51eebb8da1f19da434a474e00f958017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2b:86:28:51:48:cb:0b:35:f5:f2:af:7a:13:
                    f9:5f:c9:78:b9:06:99:aa:0c:82:07:c7:50:dc:8a:
                    6e:9e:79:84:13:4e:2e:c2:e3:d9:61:32:0c:e5:a6:
                    e0:9a:9e:fc:19:e2:43:a6:52:f9:1c:a2:5c:d4:76:
                    93:8d:e8:6f:7a:82:2d:a2:92:73:0c:54:e8:7e:65:
                    59:1f:8c:e2:73:72:7a:0a:f5:ba:f8:23:7a:9e:a2:
                    41:33:e3:71:85:d6:a6:5b:2c:90:53:f4:4d:d8:49:
                    01:c9:87:58:e4:01:55:9e:b5:9e:96:b8:c8:7a:73:
                    ea:93:fd:a9:f2:f6:77:68:3d:db:5b:ab:52:30:ef:
                    90:0a:f0:ec:8b:4d:46:fa:db:b3:d6:fe:c4:0d:64:
                    6a:87:a7:e8:e3:50:aa:85:33:9c:e3:3e:7d:23:f9:
                    c0:cb:88:f8:87:83:74:63:f3:d5:14:81:e1:f4:f5:
                    73:9e:76:4b:12:43:a5:db:6b:79:73:43:d9:98:50:
                    68:eb:f5:db:f9:6a:00:be:40:c1:05:09:74:ad:69:
                    fd:e8:a1:97:d7:f2:92:45:67:e2:37:01:29:f7:f1:
                    d5:9c:78:b7:cc:44:e6:1a:ce:d6:9a:01:ef:2f:79:
                    2f:b4:0d:dd:c3:9a:da:1e:43:41:02:ce:de:0e:54:
                    3a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:4C:BC:BA:51:EE:BB:8D:A1:F1:9D:A4:34:A4:74:E0:0F:95:80:17
            X509v3 Authority Key Identifier:
                keyid:D3:4F:FE:E7:E7:62:F9:A0:6F:E2:F4:7E:7A:1E:52:D9:EB:A7:FA:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:1a:b7:e4:79:66:c8:ca:2f:dd:f3:6c:0d:48:d5:62:47:18:
         72:65:a9:f8:86:ac:0f:66:3f:de:fd:0f:eb:31:e5:e5:57:95:
         93:36:ed:ec:57:66:ca:b6:3f:1e:7b:81:03:29:53:fe:24:e3:
         ba:26:32:e0:c2:47:41:c8:81:46:fe:58:ec:78:bf:74:8e:a7:
         2f:c5:21:b2:fc:25:b7:3f:62:39:78:f2:be:8f:1f:d0:aa:66:
         28:16:2c:c6:72:06:88:8a:3a:8f:82:7c:68:0c:80:ee:1c:89:
         ab:f2:a6:b5:16:c2:8e:67:29:27:47:43:47:af:9f:58:73:f7:
         44:10:97:11:ce:f0:d8:70:af:06:53:7b:52:87:13:90:a5:5d:
         6d:6a:39:b2:3d:2c:e0:e2:9c:2a:f3:74:a4:59:9b:21:82:38:
         a8:31:fd:92:a1:e1:cd:4a:73:f5:3e:46:35:3c:88:64:02:00:
         41:e2:58:86:69:7e:f3:20:2f:70:dc:e2:8e:c0:f7:6d:2d:bf:
         ab:83:c0:4b:1d:d4:61:ef:19:06:a8:2a:30:54:3f:9f:1a:e4:
         cb:ba:f3:97:2b:c8:c9:a3:a2:65:0f:22:d6:0c:67:8e:40:6d:
         03:5b:ba:96:48:93:c8:90:cc:8d:2d:07:3c:82:9d:fc:63:5d:
         e6:f3:b5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:54:40 2026 by rpki-client