Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
File:                     5jGwgNTqb9Bham5wHHyBXW_4fAA.mft (raw, json)
Hash identifier:          BHbluA5s8Pd+xa8wtVgc18T/zvWMTSBR3Zm0TbyriEM=
Subject key identifier:   EF:8E:99:26:58:5A:4F:BC:C1:27:CF:E4:B1:03:2A:BB:9A:B2:DB:58
Authority key identifier: E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00
Certificate issuer:       /CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
Certificate serial:       01A0D0ED6F9092067703FCAF899A12F44323
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
Manifest number:          0C3B
Signing time:             Thu 24 Sep 2026 01:00:16 +0000
Manifest this update:     Thu 24 Sep 2026 01:00:16 +0000
Manifest next update:     Fri 25 Sep 2026 01:00:16 +0000
Files and hashes:         1: 3Uu6-Km0t7pl2GLMEbSI9_TLxag.roa (hash: hXLyK65nAY5+Ut+o0gb/BjxofeYx4PkadbFG04BKn8s=)
                          2: 4RhMZahyPAwo146TEpPKu9ePT2I.roa (hash: tBGvizwGCjR2IcH4F8OLjMl+yMIqhcGRdbR2C5pIbnk=)
                          3: 5jGwgNTqb9Bham5wHHyBXW_4fAA.crl (hash: 6D1MPA16dMlYKIlbk2dQxGMnreKr08u1N8vt+I4CgYM=)
                          4: GwvSuBhe9j3SRlsBolDRf2N0AMA.roa (hash: 9ZEJo3RSRRuK8gs7leiXlQt1JyVPC9+1EuL+tyIfk/I=)
                          5: H4QLFR4-VWtTH3wvuaow12NPB4c.roa (hash: bdQlsc3BPSHO6Zn9QaadsNsV4OnEPV5+i5GaKzval08=)
                          6: p3_p0oefeCWIGWl--B6scwMOl68.roa (hash: TzUMNS4PCBQmbQd3CE8J49kK3X/KRKK4UzkYkcKRrPc=)
                          7: x1IDat6YDBdzEhpue2RnoEodHRk.roa (hash: GNbqBnSl6BYmQm/dEuII/J8pPs8l3TWXFnBRJpdqWP0=)
                          8: zPofNoaI2RS9IpHftjHCFMeYgVg.roa (hash: GrlWnZ81qO00EP6m7P5v1VXEnw8zBrYaQ+SSPFWD5L0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:ed:6f:90:92:06:77:03:fc:af:89:9a:12:f4:43:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
        Validity
            Not Before: Sep 24 01:00:16 2026 GMT
            Not After : Sep 25 01:00:16 2026 GMT
        Subject: CN=ef8e9926585a4fbcc127cfe4b1032abb9ab2db58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4b:fc:56:26:b8:dc:a2:7d:ca:73:ee:17:5b:
                    8b:4d:95:88:75:f4:5c:40:04:fa:7a:8e:ac:d3:4e:
                    3d:0e:4f:1c:25:62:4e:9a:5d:56:78:17:8f:93:b9:
                    95:10:5b:22:09:28:c1:7b:d0:8b:fe:4d:06:a1:9b:
                    9e:a5:0f:52:af:89:09:a3:09:e9:0f:d5:dc:d8:44:
                    3e:ca:8f:56:ee:46:5a:c8:74:b3:d6:42:0d:1d:71:
                    f2:f9:ab:d9:8e:1c:07:5c:c6:14:4d:ba:22:e7:b6:
                    60:f2:7b:a3:44:83:ff:7b:e2:ae:29:19:80:58:2b:
                    70:ec:a7:40:b1:b7:bb:76:f6:44:12:78:6c:70:f4:
                    09:3c:eb:e4:7d:01:36:83:07:1d:23:ea:b9:6a:ed:
                    5d:31:2c:43:58:fd:2f:fa:b1:83:a0:6d:ea:f2:dc:
                    23:30:a4:35:59:f0:8f:6f:35:26:ea:a7:98:7a:c6:
                    cf:ae:ce:36:be:02:2a:fd:45:96:f2:2d:29:2e:9f:
                    1a:be:37:c5:85:f4:bc:6b:12:5f:ec:95:3d:60:43:
                    1a:df:bc:df:4e:a2:3f:db:ad:ed:bc:54:9a:b7:68:
                    ab:0f:3b:72:a6:a7:9f:b2:e3:2b:b0:b4:f0:c3:66:
                    05:5a:03:2a:e4:8f:4a:20:20:3d:13:14:9a:b8:a2:
                    22:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:8E:99:26:58:5A:4F:BC:C1:27:CF:E4:B1:03:2A:BB:9A:B2:DB:58
            X509v3 Authority Key Identifier:
                keyid:E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c6:dd:53:9e:86:7a:0a:b9:22:1f:27:05:20:08:79:24:2d:
         33:00:a2:e4:b4:69:8d:c2:76:fc:d2:b1:e7:62:ef:c8:6f:bf:
         7d:c3:79:66:70:fb:ef:63:ac:25:6d:5d:54:e9:3e:27:5a:ca:
         50:5d:cd:8e:0b:1b:f6:70:fb:c7:f7:83:a3:94:75:4b:4d:62:
         15:42:a7:02:cf:63:dc:2a:f1:f3:3e:9c:6b:f1:09:31:32:68:
         ef:ec:bf:61:90:e4:6d:c1:41:df:ac:cc:a1:e7:a7:9e:49:b7:
         b8:60:92:f6:ea:66:bb:de:6d:df:88:4d:eb:68:a0:49:a1:ca:
         76:ff:4c:7b:eb:1b:6f:57:4a:93:ea:c3:b4:b3:f0:b1:42:3c:
         67:32:65:d3:9a:6c:84:d3:92:cc:d2:e6:2d:bf:62:72:8c:a5:
         dd:ff:cc:bc:68:74:fb:03:1c:3f:35:8e:35:54:35:d1:71:f1:
         b1:b7:ed:f8:cb:23:bb:21:96:fd:d7:4f:e3:8a:b7:e8:a0:d3:
         b2:25:bf:e0:c7:e0:26:07:15:f9:81:a6:2b:99:aa:74:2c:2a:
         61:54:24:45:f1:af:1c:d0:e7:ba:59:47:e3:26:19:d7:dc:4a:
         7b:36:74:53:ef:73:61:15:bd:7c:80:6b:43:02:25:a6:ec:1d:
         0a:90:60:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:20:05 2026 by rpki-client