Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
File:                     5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft (raw, json)
Hash identifier:          uIGJZN9RnjhXWO3KlvTJ1R7GDp98+Fho/nzBgcRjRYI=
Subject key identifier:   60:C4:83:53:14:27:AB:8C:90:B6:A3:B2:3E:80:27:FD:6A:27:68:03
Authority key identifier: E4:95:AC:BA:FE:46:EF:2F:4D:6C:51:FC:F2:3B:D7:2F:63:9C:FD:0B
Certificate issuer:       /CN=e495acbafe46ef2f4d6c51fcf23bd72f639cfd0b
Certificate serial:       01A0DB723F2D4511762464A736A32FB01340
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
Manifest number:          0D2B
Signing time:             Sat 26 Sep 2026 02:01:32 +0000
Manifest this update:     Sat 26 Sep 2026 02:01:32 +0000
Manifest next update:     Sun 27 Sep 2026 02:01:32 +0000
Files and hashes:         1: 5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl (hash: N4qnwsEByg7rhKgKm/6EYxEf02ZJ1zGlyaz1J/tgwGM=)
                          2: o45AvLtTXWpofzL1ORN3GJy42Sw.roa (hash: Kb4YnS6qGzK3YXYEHAE784icfkL1K33dQHPHFIXS48c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 00:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:72:3f:2d:45:11:76:24:64:a7:36:a3:2f:b0:13:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e495acbafe46ef2f4d6c51fcf23bd72f639cfd0b
        Validity
            Not Before: Sep 26 02:01:32 2026 GMT
            Not After : Sep 27 02:01:32 2026 GMT
        Subject: CN=60c483531427ab8c90b6a3b23e8027fd6a276803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:17:de:f6:ea:71:5d:86:41:a8:8a:e6:c8:82:
                    d7:32:6c:b6:bb:20:6e:3d:92:55:20:06:fc:c9:8c:
                    0b:bf:3c:11:fa:d1:4b:66:68:b5:7c:89:5a:7a:37:
                    0e:d1:69:12:c0:c2:b8:61:5d:ce:c5:e3:d4:27:2b:
                    40:96:e8:3d:34:0c:2d:0a:a5:8a:22:1a:12:4e:ca:
                    5a:41:3a:b0:d0:4f:7c:03:57:eb:4f:46:ec:96:97:
                    8a:36:35:16:60:5c:34:61:01:60:c9:1d:02:b5:68:
                    67:ae:15:22:d4:62:2d:db:39:91:de:c4:6e:ab:b9:
                    5e:f4:99:ed:63:02:5b:83:ba:19:ee:ef:7a:51:3e:
                    38:26:82:93:a6:d8:d2:eb:82:5e:32:5c:85:5a:a5:
                    87:9d:74:24:d5:9d:5c:40:b0:b1:32:ac:7f:b7:ed:
                    7b:10:6d:29:18:b8:25:ce:c2:6a:e5:68:18:84:d6:
                    3b:3f:37:a1:10:aa:e6:f6:d1:3f:97:8a:a0:ed:2f:
                    01:19:c6:44:3d:c6:6d:5b:97:65:bf:f9:19:13:16:
                    11:fa:3e:30:d1:d4:2c:9b:fb:7c:3e:5d:b0:28:df:
                    ca:21:e1:e3:e4:90:a0:90:dc:db:23:0c:15:bf:fc:
                    2d:bc:66:07:05:96:52:f7:aa:37:20:73:e2:d8:c0:
                    48:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C4:83:53:14:27:AB:8C:90:B6:A3:B2:3E:80:27:FD:6A:27:68:03
            X509v3 Authority Key Identifier:
                keyid:E4:95:AC:BA:FE:46:EF:2F:4D:6C:51:FC:F2:3B:D7:2F:63:9C:FD:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:20:76:b4:60:30:08:25:52:49:eb:68:09:c0:f3:06:04:fe:
         52:5b:f8:a3:ef:5e:36:ea:b6:23:d8:cf:19:fe:84:a4:5a:35:
         34:d7:4e:bf:b9:82:90:4d:6b:89:ae:ca:6f:57:63:f6:d5:f7:
         37:87:00:61:e5:2b:df:a0:9b:18:bc:0b:f3:8e:ee:f6:5e:2a:
         87:3d:35:c3:b5:e5:47:70:e8:2c:44:2d:16:a1:35:46:d7:fd:
         f2:dc:8b:c3:01:f4:97:6f:ab:13:4f:88:2a:81:9e:c5:ec:41:
         2e:a4:fe:42:2c:06:cd:d1:b8:d2:b2:a3:a2:bc:9f:1b:48:82:
         3d:e2:5b:41:d7:3d:97:27:be:a0:0d:87:e6:f2:26:59:b6:d1:
         9a:2f:38:a9:ff:3e:e1:8b:45:92:98:27:89:0e:c1:5e:e4:cd:
         b8:ae:98:b6:0a:5b:fa:8b:be:cd:dd:d6:45:30:40:fd:cf:f6:
         75:86:e5:5d:80:7e:10:b1:6d:fa:84:7a:4c:26:95:be:2b:c5:
         60:96:54:9a:ac:cf:54:0f:f8:33:fb:15:63:f5:89:13:da:7e:
         70:a8:93:3e:7d:fa:d7:c6:6d:b3:8f:f3:1a:70:d7:91:61:76:
         15:1d:39:c0:63:06:35:0d:be:d1:cd:87:63:64:16:97:40:34:
         cf:33:a4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:45:09 2026 by rpki-client