Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft
File:                     5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft (raw, json)
Hash identifier:          D4bZUr4ioh/ZwV8FBWuPk4OwmLUxeLgp5rSp3alIAKE=
Subject key identifier:   8F:46:07:4E:72:19:09:24:3F:C3:F5:09:2F:8A:5C:31:91:A1:B4:37
Authority key identifier: E5:4A:B8:9D:33:BD:8A:A9:43:8A:1D:D0:B4:C5:9E:DB:EB:0C:64:EE
Certificate issuer:       /CN=e54ab89d33bd8aa9438a1dd0b4c59edbeb0c64ee
Certificate serial:       01A0C28E4E97F5071C3A768ED7F63DA37760
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft
Manifest number:          0A52
Signing time:             Mon 21 Sep 2026 06:01:41 +0000
Manifest this update:     Mon 21 Sep 2026 06:01:41 +0000
Manifest next update:     Tue 22 Sep 2026 06:01:41 +0000
Files and hashes:         1: 5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl (hash: 2pjD7mfx0y2/jt2Pwsbx8Ibpwnc9BWU4XnyXkY7OCE4=)
                          2: FImc6744QQwEQQovKDqizeaFC7c.roa (hash: sUbtOcLGidbBgbl2zkqKhUn8p3q1zKed/eARiNS1qdI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:8e:4e:97:f5:07:1c:3a:76:8e:d7:f6:3d:a3:77:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e54ab89d33bd8aa9438a1dd0b4c59edbeb0c64ee
        Validity
            Not Before: Sep 21 06:01:41 2026 GMT
            Not After : Sep 22 06:01:41 2026 GMT
        Subject: CN=8f46074e721909243fc3f5092f8a5c3191a1b437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:db:b9:eb:c4:f4:4d:40:52:b9:17:af:29:82:
                    21:77:b3:bc:b1:e8:f7:5b:2e:1a:86:d0:da:a4:a2:
                    b2:ce:24:c6:0b:95:9c:1e:e7:55:cb:d1:03:a0:c7:
                    81:31:38:c9:52:b9:ca:c9:e1:51:c0:42:bd:df:f5:
                    d3:b5:7a:c8:0c:40:a8:19:4c:3c:78:ce:ef:77:fb:
                    e6:6a:10:d1:36:67:dd:c7:fd:33:82:3e:86:43:c4:
                    0e:86:e5:2c:ef:bb:9e:f9:7b:a1:aa:26:e8:be:7f:
                    39:40:12:7b:ca:19:29:0b:e4:39:c0:80:cc:1a:4e:
                    c2:cc:be:d1:8b:4d:4c:ce:39:25:de:10:cb:39:11:
                    6f:8a:90:c3:ad:d2:13:09:17:7a:aa:78:38:e6:fa:
                    df:60:2f:11:45:fa:2b:a4:1c:68:4d:43:c3:4d:d5:
                    dc:f0:77:d1:0b:52:47:3d:d7:c8:90:2f:ba:7e:a5:
                    86:c6:03:37:7b:94:fc:ef:02:2f:ed:94:bb:2c:82:
                    21:05:63:00:a6:d7:ff:4c:f5:2d:31:a8:6d:ed:ef:
                    a7:97:7a:4a:b8:5e:25:57:e4:28:c2:a0:9e:21:6d:
                    83:bf:5c:1e:f0:d3:7e:2c:39:b1:7c:bd:f5:fd:72:
                    19:5e:79:df:13:18:82:8c:5f:b3:0f:cb:79:65:17:
                    9a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:46:07:4E:72:19:09:24:3F:C3:F5:09:2F:8A:5C:31:91:A1:B4:37
            X509v3 Authority Key Identifier:
                keyid:E5:4A:B8:9D:33:BD:8A:A9:43:8A:1D:D0:B4:C5:9E:DB:EB:0C:64:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:af:ff:ba:81:4e:b5:27:9e:30:8c:4b:0f:3a:9c:9b:a8:5e:
         36:84:7d:d0:ef:9c:7a:ed:62:61:fe:aa:82:01:41:fd:91:d3:
         a9:a1:07:fb:09:36:33:f2:da:c4:2e:23:b4:cf:ae:94:3f:a3:
         a5:80:39:d0:3c:05:d8:64:5c:81:5e:5b:72:45:41:4c:e5:42:
         e8:38:78:c0:40:95:c7:c4:0f:4e:b1:66:92:63:43:30:79:3e:
         0c:8f:64:f8:fd:5b:21:6e:31:4a:f6:89:08:7f:cc:c4:b4:3f:
         52:3c:18:e9:be:9a:f6:98:8c:66:f3:44:20:90:ea:b2:d3:f5:
         e6:a3:c9:00:9c:49:f2:2c:4f:3f:d5:71:74:5e:54:ae:0c:cb:
         bb:f1:50:b5:75:55:02:ad:1a:20:aa:45:a3:48:9b:c1:12:e8:
         5a:1f:1b:5b:04:75:27:2e:06:e4:c9:cb:d7:e6:d9:67:28:dd:
         66:06:d1:1c:8f:72:92:81:c0:c1:bc:a5:1b:d5:30:16:d5:ee:
         22:bf:bb:3a:8d:b1:6b:44:49:2f:89:7e:c4:0d:d4:99:0a:99:
         8e:90:fb:38:66:0e:f1:9e:ec:e7:60:65:a0:7b:95:49:3d:11:
         86:7a:16:26:2d:db:28:2c:84:59:8b:9f:c9:43:0c:11:da:c3:
         a1:97:c4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:44:31 2026 by rpki-client