Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft
File:                     0-5NbhwEoPWClbKpchCs1Hv32Wo.mft (raw, json)
Hash identifier:          o1WiBKUgr7fdEHMozHVeOHRxRtsdHqYZXiptqeVBhuE=
Subject key identifier:   A9:45:5D:6D:B5:C1:50:64:9A:44:BF:66:45:15:A7:C4:93:5B:83:29
Authority key identifier: D3:EE:4D:6E:1C:04:A0:F5:82:95:B2:A9:72:10:AC:D4:7B:F7:D9:6A
Certificate issuer:       /CN=d3ee4d6e1c04a0f58295b2a97210acd47bf7d96a
Certificate serial:       01A12FC5E4CDF037925FE014EBF284B0893C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0-5NbhwEoPWClbKpchCs1Hv32Wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft
Manifest number:          0366
Signing time:             Mon 12 Oct 2026 11:01:00 +0000
Manifest this update:     Mon 12 Oct 2026 11:01:00 +0000
Manifest next update:     Tue 13 Oct 2026 11:01:00 +0000
Files and hashes:         1: 0-5NbhwEoPWClbKpchCs1Hv32Wo.crl (hash: Val48Pclf3I2+r/hgXe41db1TgUHSeQWo9t4Chi3Bt4=)
                          2: _5oe6VqZsqBT0LMhmKV2LIl_uf8.roa (hash: /SkExJhWDQiBSVIh+Uw/CkRQN60+0HSnourFk+/DB2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0-5NbhwEoPWClbKpchCs1Hv32Wo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 11:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2f:c5:e4:cd:f0:37:92:5f:e0:14:eb:f2:84:b0:89:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3ee4d6e1c04a0f58295b2a97210acd47bf7d96a
        Validity
            Not Before: Oct 12 11:01:00 2026 GMT
            Not After : Oct 13 11:01:00 2026 GMT
        Subject: CN=a9455d6db5c150649a44bf664515a7c4935b8329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:71:c1:e8:a0:42:45:bf:a4:07:44:54:ba:3d:
                    ef:03:03:26:14:48:6e:7b:a4:df:44:b6:b8:d8:bb:
                    1d:52:29:dc:ba:3a:2b:89:d2:c0:80:f1:62:c7:e9:
                    8a:44:ce:3f:de:06:0e:6d:d3:c7:c4:8e:8e:4b:a5:
                    32:3a:67:8f:eb:a6:c4:cd:59:c5:b2:bb:7a:ff:83:
                    c5:6b:f8:88:65:3e:d3:62:bb:f2:eb:5a:db:13:52:
                    92:ea:7f:c0:8a:b3:86:a0:74:bd:2e:80:a8:14:31:
                    60:04:b7:a4:b6:33:ee:3c:02:6d:0e:40:a5:15:0c:
                    d2:4f:ba:cb:85:dc:50:f1:01:20:1b:66:3f:12:dd:
                    84:1f:75:a9:48:45:5b:37:79:14:5e:ad:3e:07:b5:
                    14:89:ae:68:b9:f3:00:d1:35:af:f3:48:60:47:86:
                    ca:c6:62:59:40:7b:7f:4c:b2:dd:79:9b:9f:60:3f:
                    23:7a:ec:6c:85:8b:74:ad:e4:19:e5:22:02:50:88:
                    b6:44:1b:11:c6:33:c2:7e:24:ca:e7:44:9c:5c:33:
                    be:40:02:69:58:e8:58:58:05:c8:96:b3:48:5b:4f:
                    d2:1e:ad:dc:12:5c:2b:b8:da:d9:82:79:15:41:a9:
                    d2:71:19:01:83:47:44:ec:2d:0e:ea:fb:41:e1:ea:
                    49:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:45:5D:6D:B5:C1:50:64:9A:44:BF:66:45:15:A7:C4:93:5B:83:29
            X509v3 Authority Key Identifier:
                keyid:D3:EE:4D:6E:1C:04:A0:F5:82:95:B2:A9:72:10:AC:D4:7B:F7:D9:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-5NbhwEoPWClbKpchCs1Hv32Wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:e2:7e:96:09:e0:18:aa:bb:cc:5c:60:11:80:61:74:2f:e4:
         5f:9d:2a:cd:0d:ca:bf:62:cf:75:ca:8b:97:d4:66:ca:b0:4a:
         94:bc:00:53:8b:e3:4f:84:0a:47:ca:98:de:e3:0d:c3:42:05:
         6e:07:64:70:75:cd:cc:46:93:28:47:59:fe:91:85:64:bc:63:
         a9:00:92:d9:75:b8:9b:51:28:db:d8:f5:c6:f9:0a:a8:e1:8c:
         e2:ad:54:21:80:21:57:09:f1:11:59:f8:6f:05:3e:46:b8:32:
         b3:6c:8a:cf:e1:06:81:95:c0:23:d9:e5:1e:bd:52:93:04:23:
         c2:3d:05:f7:da:35:14:7b:4c:a4:99:43:64:32:25:3b:81:4b:
         60:ab:65:f1:fc:4a:a5:b4:ca:df:31:fc:51:1b:e7:64:72:22:
         db:46:3d:87:40:bc:96:1d:f1:aa:60:be:b7:59:e4:00:4c:a4:
         5d:e3:43:89:8e:47:df:d7:8b:15:ee:49:ee:07:8c:0e:ce:9a:
         a5:36:a1:89:7e:1e:15:d3:68:d5:0a:46:f8:62:b1:80:cd:ec:
         fc:5e:fc:dd:4d:ef:08:40:e2:28:b5:85:f0:72:d6:af:10:9a:
         f7:33:36:04:8e:dc:14:f8:fd:27:17:f2:43:95:38:5e:a4:ca:
         4c:d9:00:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:02:55 2026 by rpki-client