Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
File:                     5F0K3ClN02bfatqIATTb0OaIzPc.mft (raw, json)
Hash identifier:          Dx3wQnQ8Gcl99Hy2lKOTER4BMR+2WV0DTUh+G0zbiZc=
Subject key identifier:   48:0C:B0:64:4B:A4:B7:6D:F4:82:8D:EC:33:C7:51:91:2B:53:26:C9
Authority key identifier: E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7
Certificate issuer:       /CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
Certificate serial:       01A0C3D75A5B780F0C95E91A34E265358D6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
Manifest number:          1A67
Signing time:             Mon 21 Sep 2026 12:01:05 +0000
Manifest this update:     Mon 21 Sep 2026 12:01:05 +0000
Manifest next update:     Tue 22 Sep 2026 12:01:05 +0000
Files and hashes:         1: 5F0K3ClN02bfatqIATTb0OaIzPc.crl (hash: ZmZkYuzlscdo2j/yZPoUFhWyvBGf0XzzNcmD0ZC4U6U=)
                          2: eVHX86Z5BUrMshf-zyfKQYxN0ao.roa (hash: 52NfErShygwUz/Jha+lSZaO5oAHArVutPPK1QEHMLQU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 12:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:d7:5a:5b:78:0f:0c:95:e9:1a:34:e2:65:35:8d:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
        Validity
            Not Before: Sep 21 12:01:05 2026 GMT
            Not After : Sep 22 12:01:05 2026 GMT
        Subject: CN=480cb0644ba4b76df4828dec33c751912b5326c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1c:37:b1:5d:5d:d8:bf:e6:b9:42:30:37:c0:
                    4f:37:92:44:73:c9:41:2f:da:27:3e:79:85:5d:5e:
                    f7:8e:8b:e3:d1:89:8d:f1:cd:64:bf:16:59:90:6d:
                    d4:bd:ec:4a:49:c0:86:24:f2:eb:c6:f4:cc:af:80:
                    1d:ae:25:9e:b2:b8:b1:82:08:64:dd:38:d4:28:13:
                    66:09:e6:48:5b:18:21:7b:02:77:8c:11:8e:15:d7:
                    56:b0:4a:37:c8:8c:fb:45:c8:39:b6:55:31:94:77:
                    48:09:8d:20:b5:70:ef:e3:a0:0e:d6:4c:87:ed:d1:
                    4d:43:a0:76:f8:68:c3:78:e6:3c:b8:4f:cc:b3:ec:
                    f7:4f:cc:55:67:43:95:78:a2:80:f9:25:72:64:ea:
                    32:94:d5:bd:89:37:a0:44:92:08:bf:8f:5d:38:e2:
                    19:ff:f8:10:f2:9e:c2:29:7c:fa:71:22:07:41:e4:
                    5a:0e:70:de:e9:8f:d0:45:bc:82:92:54:92:e9:97:
                    1a:72:e5:81:30:f8:75:0f:5e:fb:c5:57:28:b2:51:
                    a0:ca:23:54:d9:84:a2:f0:b7:b9:c7:c8:76:e7:11:
                    fa:09:04:02:e1:b9:d5:eb:67:56:20:a0:27:59:35:
                    01:6a:57:dc:6d:59:53:b5:4b:ff:6c:bb:86:8f:09:
                    24:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:0C:B0:64:4B:A4:B7:6D:F4:82:8D:EC:33:C7:51:91:2B:53:26:C9
            X509v3 Authority Key Identifier:
                keyid:E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:38:40:8c:88:53:18:33:38:bd:9f:18:43:40:6c:7d:97:86:
         eb:18:5e:49:fe:29:1c:a3:f2:cd:99:26:1d:f4:97:d6:1c:2b:
         47:c1:7d:14:c3:eb:b2:1b:bd:39:9a:f6:72:a1:ab:a6:89:75:
         10:e4:bf:20:8d:e2:f8:fa:87:9e:94:e9:29:8d:41:80:9f:0e:
         e1:74:f7:4c:98:1f:34:6d:6f:e3:4e:9e:80:42:d2:ae:f3:b7:
         55:8d:7c:97:c8:e9:e6:3d:b3:3e:35:21:81:8d:40:b4:08:60:
         38:66:3b:42:3e:b9:70:46:99:d9:43:99:7a:4f:10:76:21:d1:
         c4:19:84:2e:d6:95:0c:09:db:26:63:3b:e3:55:9b:3c:df:36:
         4c:49:0f:2d:b0:14:8b:8e:69:56:be:bf:3d:72:fe:c1:bd:69:
         75:c9:3e:04:31:4d:56:ef:55:9d:4e:d7:f5:dd:f6:17:c8:5d:
         6c:c0:60:13:f7:46:d1:49:97:7b:6a:fd:35:26:e1:69:ad:66:
         ae:c3:cf:91:48:b1:7b:2a:02:84:56:ff:9e:e8:7a:1e:19:ef:
         73:37:93:72:f9:25:92:ec:d8:60:76:59:32:5a:d4:bc:c0:7e:
         6e:c3:d3:28:62:02:06:6c:73:ac:b5:11:f3:7c:0d:21:d1:21:
         30:23:83:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:19:19 2026 by rpki-client