Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
File:                     5RZFNJeeYKVkcBIysuUgCIlUJgY.mft (raw, json)
Hash identifier:          xCZsyAoTByUp1mkfMlLbGgCAk06SmTBuT+pJHpRskkU=
Subject key identifier:   20:DB:0B:93:4D:50:A4:31:07:3C:6E:23:FA:E2:DE:FF:3A:E1:BF:FC
Authority key identifier: E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
Certificate issuer:       /CN=e5164534979e60a564701232b2e5200889542606
Certificate serial:       01A0C7EA93355884E68A1B92924E294A1C0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
Manifest number:          0B14
Signing time:             Tue 22 Sep 2026 07:00:34 +0000
Manifest this update:     Tue 22 Sep 2026 07:00:34 +0000
Manifest next update:     Wed 23 Sep 2026 07:00:34 +0000
Files and hashes:         1: 5RZFNJeeYKVkcBIysuUgCIlUJgY.crl (hash: Zxe6s97nZZYXp/QiMxG9cfbaZ+nQVHBrpioUGyycqDc=)
                          2: CLncwoK6CeX2DrcZpPqq6Z8pS20.roa (hash: SMpNvtdgZOEYKhAdG24xw7Idoi3bx91mSGlxUH7c2dc=)
                          3: EoQWf8s-UErJmlOBlPJEFo0RMEk.roa (hash: 48xv/WbSMU9QSiVIqjrBi285FOyvkViNd8lcNne/SD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:ea:93:35:58:84:e6:8a:1b:92:92:4e:29:4a:1c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5164534979e60a564701232b2e5200889542606
        Validity
            Not Before: Sep 22 07:00:34 2026 GMT
            Not After : Sep 23 07:00:34 2026 GMT
        Subject: CN=20db0b934d50a431073c6e23fae2deff3ae1bffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c7:c7:f4:77:79:0f:7e:1b:61:34:fd:12:ea:
                    bc:47:a9:c3:d7:7b:67:77:3c:36:af:94:d8:5c:ca:
                    1b:4b:25:32:34:53:16:02:b9:64:67:94:3b:97:39:
                    fd:4c:72:d1:23:cd:dd:a4:bd:01:3e:f4:fe:72:06:
                    43:36:f1:32:3d:82:61:e1:61:64:99:6c:5a:8f:62:
                    fd:47:9f:fd:10:40:2b:27:f4:8f:2e:f7:41:69:ba:
                    09:59:e0:a6:93:b5:77:4f:1a:df:90:7c:76:d5:cb:
                    54:2b:de:1d:e7:6d:ef:46:d2:e3:69:2f:be:0c:ef:
                    6a:6f:28:26:69:09:df:b3:f0:98:ce:67:8c:1b:f0:
                    86:c9:2c:96:da:5b:c4:d0:3b:b2:58:00:b7:6f:c3:
                    55:52:eb:40:05:d5:9b:d9:d0:38:4b:db:08:4a:7c:
                    d4:6c:8e:e6:fb:74:4d:a4:ae:bc:b3:b2:c4:10:e0:
                    04:19:c7:cc:6d:43:4e:16:bf:e0:5e:5f:49:b4:37:
                    b2:92:20:5c:2a:d9:93:6d:76:3a:e2:d6:3d:cc:20:
                    12:fc:21:cc:2f:b9:a2:18:8b:e3:32:85:97:31:75:
                    ec:01:98:45:99:2f:58:25:19:79:68:95:af:68:06:
                    c2:8e:0c:1e:90:4c:d2:44:4b:15:78:9b:47:5f:f2:
                    a9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:DB:0B:93:4D:50:A4:31:07:3C:6E:23:FA:E2:DE:FF:3A:E1:BF:FC
            X509v3 Authority Key Identifier:
                keyid:E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:a7:5c:91:d1:35:e4:36:d6:cc:f3:44:90:03:07:88:b8:6a:
         01:22:5f:60:e1:f1:d0:64:b8:ce:7a:e6:e7:1e:7e:84:b4:54:
         41:df:bf:06:7f:c7:4c:d3:ec:d7:ee:c6:4d:67:2b:ce:81:71:
         b3:8c:54:5d:06:02:fe:82:3c:da:7e:61:57:3a:b4:b9:32:6f:
         9a:45:57:da:42:b3:cb:b0:be:da:37:f8:00:c7:01:92:e6:73:
         c2:22:76:28:70:29:d0:61:ce:64:25:04:27:4f:fa:a5:97:20:
         da:e9:f7:e2:5c:ed:62:88:04:0d:2e:2f:95:a5:54:98:dc:20:
         5f:1e:a5:bb:f1:44:3b:02:f5:d3:9f:08:84:62:c6:fd:26:ee:
         71:51:b1:ff:41:a1:d5:7f:5a:81:80:8d:ac:d9:15:ba:c3:b7:
         7b:c2:55:76:d2:4f:7d:2f:03:85:1f:dd:f3:d6:fb:e0:48:32:
         1e:91:6a:51:b8:93:19:5f:af:f4:fb:d6:5c:63:cf:59:8b:cc:
         04:42:98:b5:e7:00:d5:16:c3:75:4d:6e:1c:93:20:e6:7d:a4:
         3d:02:4c:49:1c:17:5e:a2:f6:36:1c:ed:33:02:23:a1:1e:9e:
         a8:22:8c:37:b4:8d:7c:7d:ec:49:27:19:c7:8f:7b:b0:09:c6:
         ad:d7:06:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:00:40 2026 by rpki-client