Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
File:                     d5LD_GkVSsfVFbysnaoH54vCKcw.mft (raw, json)
Hash identifier:          5W8SEzN7HNROLsJwBRFojZbkiPdrQk3F7hDqiTM+pPc=
Subject key identifier:   18:8C:F3:23:66:F7:BE:FB:C7:20:D5:B3:F6:2A:49:36:EF:6E:6A:A9
Authority key identifier: 77:92:C3:FC:69:15:4A:C7:D5:15:BC:AC:9D:AA:07:E7:8B:C2:29:CC
Certificate issuer:       /CN=7792c3fc69154ac7d515bcac9daa07e78bc229cc
Certificate serial:       01A0EB1BF585B4EDFC3A141D928EE3C0BE48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
Manifest number:          1A7A
Signing time:             Tue 29 Sep 2026 03:01:13 +0000
Manifest this update:     Tue 29 Sep 2026 03:01:13 +0000
Manifest next update:     Wed 30 Sep 2026 03:01:13 +0000
Files and hashes:         1: d5LD_GkVSsfVFbysnaoH54vCKcw.crl (hash: M11dyVdBF2+x9HxrlZxcP0Coj8Lac6ppRWQdp/pwL/g=)
                          2: ycQ9UZI7n07LVhcSojHNBe-1YKE.roa (hash: lff+KvYO2g0/AePrhAZf5pu7/6YYDH+6BXgpxI3UwiA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 03:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:eb:1b:f5:85:b4:ed:fc:3a:14:1d:92:8e:e3:c0:be:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7792c3fc69154ac7d515bcac9daa07e78bc229cc
        Validity
            Not Before: Sep 29 03:01:13 2026 GMT
            Not After : Sep 30 03:01:13 2026 GMT
        Subject: CN=188cf32366f7befbc720d5b3f62a4936ef6e6aa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d5:b8:d5:a1:a8:c3:16:bb:a4:c8:dd:c3:cb:
                    eb:d2:45:83:5c:8b:44:35:91:b1:c8:c3:0b:75:4e:
                    61:00:b0:78:49:bf:09:66:3b:17:92:89:b9:a8:a8:
                    38:48:0c:44:94:ff:7f:d9:2c:d6:63:9c:72:08:63:
                    e8:35:3f:87:34:f5:ec:29:40:e6:4c:7b:8d:cb:f3:
                    0e:c5:7f:1b:5f:7b:35:87:e5:06:4c:ef:06:cf:7d:
                    fb:be:a4:03:cc:08:19:87:de:0a:92:3c:7a:28:29:
                    14:b2:bc:ea:57:e6:ea:4f:56:d5:5c:f6:43:3a:9e:
                    0a:27:a6:01:4f:44:3d:08:cb:47:31:21:b7:e1:8d:
                    e7:b3:3d:8d:11:f0:1e:89:98:16:f4:81:90:fa:9e:
                    81:51:c6:34:bb:6b:5d:8c:0a:99:f9:97:6e:43:b4:
                    56:68:af:b9:4d:b3:f0:9d:2c:db:fe:42:e9:de:ae:
                    60:52:5f:1a:6a:24:6e:a9:52:d1:41:8b:59:7f:76:
                    bf:66:2a:9f:7e:66:db:4f:70:31:b8:0f:b0:e7:ec:
                    8f:e5:7a:c0:fe:bc:97:1e:b5:3e:35:d7:24:26:2c:
                    3b:21:d1:80:12:4c:0b:f5:be:95:37:e4:13:ff:49:
                    e6:bb:63:eb:f1:09:22:0e:9b:4f:02:7d:fa:4a:c2:
                    d4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:8C:F3:23:66:F7:BE:FB:C7:20:D5:B3:F6:2A:49:36:EF:6E:6A:A9
            X509v3 Authority Key Identifier:
                keyid:77:92:C3:FC:69:15:4A:C7:D5:15:BC:AC:9D:AA:07:E7:8B:C2:29:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:a1:35:af:e7:3b:fe:be:6f:62:b6:bd:a3:46:78:12:57:79:
         9e:1d:66:b7:80:c1:16:97:0d:62:29:f1:84:2c:b4:07:c5:10:
         59:89:0b:24:d0:3b:26:43:34:ff:a7:ad:db:db:cc:30:53:83:
         b7:6d:73:b8:6b:14:62:6b:a0:48:ae:55:48:a7:e0:c2:d7:30:
         63:a4:a7:05:52:7b:f7:c0:cf:0a:24:a8:c6:15:c0:b4:76:98:
         bd:a5:7d:b2:ac:99:59:8a:b7:8a:a3:2a:6f:21:c9:76:d3:88:
         0f:da:a8:67:b6:02:ba:27:fa:08:ce:e8:8d:20:5a:ca:2f:9c:
         7b:ac:01:b1:c2:1e:d5:83:82:04:b7:cd:5b:18:9e:f0:23:30:
         22:ee:24:10:c5:f6:e9:6e:a4:6c:cd:4c:cb:9e:4a:f6:f7:8b:
         74:74:54:42:6e:b8:75:e0:8a:99:e0:c2:dc:ed:5d:f0:96:ed:
         13:15:80:cf:03:4f:5f:45:23:74:33:64:49:7b:d2:fd:42:bb:
         c2:f8:29:52:27:b4:10:36:f0:7f:aa:fc:08:f5:b0:3e:3b:f5:
         c6:ac:85:34:b7:b3:cc:15:ee:ae:85:49:b2:1d:e8:34:c4:f7:
         33:d3:cb:39:c7:7e:81:bc:e0:db:98:23:c9:a3:fc:f4:e0:06:
         9b:e7:d6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:26:20 2026 by rpki-client