Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
File:                     5n17NXAHcGQBPaGOKeaQzUyb1xA.mft (raw, json)
Hash identifier:          bdvhD9Cr9BzlkAuFOd/fJI9sddMwFUaudBl1Y5btD+0=
Subject key identifier:   00:D8:19:FA:CE:3E:BC:73:B8:BA:1B:5A:66:88:36:51:57:39:C0:3F
Authority key identifier: E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10
Certificate issuer:       /CN=e67d7b3570077064013da18e29e690cd4c9bd710
Certificate serial:       01A0E9650CA1A94500DBE19DCF377E3BB045
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
Manifest number:          075C
Signing time:             Mon 28 Sep 2026 19:01:48 +0000
Manifest this update:     Mon 28 Sep 2026 19:01:48 +0000
Manifest next update:     Tue 29 Sep 2026 19:01:48 +0000
Files and hashes:         1: 5n17NXAHcGQBPaGOKeaQzUyb1xA.crl (hash: 5wPkqv1bgK9Mtby2WNC/83wvhKsAsAQm33v8yEFO5xE=)
                          2: wksghwYAvyyuquujhn16YlPDo6w.roa (hash: mUJnqqbbR94LX0rZEF/1N+dbXfhWkX3EPaMGmoUlRoc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e9:65:0c:a1:a9:45:00:db:e1:9d:cf:37:7e:3b:b0:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e67d7b3570077064013da18e29e690cd4c9bd710
        Validity
            Not Before: Sep 28 19:01:48 2026 GMT
            Not After : Sep 29 19:01:48 2026 GMT
        Subject: CN=00d819face3ebc73b8ba1b5a668836515739c03f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:90:a4:99:9f:2b:2a:0a:01:fd:23:c7:a0:b5:
                    5e:ac:3f:1a:06:c1:77:c8:45:d1:43:7f:1b:3b:88:
                    b7:18:0e:a4:a5:61:4c:31:dd:e4:84:d3:6a:a3:f3:
                    bc:a6:21:27:c8:66:15:7a:43:31:b7:77:f7:c1:d9:
                    26:a9:49:9e:72:59:1e:77:4f:00:fe:f1:b0:92:03:
                    6d:a8:89:e1:39:fd:6e:12:24:ab:18:f6:fe:c5:04:
                    64:20:ef:5c:7f:4f:9a:66:fe:89:d8:73:7f:16:bd:
                    80:64:2a:d3:dc:f7:24:89:64:b6:ef:a8:3e:32:d2:
                    e6:b4:92:a7:ef:a4:0e:76:03:54:4f:c2:5c:1c:29:
                    71:d8:e7:d6:9c:85:80:e6:86:68:dc:d6:79:d2:51:
                    d9:4c:68:9f:db:d4:15:79:a0:d1:ab:94:1c:2a:9c:
                    9c:aa:56:cc:ed:53:f4:bd:72:7a:60:0f:d2:68:20:
                    57:19:96:0d:ee:65:81:88:bc:c5:63:0d:12:a7:0b:
                    8f:1a:7c:64:e2:fa:4e:d4:ac:38:02:e3:3a:f0:34:
                    62:91:d1:fe:b4:6e:8b:b3:4e:32:db:d9:eb:6b:13:
                    96:5e:c3:97:75:5c:5f:c0:6c:6d:a1:43:7a:bf:5c:
                    1c:00:04:36:17:e3:b9:82:85:61:f4:79:68:e0:c4:
                    22:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D8:19:FA:CE:3E:BC:73:B8:BA:1B:5A:66:88:36:51:57:39:C0:3F
            X509v3 Authority Key Identifier:
                keyid:E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:31:96:cd:1b:ab:7e:ba:97:a6:86:12:9d:fc:be:f3:c0:8b:
         f7:e1:4e:17:50:66:13:a3:36:ab:27:a7:12:72:37:9f:c5:aa:
         62:e3:bf:ff:cb:a4:4f:67:e0:bd:7d:a0:c1:93:84:91:8f:bf:
         03:db:73:65:ca:12:8b:0e:a9:7e:35:19:c0:cc:f7:71:0d:5e:
         68:6f:8e:b2:1b:b0:a1:b9:44:d6:28:8d:a8:d7:a6:78:3b:b6:
         1c:8e:fd:57:c5:d3:f4:53:cb:a1:db:c1:a2:36:ef:f2:94:4c:
         bf:76:57:c4:10:d4:bf:0c:62:a8:16:d5:f0:70:40:71:16:b3:
         77:ad:99:46:b3:57:76:6a:e4:2f:12:39:c0:b0:79:e6:a8:16:
         a2:da:64:10:37:2e:33:75:9f:c1:43:24:d1:f8:e0:d0:84:a4:
         d9:27:15:cb:fe:e6:83:8f:38:bd:a6:a9:b2:9d:b9:d2:7d:ed:
         fe:15:62:bc:ff:fa:b8:b2:5d:3c:88:87:26:95:68:20:5f:21:
         92:87:ad:cd:33:86:33:95:aa:e3:4a:8e:62:c5:20:bc:aa:7e:
         49:59:5f:94:95:b1:8a:f6:03:b8:fb:de:b5:1b:01:43:40:f0:
         8d:2e:d3:3c:99:83:c2:51:22:69:2a:a5:10:e8:32:fd:ff:d9:
         3c:1d:fe:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 03:41:55 2026 by rpki-client