Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft
File:                     5NU8R_Id1mUrZ_70lclP39FSjOs.mft (raw, json)
Hash identifier:          4uXRRUCAJQiHTL7HZ1BYbiLydYTGP6ctvCZbIkZkbWI=
Subject key identifier:   7C:FA:FB:71:4B:9E:CA:42:BC:76:69:A2:1F:99:51:A6:72:1A:1A:1A
Authority key identifier: E4:D5:3C:47:F2:1D:D6:65:2B:67:FE:F4:95:C9:4F:DF:D1:52:8C:EB
Certificate issuer:       /CN=e4d53c47f21dd6652b67fef495c94fdfd1528ceb
Certificate serial:       01A08D8D742BA46595B2410520C326CB40E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft
Manifest number:          03F5
Signing time:             Thu 10 Sep 2026 23:00:52 +0000
Manifest this update:     Thu 10 Sep 2026 23:00:52 +0000
Manifest next update:     Fri 11 Sep 2026 23:00:52 +0000
Files and hashes:         1: 5NU8R_Id1mUrZ_70lclP39FSjOs.crl (hash: pnQ6+1Z8c6qZOYBB43U2CNAxLx8FaKFxqey+NyQrrAs=)
                          2: C2kt_D4OC_bCATP96J0Lcecrh_Q.roa (hash: /GUtwL0d0bHUSEUzfz0h1Hs+05AAyT7TJrjMS7ynWWY=)
                          3: DGLs36BU_cILxHYLxiJQIBEtMJI.roa (hash: qUohKLi8iKm8w87fsK66S0pB8JkDeoGnUD+Ll8azgYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8d:8d:74:2b:a4:65:95:b2:41:05:20:c3:26:cb:40:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4d53c47f21dd6652b67fef495c94fdfd1528ceb
        Validity
            Not Before: Sep 10 23:00:52 2026 GMT
            Not After : Sep 11 23:00:52 2026 GMT
        Subject: CN=7cfafb714b9eca42bc7669a21f9951a6721a1a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2e:07:a5:78:8e:c2:26:7a:f5:d8:f4:b4:5e:
                    09:8f:0e:3c:ac:9e:ce:a6:26:9b:94:bb:47:fa:73:
                    2a:52:2f:61:39:34:f7:82:cb:09:4a:b8:4d:a1:af:
                    66:8a:79:58:aa:11:5f:13:89:00:61:fc:cf:da:25:
                    d1:6b:b2:1c:65:d3:be:10:08:27:62:0c:94:93:06:
                    d1:b2:c3:21:de:7c:1b:18:08:9c:b7:f9:90:b4:67:
                    86:cf:99:da:fd:4e:5c:5c:05:8b:af:b3:af:f3:f9:
                    9a:b5:50:a5:a7:f1:c4:0f:ac:5a:15:b5:d7:d2:2a:
                    9d:61:40:74:98:c5:45:f3:3a:38:48:62:06:11:b0:
                    70:b8:35:03:06:57:51:c2:0a:6e:6a:c8:0f:47:ed:
                    c1:fc:eb:b3:d8:2d:21:64:85:91:67:9a:a9:09:c3:
                    5b:bf:48:5d:42:2f:8c:57:27:b6:7c:85:21:9a:47:
                    aa:dc:1d:6c:d9:d9:01:d2:6d:9f:fd:fb:44:29:b6:
                    a9:53:a2:cf:e9:a4:1b:96:27:a2:60:b8:a3:39:b0:
                    17:d2:45:42:f6:fe:88:7e:c5:6f:8a:d9:76:27:3e:
                    f5:a0:6d:58:0a:2a:f8:dd:0b:c7:dc:78:d0:d3:25:
                    75:39:c9:37:cc:9a:a3:46:d8:05:00:a0:7a:ba:9f:
                    7f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:FA:FB:71:4B:9E:CA:42:BC:76:69:A2:1F:99:51:A6:72:1A:1A:1A
            X509v3 Authority Key Identifier:
                keyid:E4:D5:3C:47:F2:1D:D6:65:2B:67:FE:F4:95:C9:4F:DF:D1:52:8C:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:2d:da:af:16:b5:5e:97:e7:8a:05:41:50:32:50:d6:7c:a8:
         d6:4a:7e:a0:0c:63:51:19:0e:3b:25:92:27:84:61:45:97:bf:
         79:bd:97:6d:c4:3e:ee:ae:58:8b:65:4a:c1:ad:68:8a:fd:8b:
         27:3a:25:12:32:ec:d7:b1:ff:2b:f9:48:c8:ed:17:5f:35:dd:
         c5:6e:28:fe:09:b7:4b:29:39:7e:81:43:a3:d9:0f:22:e3:81:
         e7:70:aa:f8:f0:35:5b:a7:7e:c5:e9:92:ac:dd:66:c2:46:d9:
         77:f3:fc:a4:66:3b:8d:cb:37:94:48:e4:4d:4c:12:b6:6f:91:
         34:d1:16:56:be:62:98:6b:da:32:a9:a8:f8:37:dd:09:dd:4e:
         32:68:d3:fc:59:4d:ac:a8:33:09:1a:99:7a:59:7b:1a:25:31:
         0a:23:91:6e:2c:cc:55:4e:29:47:72:89:11:0b:f6:de:ae:9f:
         9c:76:4d:f5:7c:48:26:09:57:13:30:37:af:1e:b6:48:95:1f:
         36:83:1b:ae:ed:a4:97:f1:50:3f:73:b5:5b:ea:ea:57:41:81:
         70:41:8f:9e:f3:63:83:45:af:d1:ba:ef:c9:8a:e1:59:8c:d6:
         0c:58:6b:ce:8f:b6:1d:c5:2e:22:15:d1:31:ae:42:7d:4e:6d:
         bd:be:2f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:53:20 2026 by rpki-client