Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
File:                     5nEAZ58HKCzUjLUQe_l69684ick.mft (raw, json)
Hash identifier:          mZtZhbcYA7dc4KU1gr9aw3bMovdoIHPRvfDsURyM0nI=
Subject key identifier:   DC:6C:64:02:2F:18:93:94:2A:99:7B:2F:90:9B:B1:E1:B7:A5:A6:51
Authority key identifier: E6:71:00:67:9F:07:28:2C:D4:8C:B5:10:7B:F9:7A:F7:AF:38:89:C9
Certificate issuer:       /CN=e67100679f07282cd48cb5107bf97af7af3889c9
Certificate serial:       01A000CA4A36A701A3724BF385109CE42342
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
Manifest number:          1A03
Signing time:             Fri 14 Aug 2026 15:00:52 +0000
Manifest this update:     Fri 14 Aug 2026 15:00:52 +0000
Manifest next update:     Sat 15 Aug 2026 15:00:52 +0000
Files and hashes:         1: 5nEAZ58HKCzUjLUQe_l69684ick.crl (hash: gKovb4uAoTw38FSQk5zbJV5CodTBJSburBpLn+gYkKk=)
                          2: DKP0PbTK1N5jCO5TTlWyX5Rw5cM.roa (hash: FTS7rWAdFS8UyAMp19YH0zdu88+Df8yK+Znwjqplx54=)
                          3: sA6Qf2_ToIyGcsbWCFpl1ww3zYM.roa (hash: wfbilCSxn7pd6CKUaeLQcmM0OSGs3jIpHSCViiEgaxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:4a:36:a7:01:a3:72:4b:f3:85:10:9c:e4:23:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e67100679f07282cd48cb5107bf97af7af3889c9
        Validity
            Not Before: Aug 14 15:00:52 2026 GMT
            Not After : Aug 15 15:00:52 2026 GMT
        Subject: CN=dc6c64022f1893942a997b2f909bb1e1b7a5a651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:83:a2:76:e1:af:a5:9d:a6:bd:ba:5b:80:c3:
                    ec:e0:ab:68:01:09:65:f2:3e:f7:8a:16:8a:79:dd:
                    49:a7:c0:76:15:07:7f:aa:6f:97:26:8b:a5:14:27:
                    2f:c1:b5:48:eb:d4:99:20:43:52:79:17:28:4a:b8:
                    f5:a8:cc:3a:19:8a:4f:94:2b:a5:7b:09:75:f1:dd:
                    4f:22:cf:2f:69:15:9e:ad:6d:09:6c:2f:1f:13:20:
                    65:73:0e:dd:6a:26:2f:42:2f:5d:f5:a8:e3:57:57:
                    ec:57:27:2d:48:68:58:6c:04:8d:16:56:63:f6:1c:
                    02:9e:79:a1:11:30:45:62:b7:19:d0:ec:fe:50:4b:
                    14:4e:69:03:fb:45:92:07:72:ed:01:02:fc:55:8b:
                    99:5d:dd:e8:ef:5e:c1:0b:7d:0e:a5:e7:7d:13:aa:
                    3e:f1:d3:a3:6c:c7:bd:a2:f1:e7:8f:13:55:66:23:
                    a9:da:8b:17:48:32:71:32:d2:a6:58:f0:9b:52:9e:
                    0e:13:c3:6d:d6:7b:e8:67:3c:dc:cb:e0:d9:08:cf:
                    4b:65:f4:6b:f8:63:83:d3:d3:65:2b:3a:5b:2d:e0:
                    37:a1:42:20:10:e0:69:48:ca:21:07:df:e9:af:9b:
                    6b:aa:80:f8:96:93:16:dc:ff:1e:c5:aa:74:92:79:
                    92:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:6C:64:02:2F:18:93:94:2A:99:7B:2F:90:9B:B1:E1:B7:A5:A6:51
            X509v3 Authority Key Identifier:
                keyid:E6:71:00:67:9F:07:28:2C:D4:8C:B5:10:7B:F9:7A:F7:AF:38:89:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:03:cd:42:50:e9:e9:80:61:e8:e8:f2:f2:6a:7f:b3:e0:b7:
         dc:f1:24:ee:4b:a4:7d:50:f3:ad:78:1e:53:b5:76:5f:e3:6e:
         50:7a:c0:3c:ae:50:76:2a:1f:2f:fa:15:24:f0:a9:57:31:72:
         e6:1e:a8:6b:de:52:e6:fa:49:de:71:ee:ee:a9:7a:b8:37:cc:
         0b:4f:c6:a1:2d:b5:af:74:fb:98:8c:46:a5:1e:18:7c:79:46:
         aa:91:2d:e3:b8:13:2e:a1:51:b8:14:80:20:fb:f6:02:34:2b:
         9b:34:19:8a:bd:4e:d7:51:59:02:ba:65:aa:15:ec:06:d0:9a:
         a8:de:af:2a:5a:19:86:28:18:4a:e0:f8:ac:3f:ad:99:27:df:
         36:da:44:57:7f:e4:35:94:0e:c5:c2:e8:1b:73:c9:82:11:47:
         4e:17:e6:e2:b0:3a:f8:48:44:62:98:a3:35:6a:1e:14:03:b6:
         72:28:46:d1:9b:14:35:61:02:85:00:09:49:5d:39:0a:c5:9b:
         95:e3:d5:89:1d:a4:67:6e:a4:e6:88:7d:d4:3a:b0:d2:d5:9f:
         55:70:2b:e4:da:46:9d:2c:51:c0:f6:50:0e:bc:8b:b0:9d:8d:
         5b:0f:5c:fc:01:9b:f6:18:7c:16:65:9b:60:6f:23:c8:5d:67:
         a1:4c:60:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:31:09 2026 by rpki-client