Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/5zXegsCvw_0Eh8MAzxipTvF5hjE.mft
File:                     5zXegsCvw_0Eh8MAzxipTvF5hjE.mft (raw, json)
Hash identifier:          AlimEIFcz7Fxma9T54Mn3m9UwhJlEGPhPh824MncQuw=
Subject key identifier:   26:D9:D7:C2:4D:6E:42:38:35:6D:BD:62:97:C2:0D:B0:C6:36:3C:AE
Authority key identifier: E7:35:DE:82:C0:AF:C3:FD:04:87:C3:00:CF:18:A9:4E:F1:79:86:31
Certificate issuer:       /CN=e735de82c0afc3fd0487c300cf18a94ef1798631
Certificate serial:       01A0412A8E4B6CA1D8042D3FCDB4422873A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5zXegsCvw_0Eh8MAzxipTvF5hjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/5zXegsCvw_0Eh8MAzxipTvF5hjE.mft
Manifest number:          9B
Signing time:             Thu 27 Aug 2026 03:01:42 +0000
Manifest this update:     Thu 27 Aug 2026 03:01:42 +0000
Manifest next update:     Fri 28 Aug 2026 03:01:42 +0000
Files and hashes:         1: 5zXegsCvw_0Eh8MAzxipTvF5hjE.crl (hash: NRE6AlMs03qafNtI2aXI9eEzD8AE8sU84RwxeBL+BJk=)
                          2: wo2QncHAnFWiwgcHWd9f96fIAJQ.roa (hash: YufcsKB/8hirtC3U5PRwaqw+C8pdhA4f5x9AFnDM7Z0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/5zXegsCvw_0Eh8MAzxipTvF5hjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/5zXegsCvw_0Eh8MAzxipTvF5hjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5zXegsCvw_0Eh8MAzxipTvF5hjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:41:2a:8e:4b:6c:a1:d8:04:2d:3f:cd:b4:42:28:73:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e735de82c0afc3fd0487c300cf18a94ef1798631
        Validity
            Not Before: Aug 27 03:01:42 2026 GMT
            Not After : Aug 28 03:01:42 2026 GMT
        Subject: CN=26d9d7c24d6e4238356dbd6297c20db0c6363cae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7c:d0:f6:48:c1:97:e8:49:66:8e:af:26:e1:
                    14:ba:54:26:db:da:5e:69:39:a0:71:f4:d6:40:10:
                    43:e2:31:7b:1e:aa:34:5c:68:d0:3b:61:a1:11:07:
                    a7:0b:0f:cc:3e:58:6d:2c:0b:b5:c3:a7:22:3f:a5:
                    b5:d7:46:8e:57:7f:c1:ca:3c:e5:25:b4:3f:51:29:
                    94:3a:36:19:58:46:a0:c4:8d:54:d7:51:b7:7f:27:
                    5c:c0:34:48:4d:82:e1:c3:28:69:82:d4:b7:4e:3b:
                    83:7d:eb:fd:65:ce:f2:03:2e:57:91:dc:96:3f:eb:
                    6c:1b:2f:72:12:76:e0:c0:29:17:29:f6:d2:5b:01:
                    13:2c:4b:60:0a:23:85:e4:39:c5:8d:af:94:0a:80:
                    31:0e:5b:d0:86:69:37:cf:f6:a0:ef:d0:92:50:dd:
                    d7:08:9a:25:e9:b7:60:60:06:52:5c:e3:36:c9:7e:
                    a4:cd:6d:7c:65:9f:aa:40:1d:1b:46:dd:71:f9:66:
                    db:60:8f:4b:3b:62:77:e0:d1:9e:d5:b2:01:4a:f6:
                    cf:cf:02:56:a0:01:96:12:e5:89:b3:76:b3:37:63:
                    b7:65:e3:f1:eb:d9:2b:e9:5f:f0:3a:68:b5:eb:13:
                    68:65:46:11:e2:6e:7b:73:96:2a:54:64:25:bc:c9:
                    94:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D9:D7:C2:4D:6E:42:38:35:6D:BD:62:97:C2:0D:B0:C6:36:3C:AE
            X509v3 Authority Key Identifier:
                keyid:E7:35:DE:82:C0:AF:C3:FD:04:87:C3:00:CF:18:A9:4E:F1:79:86:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zXegsCvw_0Eh8MAzxipTvF5hjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/5zXegsCvw_0Eh8MAzxipTvF5hjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/5zXegsCvw_0Eh8MAzxipTvF5hjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:3b:f2:95:3c:58:44:1f:ea:8f:24:25:7a:d6:e0:15:08:bc:
         c5:ba:50:06:f1:b3:7b:6b:68:2f:70:99:2a:c6:24:2a:ec:62:
         fa:fa:f5:03:43:2c:cf:1e:f0:c6:38:5b:62:3c:d5:3c:c7:6a:
         84:ca:64:76:42:db:4e:02:40:29:21:4b:ad:93:1a:22:7a:1a:
         dc:98:00:ec:0e:94:ee:db:22:c3:8b:23:10:4b:f8:50:80:0c:
         c9:52:93:d2:f5:a4:56:eb:2c:b5:a2:06:cc:f4:f2:47:6b:96:
         6d:37:54:61:4d:35:08:5b:1f:53:f2:6f:24:6e:f1:c5:87:41:
         4c:46:59:7f:b1:e6:28:ca:ea:a8:96:83:bd:7b:6c:2e:b4:85:
         0a:70:a6:9f:d3:7b:6c:6e:54:68:d0:84:1d:42:bc:43:a0:76:
         a6:5a:1b:0f:60:ec:c9:d0:c6:0c:d3:09:8a:13:da:ff:18:c3:
         94:5c:76:b9:45:23:21:4e:c0:0c:ef:3b:9d:a8:36:1c:e0:8b:
         ea:a4:b8:47:a7:e4:9f:20:a4:29:da:a1:02:c9:e7:2a:df:b5:
         6e:6b:3b:3e:11:35:51:f0:4a:4c:10:0d:9a:07:ed:73:8f:9b:
         bf:53:2f:e8:fb:0b:25:a7:81:8f:e9:cd:b4:42:11:84:34:62:
         c3:3f:40:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:55:15 2026 by rpki-client