Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
File:                     f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft (raw, json)
Hash identifier:          Sq7VoE9HXXSabFu4KN/6uz2Cx9ddTwxiNJwbgZ/YXXA=
Subject key identifier:   A0:EC:11:B6:70:91:5D:E7:EA:89:E4:4D:90:A1:6B:0B:0A:DE:D8:40
Authority key identifier: 7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2
Certificate issuer:       /CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2
Certificate serial:       01A08AFA25FBE8A2831D3C4CE7B04FB0744B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
Manifest number:          19DB
Signing time:             Thu 10 Sep 2026 11:00:44 +0000
Manifest this update:     Thu 10 Sep 2026 11:00:44 +0000
Manifest next update:     Fri 11 Sep 2026 11:00:44 +0000
Files and hashes:         1: 66GZ7l6QQwcv2bCy6Osuwz05vyI.roa (hash: XdLrvyU74+Rq/gqsf2OvY8CqJfc5BuoyG2y3sfoMhOw=)
                          2: f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl (hash: QJdQo+VdhkxyJS8X/OOev2p3dovY+MQaGLqLz4lwjOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 11:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:fa:25:fb:e8:a2:83:1d:3c:4c:e7:b0:4f:b0:74:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2
        Validity
            Not Before: Sep 10 11:00:44 2026 GMT
            Not After : Sep 11 11:00:44 2026 GMT
        Subject: CN=a0ec11b670915de7ea89e44d90a16b0b0aded840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c0:d0:6b:f3:f8:3a:1e:b0:b4:40:b2:35:90:
                    f9:cd:aa:84:26:bb:1e:77:33:d9:4c:a8:46:85:d0:
                    1e:e4:f2:39:f0:bf:4d:6a:02:ee:f6:e1:b2:e3:94:
                    c5:97:8b:1b:d4:13:7d:b0:e2:51:08:7f:25:b5:47:
                    45:d9:7c:23:96:6b:e8:93:0d:f4:17:03:74:e5:97:
                    cc:b2:84:c5:17:cb:02:77:fb:2c:b5:8f:01:2e:4d:
                    78:1e:2d:8b:1a:f7:21:bb:53:68:4e:ad:fd:85:f7:
                    06:8e:32:9b:70:a0:52:e3:f1:58:90:86:fc:87:e2:
                    6e:b9:55:a9:93:65:6f:c4:e7:32:5f:a0:d7:3a:fa:
                    45:0e:77:30:92:40:d4:be:1d:01:7c:56:16:2a:bb:
                    77:9f:be:76:c2:68:83:c7:14:83:ff:eb:f5:ce:43:
                    20:04:35:ad:6c:cc:75:94:a0:db:18:bf:d1:a6:6a:
                    a3:53:5f:12:aa:bd:5d:7b:7b:67:b5:11:86:06:8d:
                    03:74:c9:53:56:56:53:10:b1:5a:c5:6d:06:3b:86:
                    13:18:d6:a1:19:c2:d3:13:6e:b1:aa:d8:84:52:8e:
                    c0:c0:ae:61:92:dc:3d:73:91:11:34:ca:a6:74:80:
                    a2:c3:f8:10:10:51:2b:32:3c:77:14:4f:dc:c6:6f:
                    ba:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:EC:11:B6:70:91:5D:E7:EA:89:E4:4D:90:A1:6B:0B:0A:DE:D8:40
            X509v3 Authority Key Identifier:
                keyid:7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:ec:7f:d1:20:27:aa:81:1a:a9:e9:d6:8f:0a:4e:22:c6:31:
         c8:db:8b:06:f7:e6:06:23:90:7a:3a:a6:2f:f7:4c:19:4e:6f:
         14:78:c9:a3:5d:87:3c:ee:7b:97:d3:66:81:27:70:12:13:75:
         c3:72:28:db:c2:70:1b:d9:c3:48:1f:19:22:d1:33:17:dc:c2:
         35:a3:62:00:66:36:69:84:65:e0:c2:07:a7:6d:b7:6c:b3:83:
         64:37:76:47:1b:bc:52:5c:55:d3:4a:d5:04:e2:b7:88:aa:fd:
         63:10:07:01:5a:b5:6c:d6:09:e6:bd:ff:a0:4c:d5:cc:f5:71:
         ac:e9:b9:46:96:12:02:84:4c:60:6a:d9:11:fd:6a:9f:a0:a9:
         20:42:72:bd:3f:2f:99:c5:d5:88:51:fe:01:10:4d:3b:d9:de:
         b4:9b:7a:c3:90:94:cc:78:7d:66:3e:e0:e2:99:98:ad:9a:a1:
         90:af:9b:8a:c7:e1:7e:b4:8e:50:47:d2:ba:42:81:38:df:cb:
         41:52:62:14:ba:60:74:29:3e:a4:13:a7:44:90:50:f5:06:4c:
         1e:03:01:04:90:f9:1c:88:6b:b4:39:2b:78:0b:09:46:44:b1:
         f6:8c:9d:3b:0c:15:54:1e:f7:3f:e9:68:3e:87:c8:da:9f:f5:
         82:08:1e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:40:50 2026 by rpki-client