Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
File:                     5U0JIEfb6alooWDzFfq5u5yDVtc.mft (raw, json)
Hash identifier:          4iVtL+3bkCHjxCwxwTEH4UZGsL6C7m4WKMa6PmBlvXM=
Subject key identifier:   C9:36:91:61:FE:9D:96:38:0B:F4:6F:72:E5:C8:DB:BC:AD:3A:D7:02
Authority key identifier: E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7
Certificate issuer:       /CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
Certificate serial:       01A00092FE935AB40F3EF5D4EBF4EDCD581E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
Manifest number:          1A02
Signing time:             Fri 14 Aug 2026 14:00:28 +0000
Manifest this update:     Fri 14 Aug 2026 14:00:28 +0000
Manifest next update:     Sat 15 Aug 2026 14:00:28 +0000
Files and hashes:         1: 3mjUvr0ozA9KcVybdk9dg1L1c6M.roa (hash: l/BbA+peuMfkmg4IEpqF3b3AQLeDvrOYYkuX2oEB8Ko=)
                          2: 5U0JIEfb6alooWDzFfq5u5yDVtc.crl (hash: lJBJRRoa8lQ2dnUFi7m/q4DsbXCAl8J8ByL/ZRz6ujQ=)
                          3: _Jzbksm-JMXJG_vIupQOGd5OWfA.asa (hash: Tb8L6c/yPd6zHGW5vozp+7vssh8lOxc/2tcpUf5JfNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:92:fe:93:5a:b4:0f:3e:f5:d4:eb:f4:ed:cd:58:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
        Validity
            Not Before: Aug 14 14:00:28 2026 GMT
            Not After : Aug 15 14:00:28 2026 GMT
        Subject: CN=c9369161fe9d96380bf46f72e5c8dbbcad3ad702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5c:21:56:52:74:22:3b:6f:c6:73:57:df:e0:
                    f4:18:0d:07:27:8a:4d:b6:8e:1d:8c:5c:17:12:a8:
                    c9:95:48:25:63:b4:0e:42:b1:16:8d:58:ed:75:39:
                    ce:c9:46:ce:d0:11:cf:88:61:6e:7f:8b:b2:d0:3c:
                    49:7b:50:a7:5e:a3:da:f4:0f:aa:b9:66:c0:b3:13:
                    6f:1d:48:61:c5:38:ac:35:2a:68:0a:5e:31:05:25:
                    49:b7:83:f9:4e:ab:5b:d5:ab:c8:73:bf:16:fe:35:
                    06:33:be:ac:09:8f:22:30:5e:3b:63:da:c2:db:53:
                    c1:57:5e:f1:7f:88:a8:22:db:38:87:38:25:5c:5f:
                    7b:6f:2b:c5:23:3b:c0:f6:0d:c1:2d:f3:b7:ca:12:
                    31:c8:59:89:4c:0f:c0:32:8d:bf:b9:61:52:39:eb:
                    1c:0f:ae:e7:54:b3:66:55:64:00:78:ba:c9:cd:c3:
                    2e:9e:f3:04:76:fe:d5:d1:1b:62:35:b8:7c:8b:e6:
                    89:2f:a9:a8:f4:7d:12:19:35:26:5a:9f:e9:c8:55:
                    c2:d4:17:a6:0b:d5:ec:85:1b:c3:c1:9a:a5:7c:dc:
                    41:6b:30:72:ea:2d:1e:b7:fb:f1:70:f2:94:cf:f0:
                    34:86:d7:ff:30:71:f8:7c:c5:f7:61:45:be:c1:13:
                    ef:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:36:91:61:FE:9D:96:38:0B:F4:6F:72:E5:C8:DB:BC:AD:3A:D7:02
            X509v3 Authority Key Identifier:
                keyid:E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:3b:cf:7c:4e:24:2e:da:79:2f:de:7d:40:bb:c2:fb:35:6d:
         a2:f4:93:78:73:54:f2:d9:7f:c6:39:cd:15:41:20:ce:42:9a:
         89:60:0d:93:4a:42:74:7d:b1:59:f0:6f:46:b9:b4:1f:6f:1e:
         8f:c4:1c:3c:26:38:4e:2d:77:b2:a4:df:0b:52:58:9b:99:48:
         5b:9d:b0:37:f1:fd:db:98:95:6b:2f:a1:b8:64:77:05:88:08:
         67:69:7b:55:17:7e:27:bb:01:ca:97:fa:9c:63:75:31:a7:77:
         15:51:c6:0a:53:00:7d:06:95:6b:d7:db:3c:0a:62:7f:03:64:
         b1:a1:fe:42:e2:e5:f6:c0:a5:1c:8c:30:71:8c:d7:f8:be:06:
         86:03:74:36:86:b7:65:b7:3d:2a:74:22:f4:c8:17:fb:0d:95:
         92:96:1c:ab:a8:0d:aa:93:4a:81:8a:d0:78:32:c5:9d:18:5a:
         e9:38:e1:0f:e5:49:bc:ec:65:4b:a7:14:04:93:4d:d6:06:69:
         01:f7:f5:7e:92:9e:7e:f8:bb:57:8c:61:97:d7:61:35:a3:17:
         26:70:28:30:3a:59:95:03:7f:fa:89:90:56:a9:fc:28:51:42:
         15:d3:5a:d0:c5:d3:7e:39:19:11:e4:cf:96:8d:11:7c:31:e0:
         e5:6f:4c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:32 2026 by rpki-client