Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.mft
File:                     5rXcl7gB-g_7kwBcy_TWcnt1GSo.mft (raw, json)
Hash identifier:          uzZ4zYNFUZC+t1vxRHtJNjBv5uEmfmxMLJWeQPcWTrQ=
Subject key identifier:   2B:60:84:C8:05:81:4C:41:46:90:DE:59:81:DA:EB:B5:2B:54:E8:CE
Authority key identifier: E6:B5:DC:97:B8:01:FA:0F:FB:93:00:5C:CB:F4:D6:72:7B:75:19:2A
Certificate issuer:       /CN=e6b5dc97b801fa0ffb93005ccbf4d6727b75192a
Certificate serial:       01A06E399E854F5CA8E687EFD4857DAB1C8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5rXcl7gB-g_7kwBcy_TWcnt1GSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.mft
Manifest number:          0260
Signing time:             Fri 04 Sep 2026 21:01:04 +0000
Manifest this update:     Fri 04 Sep 2026 21:01:04 +0000
Manifest next update:     Sat 05 Sep 2026 21:01:04 +0000
Files and hashes:         1: 5rXcl7gB-g_7kwBcy_TWcnt1GSo.crl (hash: yW7ey1xSueh8TSeUBwcZ/XBHXy87ujKmQq7501RPvOM=)
                          2: A72vNYtrAqZwGwVdWSRVIoELlNU.roa (hash: HjnhtlX3seiaGTReSxKDFImzMbn8Z77fXG9LnqCmXhA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5rXcl7gB-g_7kwBcy_TWcnt1GSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:39:9e:85:4f:5c:a8:e6:87:ef:d4:85:7d:ab:1c:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6b5dc97b801fa0ffb93005ccbf4d6727b75192a
        Validity
            Not Before: Sep  4 21:01:04 2026 GMT
            Not After : Sep  5 21:01:04 2026 GMT
        Subject: CN=2b6084c805814c414690de5981daebb52b54e8ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:47:9c:3c:b0:4b:da:6c:6c:e9:07:69:c0:00:
                    f9:b6:53:33:ee:7c:70:af:7c:42:d9:6e:d3:5a:2b:
                    00:34:70:33:b8:69:4c:92:08:a2:aa:ae:50:a8:b5:
                    aa:99:4f:68:0d:5d:4f:6e:ed:4c:13:64:46:06:e4:
                    a9:34:8c:75:a6:f8:87:ba:52:c6:5d:f3:32:b4:9e:
                    7d:78:4f:de:4a:5f:d5:9e:8a:da:df:d1:cb:2b:94:
                    c6:fe:b1:d8:c6:fa:25:03:48:df:54:e8:8d:73:5a:
                    99:3a:7e:76:a4:c9:96:f2:5a:6f:eb:18:c8:03:4d:
                    fc:c9:05:5a:7b:86:93:d2:1c:6a:ef:59:c6:2e:a1:
                    fe:ad:91:f7:e6:d1:d6:5d:50:bf:bb:ea:ae:87:04:
                    d9:0b:01:f2:6d:76:0f:67:45:7f:88:1d:17:4e:ef:
                    48:6b:df:ae:75:5e:43:34:31:20:14:60:f6:7c:0e:
                    1a:d9:8f:25:8c:bd:59:9b:e1:0d:f1:49:06:ff:af:
                    35:8f:68:f6:05:55:d2:e6:7b:90:23:20:51:72:f2:
                    ed:8e:dd:f3:9b:e9:10:d7:01:53:28:a8:39:8e:5f:
                    ff:1a:24:0b:ec:aa:6b:73:db:45:00:ff:b2:8c:9c:
                    4f:d3:8e:83:50:35:26:2e:32:92:d7:bb:27:48:8c:
                    81:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:60:84:C8:05:81:4C:41:46:90:DE:59:81:DA:EB:B5:2B:54:E8:CE
            X509v3 Authority Key Identifier:
                keyid:E6:B5:DC:97:B8:01:FA:0F:FB:93:00:5C:CB:F4:D6:72:7B:75:19:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rXcl7gB-g_7kwBcy_TWcnt1GSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:10:5d:80:c2:fd:ba:a3:bf:58:89:2f:e6:7e:cd:6f:25:dc:
         ed:c8:91:2b:18:4c:18:f1:57:3d:4f:4a:65:da:2b:ad:bf:43:
         92:23:24:bd:2a:6c:13:c1:d4:58:35:20:bd:da:19:f2:a3:8a:
         28:b1:13:78:b2:9d:5d:de:e6:f9:8e:78:fa:a4:a6:8f:1b:64:
         80:5d:d5:07:d9:63:25:89:df:cb:05:fc:73:8e:22:74:8a:c9:
         e2:4c:71:ac:94:67:a1:c8:6a:ec:e4:3e:1c:c3:3c:54:e1:35:
         0a:e1:73:60:97:49:d3:19:f0:bd:d6:31:e5:76:2c:5c:35:7a:
         64:89:bb:67:0a:b3:ea:4d:f6:7e:10:a3:53:b5:38:dd:50:33:
         e1:2b:c6:34:17:f9:93:a8:72:f3:f4:5c:b1:ec:58:36:5f:77:
         e9:0f:23:fd:63:24:55:93:ed:da:e9:b4:a2:66:89:a6:99:ff:
         f9:41:5f:e7:20:7f:0d:5f:a7:73:be:a1:cf:80:5d:06:0c:16:
         e3:22:ec:0c:3a:f3:96:f1:39:bf:2f:45:fe:20:74:bf:3e:3c:
         c6:20:7c:d2:0c:2d:7a:83:98:b0:c0:af:5f:f5:6b:82:9c:ff:
         52:a9:d4:8b:06:f1:83:8a:c0:f0:d7:0a:b5:0e:68:34:6b:ca:
         28:1a:10:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:45:26 2026 by rpki-client