Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
File:                     5_2MB2tTpxIbVBePW2p-KRNbzOw.mft (raw, json)
Hash identifier:          OuftchgzJLuvPsvyR8BlFcuLXvRfmTJ55RaqS7VvPDg=
Subject key identifier:   27:A6:53:6D:EA:40:3C:18:DC:30:A0:92:00:02:93:A8:AC:44:21:3F
Authority key identifier: E7:FD:8C:07:6B:53:A7:12:1B:54:17:8F:5B:6A:7E:29:13:5B:CC:EC
Certificate issuer:       /CN=e7fd8c076b53a7121b54178f5b6a7e29135bccec
Certificate serial:       01A08D1FB932887F00C57FB8E1A3D2C8F097
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
Manifest number:          04F9
Signing time:             Thu 10 Sep 2026 21:01:01 +0000
Manifest this update:     Thu 10 Sep 2026 21:01:01 +0000
Manifest next update:     Fri 11 Sep 2026 21:01:01 +0000
Files and hashes:         1: 5_2MB2tTpxIbVBePW2p-KRNbzOw.crl (hash: anC1ttke3RD0hBGg3+pTW+1ayCK6htODKbk5pGLZzSg=)
                          2: mcBFodUS0CwQmUkGW0FYxCXI2Ow.roa (hash: jkf/rJLpDQOpzEiYaZvjFupL9lXgwt7xQFwFKnS2W7s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 21:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8d:1f:b9:32:88:7f:00:c5:7f:b8:e1:a3:d2:c8:f0:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7fd8c076b53a7121b54178f5b6a7e29135bccec
        Validity
            Not Before: Sep 10 21:01:01 2026 GMT
            Not After : Sep 11 21:01:01 2026 GMT
        Subject: CN=27a6536dea403c18dc30a092000293a8ac44213f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bb:9f:77:03:b1:22:51:d2:12:bb:af:e4:ef:
                    14:b3:77:ea:71:8c:69:c6:7d:04:85:41:53:28:a5:
                    70:f4:0a:b1:c4:8f:d0:87:a1:77:b1:dd:3f:40:82:
                    1f:d8:a2:f5:37:be:fd:41:34:d2:e2:71:5e:fb:4a:
                    9b:3c:f1:dc:62:3a:73:91:06:f2:64:03:22:c1:2e:
                    22:fc:b6:fa:a5:38:15:ca:ec:4e:e8:c4:2b:6e:45:
                    32:d0:b9:b5:3b:fb:37:53:62:7b:eb:01:87:46:2e:
                    f3:b5:3e:6c:71:4a:bf:a6:7a:b6:73:75:9b:a9:21:
                    8e:8f:a5:0c:cd:af:9d:b7:34:23:87:4d:8e:8a:36:
                    c1:a6:a1:2f:ab:6c:20:2e:fd:29:0c:af:10:0a:71:
                    11:4e:aa:5e:46:0e:49:10:e6:c2:2c:7f:6d:58:32:
                    4a:78:b6:98:c5:42:c6:a3:06:c5:95:58:d6:91:fc:
                    a0:b1:dc:4a:fe:4b:0b:c6:5f:3f:fa:97:b3:d8:97:
                    45:83:68:39:03:f1:97:d8:e9:11:c0:e4:e6:4b:8e:
                    e6:07:fc:34:f4:5d:c6:07:aa:f5:8f:6f:3f:d7:d4:
                    ac:a2:d1:27:52:a4:65:56:91:b1:97:bf:01:02:3a:
                    65:01:43:9e:20:6b:a9:33:ee:ad:53:80:fa:08:e3:
                    a0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A6:53:6D:EA:40:3C:18:DC:30:A0:92:00:02:93:A8:AC:44:21:3F
            X509v3 Authority Key Identifier:
                keyid:E7:FD:8C:07:6B:53:A7:12:1B:54:17:8F:5B:6A:7E:29:13:5B:CC:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:78:a8:27:c5:13:58:39:48:c3:84:0e:50:01:c4:ad:3f:2f:
         67:16:7d:f9:58:9f:7e:74:bc:80:f9:20:dc:66:d8:05:dc:05:
         d6:71:b9:d9:14:9d:e5:60:7b:79:40:4a:23:42:89:7d:0e:fd:
         a9:b8:b3:63:03:fd:50:24:bf:6e:2e:62:96:6a:0a:16:71:ab:
         a6:ac:38:fd:48:00:fe:f6:d0:b0:f8:61:3f:a1:aa:c0:08:50:
         76:e2:0e:9c:f8:00:aa:5b:10:f2:36:62:38:6d:92:18:a9:28:
         80:98:37:42:fd:75:6f:6d:4d:a7:b5:1e:8a:55:92:74:db:ec:
         8d:56:69:77:37:5f:19:80:88:6b:9d:b1:14:71:0e:56:a4:52:
         f0:ea:8f:cc:70:68:50:6b:86:22:bc:84:4b:1b:6f:44:c7:d3:
         d1:5c:9d:2c:a4:53:f1:ef:c5:a5:03:65:89:54:89:dc:3f:20:
         44:2c:1f:57:da:6b:ef:c0:31:e6:33:d2:8e:bf:da:98:02:c2:
         e9:b3:57:6e:01:2f:b3:de:ab:0c:bb:94:10:ed:84:5f:90:ff:
         99:26:b7:a9:0f:08:5e:0c:77:d4:83:c8:de:58:56:30:80:d5:
         50:0a:05:cd:c8:04:1b:a8:dc:24:82:d5:1e:1f:63:8c:5a:ac:
         a9:89:4f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:58:01 2026 by rpki-client