Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
File:                     5oBHj67Itn3f7OY1fPJc8sodhdA.mft (raw, json)
Hash identifier:          EnjqEzKfP6EqGiJj3pVN58Ds6j4v5d+9P/eTmjCXvbQ=
Subject key identifier:   52:BC:B9:B9:BB:85:1A:B8:36:AF:A6:6F:9F:5C:41:C1:22:20:69:9A
Authority key identifier: E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
Certificate issuer:       /CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Certificate serial:       01A0016F2F0DCA6F8F63E2CF39BF967008A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
Manifest number:          1A03
Signing time:             Fri 14 Aug 2026 18:00:58 +0000
Manifest this update:     Fri 14 Aug 2026 18:00:58 +0000
Manifest next update:     Sat 15 Aug 2026 18:00:58 +0000
Files and hashes:         1: 5oBHj67Itn3f7OY1fPJc8sodhdA.crl (hash: uN1sidS9GQDPdD5JSrzdMWayfwqigMf2Mc6AOt2unyE=)
                          2: ymGU-blAl3Eiudw-0pPU5E8cWuM.roa (hash: sR3zp4LyEopkmIvV+/IzzZmry6sELnZ6ai0YOhaDCBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:2f:0d:ca:6f:8f:63:e2:cf:39:bf:96:70:08:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
        Validity
            Not Before: Aug 14 18:00:58 2026 GMT
            Not After : Aug 15 18:00:58 2026 GMT
        Subject: CN=52bcb9b9bb851ab836afa66f9f5c41c12220699a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0e:6c:69:66:dd:fd:1d:a5:84:00:ae:00:5e:
                    3b:12:fc:8e:cd:a6:33:4b:c7:61:11:07:a7:11:45:
                    8e:29:b0:04:8d:83:c1:02:9b:43:f8:ae:f5:93:bd:
                    cc:6a:9c:55:11:72:a8:48:ee:42:d1:50:14:e6:b9:
                    69:52:ea:29:83:38:f0:54:e5:1e:d1:a4:e7:d6:36:
                    95:ee:a8:70:84:d1:30:31:22:c9:c8:d9:a8:d2:59:
                    a0:94:6c:b5:d8:94:8c:a0:f6:52:99:01:47:e3:4a:
                    59:fb:f7:c6:4c:2e:fe:0d:a9:b2:a9:32:11:5f:57:
                    b7:4b:b2:6d:4f:48:bd:e0:59:3e:56:d0:92:72:57:
                    e9:9f:b6:91:dd:d4:39:fa:44:ea:1b:00:32:9e:a7:
                    13:96:3a:40:2f:15:16:60:b6:b0:50:be:71:79:fa:
                    8d:f0:c6:e6:f3:25:35:35:34:a3:0d:fa:f6:5f:1a:
                    62:10:d0:1d:81:81:b7:be:2c:51:60:5d:09:ef:a0:
                    17:64:76:2b:e1:60:e5:8c:3a:83:ac:6f:df:fa:89:
                    55:9c:0b:94:5f:70:6a:1b:77:9f:61:6e:2d:bf:14:
                    51:e7:12:cf:91:ff:aa:cf:83:41:91:00:6c:72:5d:
                    d0:88:58:43:b9:de:6c:30:8b:7b:fe:24:a1:15:ef:
                    c8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BC:B9:B9:BB:85:1A:B8:36:AF:A6:6F:9F:5C:41:C1:22:20:69:9A
            X509v3 Authority Key Identifier:
                keyid:E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:c2:33:40:07:47:24:75:13:1b:35:4f:83:e7:76:c9:f8:92:
         74:af:47:24:d9:a1:9f:08:0e:5d:0e:de:11:1e:f4:c4:f4:2d:
         2f:38:62:cf:a3:d3:7d:74:fa:88:b8:43:1a:f5:9a:4c:cf:89:
         29:40:87:ba:e1:4b:cd:c3:63:df:82:b9:d5:c7:39:14:0d:b1:
         6e:6e:2c:3e:21:72:a3:39:e1:c6:7c:7b:23:6b:27:3f:b7:d1:
         82:15:9a:b6:74:04:3b:3f:32:33:1c:56:dd:a7:f1:1f:68:1a:
         08:63:45:44:1f:41:77:dc:5f:d0:ae:b8:c0:25:6e:b2:94:2c:
         85:4d:16:8f:54:83:1c:16:a5:56:b4:d0:4d:bb:6f:68:0f:36:
         1d:eb:04:dc:e5:d3:7a:e0:2d:57:f4:91:2e:75:d2:2b:5c:06:
         29:38:11:ed:9f:df:e0:38:d7:d3:e2:9c:9d:ba:38:fc:e1:57:
         e6:b6:82:e3:57:e4:59:f2:43:d0:09:1a:57:79:c5:56:c9:45:
         6b:50:94:b3:fd:f2:97:48:05:e0:37:c2:48:b6:d8:28:48:b8:
         23:c2:93:77:92:96:29:84:23:d1:af:fb:05:24:70:03:03:49:
         b2:60:53:be:bf:91:05:4d:ce:39:54:39:41:cd:48:c6:6f:df:
         7b:38:2c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:28 2026 by rpki-client