Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.mft
File:                     5e61yh0hW8msLLQNHum-53UPn1c.mft (raw, json)
Hash identifier:          tQ9OhfELfZPNYsrwrC0NVju8CiiAE/hDkXjaBk58IlE=
Subject key identifier:   C7:30:72:05:8C:B3:AB:D5:71:61:98:F4:E9:CB:CA:48:FD:E3:A8:6A
Authority key identifier: E5:EE:B5:CA:1D:21:5B:C9:AC:2C:B4:0D:1E:E9:BE:E7:75:0F:9F:57
Certificate issuer:       /CN=e5eeb5ca1d215bc9ac2cb40d1ee9bee7750f9f57
Certificate serial:       01A001702417A4D30242B2454B8D049CC56D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5e61yh0hW8msLLQNHum-53UPn1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.mft
Manifest number:          095C
Signing time:             Fri 14 Aug 2026 18:02:01 +0000
Manifest this update:     Fri 14 Aug 2026 18:02:01 +0000
Manifest next update:     Sat 15 Aug 2026 18:02:01 +0000
Files and hashes:         1: 5e61yh0hW8msLLQNHum-53UPn1c.crl (hash: inzmbPRa2tcfAPngD0NDEtx1xr+OGTJOJxurkMkak30=)
                          2: 8E3KQn28QEnX6E9rSlznvHJTpOk.roa (hash: 2FxfSHabUGnOaZPwXMI3ZNNQShrnuJ5A0V2bbWoD1Z4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5e61yh0hW8msLLQNHum-53UPn1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:70:24:17:a4:d3:02:42:b2:45:4b:8d:04:9c:c5:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5eeb5ca1d215bc9ac2cb40d1ee9bee7750f9f57
        Validity
            Not Before: Aug 14 18:02:01 2026 GMT
            Not After : Aug 15 18:02:01 2026 GMT
        Subject: CN=c73072058cb3abd5716198f4e9cbca48fde3a86a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e2:40:73:40:fc:15:46:33:b5:bc:32:99:3c:
                    4f:4d:87:05:03:46:31:9e:fe:7f:20:6f:20:4d:d7:
                    ed:e7:d7:db:ec:e7:4b:e3:9d:55:2e:2e:ca:24:3e:
                    65:59:0a:1c:ed:fd:71:ab:f2:5a:6d:16:c3:0c:d3:
                    5b:e9:7d:4f:8c:c5:bd:5e:e5:aa:13:15:64:26:9a:
                    65:a4:df:e8:b1:f0:cd:01:54:f4:84:0b:85:a0:3d:
                    a3:6f:8c:c4:7a:0c:0d:95:5e:41:c8:f9:c6:a7:27:
                    0e:19:e1:27:29:52:da:6e:d5:00:1b:21:80:11:e2:
                    c6:7d:ca:47:13:33:c4:4a:a0:d5:e2:77:aa:e5:7d:
                    d2:f9:af:19:6d:36:33:e6:ec:e8:63:7a:49:68:7b:
                    50:f2:a0:e3:60:5e:14:0f:7a:45:e6:eb:fe:ae:07:
                    3e:3b:d0:d2:d6:82:9b:f7:30:0a:b5:d5:af:6b:01:
                    85:19:e8:b7:67:08:3b:91:0e:1f:dd:45:f1:7a:68:
                    e0:19:5e:76:87:5a:1b:2f:c8:2c:49:f7:ce:70:41:
                    69:27:4c:ec:9d:ff:d8:e5:3d:b3:b6:be:c5:9a:0d:
                    df:a8:4f:8d:f6:fd:39:75:5b:b1:fb:3b:94:c6:2f:
                    c0:a4:2e:40:bc:ef:4f:c5:f4:ff:2c:70:51:c1:db:
                    bb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:30:72:05:8C:B3:AB:D5:71:61:98:F4:E9:CB:CA:48:FD:E3:A8:6A
            X509v3 Authority Key Identifier:
                keyid:E5:EE:B5:CA:1D:21:5B:C9:AC:2C:B4:0D:1E:E9:BE:E7:75:0F:9F:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e61yh0hW8msLLQNHum-53UPn1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:c4:9d:cc:6a:56:fe:1d:77:8f:f3:ee:cb:59:bc:93:7a:8e:
         4e:62:9c:fc:13:9f:22:56:21:71:23:45:f4:44:4c:66:5b:52:
         b3:be:2f:94:6d:4a:5f:e1:81:1d:0f:d1:85:d8:72:ff:72:94:
         13:e5:89:d0:1c:2a:08:13:c9:0f:b5:a4:1f:1c:75:ae:05:9e:
         71:76:73:8f:24:36:53:24:a4:fd:cb:0f:ea:4c:05:c1:d6:7c:
         68:50:01:1b:80:bd:d1:dd:e4:30:42:63:5e:86:4c:77:40:c0:
         5a:da:f8:50:a3:a5:05:db:fd:40:1b:68:fa:80:00:e8:8a:b8:
         8e:64:6f:af:d7:b5:1e:0a:91:c1:37:61:4e:e3:ef:b0:f9:b8:
         61:53:06:b8:d4:09:3b:c8:9c:46:06:17:7e:45:6e:8d:78:ce:
         29:79:d1:50:51:01:3d:db:41:6c:5a:f6:43:b8:f2:94:67:76:
         75:09:9b:1e:ca:5e:30:1f:f2:45:be:4a:bc:b6:f7:91:32:63:
         5b:c7:dd:9c:dd:aa:53:46:49:86:c2:74:1f:51:45:77:c8:9b:
         d0:2b:0a:99:e2:45:6e:f9:83:c2:53:ea:73:97:6b:1c:d4:58:
         2b:fe:09:cd:37:6b:81:00:c1:c9:a8:8b:60:2a:9c:25:8a:ac:
         c7:5b:6e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:21:09 2026 by rpki-client