Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
File:                     5UTiZtTrnMfe0pLBKwaxynvOp3g.mft (raw, json)
Hash identifier:          heiPBIls0PWLWr55mkleGZlKDOE5Yw4MFVTqgWmNawk=
Subject key identifier:   58:AC:90:ED:14:A1:05:F7:75:BD:11:53:2D:8C:9B:C4:94:6D:BC:58
Authority key identifier: E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78
Certificate issuer:       /CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
Certificate serial:       01A00137E64E14E9A170E2CC46EA5328F20C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
Manifest number:          1A03
Signing time:             Fri 14 Aug 2026 17:00:35 +0000
Manifest this update:     Fri 14 Aug 2026 17:00:35 +0000
Manifest next update:     Sat 15 Aug 2026 17:00:35 +0000
Files and hashes:         1: 5UTiZtTrnMfe0pLBKwaxynvOp3g.crl (hash: ggR0CpAsaaDtvLWfAPmqzaitqPwq0154sz25y3jzqUY=)
                          2: q6jiQ8kIIOAVEl2Xp2qX5_pMoSI.roa (hash: nTyqp5QiWNzkKcVcQsp2jGxyBaOXuQpq1p5YA426WVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:37:e6:4e:14:e9:a1:70:e2:cc:46:ea:53:28:f2:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
        Validity
            Not Before: Aug 14 17:00:35 2026 GMT
            Not After : Aug 15 17:00:35 2026 GMT
        Subject: CN=58ac90ed14a105f775bd11532d8c9bc4946dbc58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c2:39:bc:30:d1:d1:9b:87:8b:7d:75:50:2b:
                    90:38:61:78:16:e5:a2:f2:1c:67:1b:35:5e:a1:cf:
                    4d:54:ef:9e:23:13:51:7e:ba:96:52:40:4b:25:15:
                    55:81:26:81:4e:14:8f:e1:16:d5:74:19:46:5b:34:
                    0b:8f:20:39:b7:1d:1d:13:eb:fb:3d:20:28:fb:77:
                    bb:28:0c:61:bf:42:17:93:9e:01:f1:e0:ee:63:de:
                    27:b9:34:4c:4b:11:51:87:05:21:f1:76:8e:bf:56:
                    12:68:57:9e:dd:02:fc:4e:9c:16:3c:88:0b:2f:eb:
                    83:75:d2:0d:55:6a:04:cb:78:5e:fb:81:8a:95:6b:
                    98:eb:d4:fc:a1:af:5d:4a:c6:3e:1c:31:00:ac:c2:
                    5e:b3:af:93:5f:dc:54:3a:bf:0f:b8:cb:c9:aa:98:
                    27:ba:38:71:88:64:58:df:8b:13:79:04:6b:76:a1:
                    e4:31:50:9f:87:42:a4:78:b3:bd:f2:dc:a9:46:b8:
                    c6:d7:a3:0d:83:cc:2c:ea:78:dc:18:8c:4d:04:d7:
                    62:fa:cc:7b:68:16:fe:b0:8e:92:4f:b9:40:36:49:
                    79:6e:4a:af:66:ac:51:46:bc:f3:13:35:70:aa:04:
                    ba:a2:e2:f9:36:26:d5:27:36:08:b8:12:5d:03:90:
                    2f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:AC:90:ED:14:A1:05:F7:75:BD:11:53:2D:8C:9B:C4:94:6D:BC:58
            X509v3 Authority Key Identifier:
                keyid:E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:9c:60:39:45:de:f6:f5:b9:df:b3:32:7f:2e:1c:77:ee:1d:
         c5:2f:4f:8e:2a:c4:c1:6b:5f:75:3c:d3:2f:6e:74:e0:48:f2:
         13:11:92:c7:f3:a7:16:e2:6a:2d:4d:21:91:ef:85:74:fd:c3:
         b8:b2:3b:48:b8:df:95:3d:8e:ec:6b:a6:7f:6c:9e:6f:4f:5d:
         ab:b1:6e:1b:ed:93:7e:10:2f:1d:a9:8e:3b:ca:ca:85:59:64:
         3f:78:e3:98:e7:7c:cc:db:b5:95:c0:ea:20:57:c4:b6:a4:d6:
         ed:fc:7b:f9:1e:2a:a2:4c:88:be:ca:05:91:1f:b3:d0:99:58:
         bf:ad:17:50:97:e0:be:8f:ce:ff:e2:b6:72:b8:7a:5a:60:53:
         b8:08:e2:06:12:8c:65:9e:6b:99:5c:a6:ae:5e:e7:60:7b:bf:
         40:84:d9:56:e9:fb:68:1e:8b:bc:89:60:cb:9e:51:25:07:b5:
         f4:50:72:9a:41:bb:bf:7c:5b:ad:6e:01:b7:6b:d8:3d:db:cc:
         46:ef:e1:24:b1:5d:48:65:2a:1e:2c:fc:7d:ab:7d:52:29:0c:
         fc:e1:84:cb:b8:1d:78:69:44:47:96:24:a2:e2:ff:03:e2:32:
         ae:a2:7f:a8:77:9b:6d:f5:fb:a5:00:b8:d5:f9:d3:64:10:ac:
         b0:3a:ee:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:54 2026 by rpki-client