Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
File:                     53bFGYDHUepeMd3ayO9h-1bJcA8.mft (raw, json)
Hash identifier:          XQJFEu2d9Ht+KFii6u2QD97i3z6qpgVVL0QO7Whvzkc=
Subject key identifier:   EA:A2:72:22:8E:7C:4D:82:A8:B3:67:44:26:BD:70:B4:D1:B5:0C:78
Authority key identifier: E7:76:C5:19:80:C7:51:EA:5E:31:DD:DA:C8:EF:61:FB:56:C9:70:0F
Certificate issuer:       /CN=e776c51980c751ea5e31dddac8ef61fb56c9700f
Certificate serial:       01A1178648FA326AC78013611389EE8AB55D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
Manifest number:          06A4
Signing time:             Wed 07 Oct 2026 18:00:38 +0000
Manifest this update:     Wed 07 Oct 2026 18:00:38 +0000
Manifest next update:     Thu 08 Oct 2026 18:00:38 +0000
Files and hashes:         1: 53bFGYDHUepeMd3ayO9h-1bJcA8.crl (hash: zdgjZd/z6RYbThnsjAzwoA2TNAKtgyFPxiBiMfjpdXY=)
                          2: TQEZqwqBvL5LSKJlBpz9ZlwxI2k.roa (hash: h28Y5SLCkXSu2nNw0njBdHdQWxez9aqEeYAyLE+jLNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 13:17:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:17:86:48:fa:32:6a:c7:80:13:61:13:89:ee:8a:b5:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e776c51980c751ea5e31dddac8ef61fb56c9700f
        Validity
            Not Before: Oct  7 18:00:38 2026 GMT
            Not After : Oct  8 18:00:38 2026 GMT
        Subject: CN=eaa272228e7c4d82a8b3674426bd70b4d1b50c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a8:7b:be:de:95:8c:f7:d2:83:d9:25:0e:7a:
                    c2:2d:07:4d:b1:de:7f:60:92:85:de:3e:dc:95:ef:
                    57:0c:c7:e6:8f:91:81:45:d1:7d:83:c4:6b:f7:34:
                    d5:fd:c1:72:b1:99:25:16:f8:3e:93:30:b0:fd:1c:
                    59:6e:83:d7:c1:e6:3f:1c:8b:e6:e0:1b:b7:17:70:
                    ef:c0:42:14:13:db:82:04:1a:8b:0c:b2:63:ed:1c:
                    52:77:a0:ce:7c:f3:59:5e:b8:fd:4b:ff:26:bb:11:
                    d9:55:5a:15:b9:2c:93:57:6d:b4:4f:8c:24:c5:3c:
                    d1:7b:3a:7e:c7:89:86:84:c6:79:83:1d:ab:38:b3:
                    d8:df:98:51:e7:f1:93:fa:79:0b:e4:d5:dc:bf:c5:
                    48:d1:da:cf:74:bc:71:f4:15:4e:f2:91:33:16:b1:
                    76:77:13:f2:e6:18:4b:88:a6:27:a0:13:4e:dc:93:
                    cf:36:b9:e1:75:ee:cf:96:5c:8a:84:c6:bb:72:1d:
                    0b:16:7b:41:5b:a6:3b:38:c7:1e:ea:6e:a3:36:e2:
                    77:e5:95:cf:59:a7:49:4f:73:f2:9a:e4:57:7d:33:
                    4e:0a:30:04:79:ad:57:56:55:3b:4b:bd:c3:88:a2:
                    6a:91:38:70:92:c7:a2:dc:68:5f:0e:4f:a0:37:e6:
                    ca:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A2:72:22:8E:7C:4D:82:A8:B3:67:44:26:BD:70:B4:D1:B5:0C:78
            X509v3 Authority Key Identifier:
                keyid:E7:76:C5:19:80:C7:51:EA:5E:31:DD:DA:C8:EF:61:FB:56:C9:70:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:cd:16:1b:c8:4d:83:a6:8d:d4:9d:d6:ad:5e:24:83:fa:a5:
         fe:0f:ee:f6:49:bc:06:65:eb:21:f0:19:e6:8e:78:9a:07:15:
         19:4e:65:4c:56:e5:f3:7e:39:9f:ec:7d:60:77:0b:26:ae:0f:
         b5:a6:bd:b4:5d:c5:ac:1e:5b:75:15:4a:94:13:fa:8c:6f:37:
         00:ca:a8:ed:1a:e3:13:7b:30:8a:c5:12:de:d2:85:73:bf:48:
         f4:28:58:f6:62:ba:11:ff:79:af:b9:71:ae:55:ba:8a:75:56:
         e7:61:69:ff:ba:5a:f1:75:d6:9f:25:13:18:c2:3c:c6:91:39:
         4b:50:ec:9c:f2:4b:75:30:a6:cd:50:0f:4c:bb:5d:67:f3:98:
         75:6c:f3:b2:5b:06:a2:52:02:7c:9e:90:6b:28:86:ba:e4:aa:
         1c:52:bb:aa:5d:92:3f:32:0f:0d:93:b3:b8:d7:9e:8a:16:b2:
         c3:07:02:64:00:23:5f:f7:de:b7:1c:4d:bc:33:51:8d:a5:60:
         f2:67:aa:ae:df:32:43:1a:54:74:85:16:cf:fc:ff:cf:57:25:
         4d:1c:2e:ca:55:89:db:39:88:8f:5c:98:95:35:4e:e5:fd:3f:
         90:e3:13:d5:b3:6b:cb:82:18:53:bd:9a:c8:59:f5:80:aa:cd:
         9b:68:9b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 22:44:58 2026 by rpki-client