Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/5bWNjuIxueK-BC3fcm4jugopQMQ.mft
File:                     5bWNjuIxueK-BC3fcm4jugopQMQ.mft (raw, json)
Hash identifier:          kSf/nD//o3QlO15Nbzqk/okYcfeDaFD5VTVAyXH9QI0=
Subject key identifier:   E3:21:16:43:4B:17:4F:3F:A8:64:A1:62:A5:1F:9D:5E:D8:C6:BC:F1
Authority key identifier: E5:B5:8D:8E:E2:31:B9:E2:BE:04:2D:DF:72:6E:23:BA:0A:29:40:C4
Certificate issuer:       /CN=e5b58d8ee231b9e2be042ddf726e23ba0a2940c4
Certificate serial:       01A0412A09F44F2CF92CC3E7D1AAC2FDA8DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5bWNjuIxueK-BC3fcm4jugopQMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/5bWNjuIxueK-BC3fcm4jugopQMQ.mft
Manifest number:          9B
Signing time:             Thu 27 Aug 2026 03:01:09 +0000
Manifest this update:     Thu 27 Aug 2026 03:01:09 +0000
Manifest next update:     Fri 28 Aug 2026 03:01:09 +0000
Files and hashes:         1: 5bWNjuIxueK-BC3fcm4jugopQMQ.crl (hash: Fxk5TMSU/PsGiHrmIgqQSh91TXuqXnS0ggiIDnW1YSQ=)
                          2: gVT7WHWOpKoeuWf1YpGh6GktCwk.roa (hash: skIYaxJD3wVcOeWH+NsicqBKZ2I8NxbZ8WrxWRzxFmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/5bWNjuIxueK-BC3fcm4jugopQMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/5bWNjuIxueK-BC3fcm4jugopQMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5bWNjuIxueK-BC3fcm4jugopQMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:41:2a:09:f4:4f:2c:f9:2c:c3:e7:d1:aa:c2:fd:a8:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5b58d8ee231b9e2be042ddf726e23ba0a2940c4
        Validity
            Not Before: Aug 27 03:01:09 2026 GMT
            Not After : Aug 28 03:01:09 2026 GMT
        Subject: CN=e32116434b174f3fa864a162a51f9d5ed8c6bcf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:09:cd:f8:a2:e7:8f:bb:42:03:39:59:f9:81:
                    6d:6e:f6:34:50:95:80:3e:97:52:21:3f:80:a0:f6:
                    33:5d:55:15:81:5b:a8:b3:ef:df:7f:72:0a:1c:95:
                    48:f9:d4:58:b6:36:6e:73:ae:76:bb:9d:4c:89:02:
                    d3:ff:9b:ca:19:9e:7a:20:c9:86:68:09:c4:67:79:
                    42:6b:92:90:af:82:8e:36:58:27:7d:52:80:ed:a6:
                    3b:37:27:9e:d6:64:17:d4:42:bb:97:97:f6:74:86:
                    6e:22:0e:81:12:f8:6c:a3:35:f0:fc:62:c8:89:2a:
                    0b:6a:43:b9:80:ea:70:23:84:f1:da:be:67:34:56:
                    c8:5c:57:d1:d6:e2:0a:b4:26:3c:9c:e4:9c:d1:6c:
                    a3:e0:4f:a9:d9:32:c6:37:8f:9e:68:1b:dc:b3:5b:
                    0d:2a:66:52:f8:a1:ff:72:cc:c1:dd:62:cd:73:22:
                    e9:cd:79:86:72:47:60:62:98:41:98:64:7d:00:8b:
                    b8:4b:8d:27:b6:de:d4:ca:a8:c3:06:b1:84:a7:6e:
                    b0:b4:b0:16:16:d2:ca:b9:21:1a:77:ab:70:6a:a5:
                    39:d4:4f:8a:6e:a8:24:f9:f2:39:a5:77:87:32:b6:
                    e2:91:4b:3e:94:2c:d7:8d:91:69:dd:bd:8a:dc:17:
                    95:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:21:16:43:4B:17:4F:3F:A8:64:A1:62:A5:1F:9D:5E:D8:C6:BC:F1
            X509v3 Authority Key Identifier:
                keyid:E5:B5:8D:8E:E2:31:B9:E2:BE:04:2D:DF:72:6E:23:BA:0A:29:40:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5bWNjuIxueK-BC3fcm4jugopQMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/5bWNjuIxueK-BC3fcm4jugopQMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/5bWNjuIxueK-BC3fcm4jugopQMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:0f:ff:00:55:6b:d0:06:8e:79:74:97:3b:6b:34:68:d1:b7:
         4c:7e:e9:df:7a:ef:03:65:ba:77:2d:b9:95:6e:45:86:08:be:
         ff:23:ad:c2:67:a3:00:0d:11:a9:22:98:f8:0c:5c:8a:2c:a3:
         5b:87:bc:74:e4:1d:3f:65:d9:ca:11:97:8f:55:1f:97:e0:f7:
         d1:98:b6:65:4b:be:f4:18:fb:db:a9:4a:94:8e:38:e4:5e:7e:
         f9:02:08:78:2c:8b:83:c1:f6:7d:f0:db:3a:3f:34:78:9e:cc:
         b1:ce:10:23:76:14:ce:ec:f0:8a:18:29:00:1f:aa:fa:5e:44:
         5a:9e:d0:96:06:a5:05:b6:b3:b7:1f:87:8b:01:82:81:2e:bc:
         ee:0a:bf:f4:92:3a:8b:88:a9:6d:98:23:16:b0:87:99:af:3e:
         55:24:43:96:5f:02:fe:2d:df:66:d2:27:b8:0e:86:15:9a:4b:
         88:2f:38:ba:22:e7:78:5c:76:84:5b:5d:91:de:52:2a:8b:75:
         40:fd:1e:63:3a:42:c6:93:0e:cf:a5:7e:dc:19:fb:07:bd:31:
         d6:f1:8f:4a:65:94:c2:84:4b:3a:52:4f:83:af:62:09:01:81:
         48:c7:15:fc:6e:5d:c7:02:17:e3:c2:c3:26:de:d1:ad:ea:40:
         57:b9:46:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:46:19 2026 by rpki-client