Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/cd57e2-57c7-4cc5-8714-3496c9d794bc/1/5YAuENSvnLelksYbu0sJLqw4htY.mft
File:                     5YAuENSvnLelksYbu0sJLqw4htY.mft (raw, json)
Hash identifier:          dOhEAy9HUSh/DcPvV6DdNpoAQyoaBGnybeeyuDHhxBE=
Subject key identifier:   68:96:31:67:71:D4:DD:53:DA:16:82:94:0B:63:7A:9E:92:E8:F4:53
Authority key identifier: E5:80:2E:10:D4:AF:9C:B7:A5:92:C6:1B:BB:4B:09:2E:AC:38:86:D6
Certificate issuer:       /CN=e5802e10d4af9cb7a592c61bbb4b092eac3886d6
Certificate serial:       01A03F3C36C571AE209B8FC2655B059D835F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5YAuENSvnLelksYbu0sJLqw4htY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/cd57e2-57c7-4cc5-8714-3496c9d794bc/1/5YAuENSvnLelksYbu0sJLqw4htY.mft
Manifest number:          034E
Signing time:             Wed 26 Aug 2026 18:01:45 +0000
Manifest this update:     Wed 26 Aug 2026 18:01:45 +0000
Manifest next update:     Thu 27 Aug 2026 18:01:45 +0000
Files and hashes:         1: 5YAuENSvnLelksYbu0sJLqw4htY.crl (hash: ue7JY6PRfXqbPsOmGPxi+O69RpOnYtG3p9oKeko6MEg=)
                          2: V7uoSOO7xuQ-5mC33-G196G_a8s.roa (hash: tVW62BhhbXSwkMQ25NQGkX/bauxI9OvjWozYd+KEyP4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/cd57e2-57c7-4cc5-8714-3496c9d794bc/1/5YAuENSvnLelksYbu0sJLqw4htY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/cd57e2-57c7-4cc5-8714-3496c9d794bc/1/5YAuENSvnLelksYbu0sJLqw4htY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5YAuENSvnLelksYbu0sJLqw4htY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 18:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3f:3c:36:c5:71:ae:20:9b:8f:c2:65:5b:05:9d:83:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5802e10d4af9cb7a592c61bbb4b092eac3886d6
        Validity
            Not Before: Aug 26 18:01:45 2026 GMT
            Not After : Aug 27 18:01:45 2026 GMT
        Subject: CN=6896316771d4dd53da1682940b637a9e92e8f453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:87:24:ce:a2:71:b4:ab:0c:b8:fd:70:b3:7e:
                    7f:b0:a5:11:44:ea:f4:b4:aa:b0:74:a2:b4:55:83:
                    29:15:7d:79:0c:8f:66:5d:49:08:0c:68:e1:1e:63:
                    ae:d3:fc:dd:9f:d8:f3:aa:67:58:63:f5:3c:51:fe:
                    47:40:55:ce:26:ca:05:c1:4b:33:36:4d:de:74:84:
                    fa:c0:00:b1:db:be:21:bf:1f:6c:5c:4a:a9:4c:1d:
                    83:cb:c5:c9:22:6b:23:09:02:86:60:4d:ce:b9:15:
                    ba:69:f3:18:76:a7:dd:68:55:a3:d8:3e:25:7f:fb:
                    d9:63:1e:a1:d1:26:58:11:fd:37:a4:16:91:38:68:
                    d8:79:44:9b:02:1d:4b:e9:7e:29:15:91:2c:04:00:
                    6f:a1:f9:39:b1:bc:7d:5f:c7:23:1e:de:3d:29:7f:
                    12:97:8c:46:1e:26:a4:7c:95:52:23:77:ec:ce:78:
                    19:d5:dc:a3:2a:4a:e3:41:ff:d8:d9:f9:96:42:15:
                    4c:fe:af:f7:3c:fb:6b:73:03:9c:08:d5:ed:e7:95:
                    34:aa:1a:fc:40:ed:54:59:db:d6:dd:db:96:de:16:
                    f8:3c:6e:1f:95:ad:a6:91:c4:26:dc:8a:cd:39:89:
                    9d:1d:54:82:a6:0e:54:d6:43:29:c2:b3:e9:e0:78:
                    ba:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:96:31:67:71:D4:DD:53:DA:16:82:94:0B:63:7A:9E:92:E8:F4:53
            X509v3 Authority Key Identifier:
                keyid:E5:80:2E:10:D4:AF:9C:B7:A5:92:C6:1B:BB:4B:09:2E:AC:38:86:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAuENSvnLelksYbu0sJLqw4htY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cd57e2-57c7-4cc5-8714-3496c9d794bc/1/5YAuENSvnLelksYbu0sJLqw4htY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cd57e2-57c7-4cc5-8714-3496c9d794bc/1/5YAuENSvnLelksYbu0sJLqw4htY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:ac:ba:1c:6a:50:b1:9b:18:54:63:1e:ca:f7:f9:0e:05:7a:
         99:43:70:2a:78:2b:f6:61:62:7c:12:0e:90:14:c7:43:4f:b6:
         61:57:e7:6e:06:86:24:bd:2c:f1:dd:e7:30:27:88:76:ae:39:
         8d:b4:95:4c:d9:df:a5:3a:33:94:81:13:a1:a0:35:80:eb:85:
         f7:64:36:22:5a:d2:df:56:04:48:f3:76:86:0f:4c:33:95:5a:
         f6:a4:11:2b:95:30:f4:ca:3d:b0:18:9a:70:5e:c5:de:16:28:
         f4:e7:3e:1e:d7:d5:7e:73:58:a5:1a:17:6a:36:d0:61:60:a5:
         1f:85:e2:7e:f5:a3:90:c9:ed:17:7a:39:f3:05:de:c5:6b:3d:
         5d:6e:22:d5:f3:97:55:f0:24:c5:aa:ac:68:1a:fe:16:ec:dd:
         6c:b8:b2:65:2a:65:b6:a0:07:ad:cc:fa:12:e5:c2:b2:dc:de:
         3f:48:f8:86:61:40:20:d7:b0:47:43:11:0e:d1:c5:b3:9c:8a:
         81:a1:12:40:e2:7d:6e:c6:c8:5d:31:6a:75:a2:72:cd:c4:bc:
         ad:6f:5b:0c:8f:02:d8:91:d2:70:5b:50:32:de:94:f0:ad:b2:
         54:9f:72:c5:3e:c3:57:2d:4a:93:39:8b:00:04:61:c1:6a:31:
         e5:42:c9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:53:21 2026 by rpki-client