Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
File:                     5eAzVGZsTLKr_VFBHspdUksNW-U.mft (raw, json)
Hash identifier:          4/QvC6cZSxWYNFix3vEPw0r0cLV0oU9mcKnqE3zHguw=
Subject key identifier:   7A:55:21:38:98:D1:B4:C9:DD:CE:16:A3:81:B8:AF:36:75:E3:3E:CD
Authority key identifier: E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
Certificate issuer:       /CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Certificate serial:       01A0FAFCCFFC5A7DAA29B70F322666A3370A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
Manifest number:          023B
Signing time:             Fri 02 Oct 2026 05:01:07 +0000
Manifest this update:     Fri 02 Oct 2026 05:01:07 +0000
Manifest next update:     Sat 03 Oct 2026 05:01:07 +0000
Files and hashes:         1: 5eAzVGZsTLKr_VFBHspdUksNW-U.crl (hash: vqJ6bdPBl6aiRdi8i+3EPJeKU5btQ1JXFjLesRKqSsw=)
                          2: T8WzAwgcqS-HDNz8qD_PiJ9i1Lg.roa (hash: IxwvcdTTbT0u6zZgntcEj3dQZBt2OszUAAD+QbaTz/M=)
                          3: brjSKEHmfS6lAMZx6RJuTagMq3c.roa (hash: N5y4NLLWfawQoJGvUgnTmwBCz+OJoUCNvs+6Sj/iEA8=)
                          4: fJYDn_pM1CSQCC01Q2M0CeYkZCg.roa (hash: 3pjRJpzPeP7KArmEEYHuE7xp3oBZ3Ocxe8kqq5qbxYw=)
                          5: hzLBg2vn0pE5jX4DAd-LZ-rg8ds.roa (hash: nkYwxfNlitpDmcR0QyJN8VtRdB1BcW9INahVEm4qvzo=)
                          6: lbM3HE18tP1n-8xfwSm36I3Kjwc.roa (hash: /lryypZYZIxOV9l6lRHbqYF9Oz+FGrmF3FgDwOxoEYQ=)
                          7: o548aWjyv_hfBdpA1bVFK3wrNP4.roa (hash: zUyBvFaEHdugGyGKIt6bIfLj0Nkxf9FI6lzJjaoR1s4=)
                          8: tNc8lG4ab6VMRM9eqy1DmQopJKk.roa (hash: /q+q6GJme4wDgpdO0tKuEImt+ywsENNfM3j/DZS/xgE=)
                          9: xqkIGkwCiGI9_ROxA-753BCeMSo.roa (hash: 6Wbd2frdsClpbkut2snIQAUUZt2yqFLdakRBdxOpvPI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 05:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fa:fc:cf:fc:5a:7d:aa:29:b7:0f:32:26:66:a3:37:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
        Validity
            Not Before: Oct  2 05:01:07 2026 GMT
            Not After : Oct  3 05:01:07 2026 GMT
        Subject: CN=7a55213898d1b4c9ddce16a381b8af3675e33ecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e6:41:bf:16:c9:ae:17:eb:40:42:72:f6:42:
                    4f:59:3d:14:91:46:a9:33:f0:97:13:0d:87:38:70:
                    bc:44:d2:ab:e2:f6:33:bb:cd:66:2a:86:36:b2:b3:
                    04:ad:75:be:3b:c6:34:eb:43:2c:36:9e:52:43:1d:
                    30:15:38:1c:8f:2e:cf:d4:fb:7d:00:a2:cc:ae:19:
                    7f:73:8b:f5:4b:e8:4f:06:d4:c2:74:9c:3e:20:9e:
                    60:99:a4:41:22:c1:29:29:88:f5:bb:b8:cc:22:31:
                    b9:f5:94:d9:ce:06:e9:62:1a:70:8d:e8:9f:fe:8a:
                    b0:9d:98:38:39:10:0a:06:e5:5c:31:f1:c3:a6:6b:
                    38:bb:e8:bf:c8:5f:1c:32:9f:43:b9:ce:15:58:6d:
                    93:ba:b9:0a:79:79:4d:88:f5:b9:eb:de:77:b9:6d:
                    ed:10:45:6d:84:2e:94:10:da:fc:94:06:c0:4f:4e:
                    74:8b:d7:09:0d:af:51:6e:9a:3c:cd:d0:0b:55:bf:
                    c2:43:b6:38:d5:7c:1e:f8:63:43:ed:14:97:98:82:
                    42:0f:53:41:21:97:ea:a3:1e:36:66:38:6c:1b:54:
                    20:03:a6:2a:0d:73:35:c7:d8:b8:2e:58:63:be:19:
                    7c:c7:9a:af:4a:73:67:7a:04:30:05:39:1a:ff:f6:
                    f0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:55:21:38:98:D1:B4:C9:DD:CE:16:A3:81:B8:AF:36:75:E3:3E:CD
            X509v3 Authority Key Identifier:
                keyid:E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:4d:8a:2c:a4:e7:68:4d:1b:f1:78:01:97:59:7e:ee:4a:00:
         f6:d9:6f:d3:24:00:e1:5a:df:5d:25:b1:b1:c5:0c:49:00:79:
         2c:63:e1:ec:27:61:11:9b:47:9f:04:6c:bf:4d:9c:f0:7a:2c:
         5c:0c:1b:81:04:ae:1c:d5:e7:c1:4b:28:6a:b9:f9:d2:78:f0:
         ae:56:48:1a:4c:f7:e4:bd:83:41:a3:fe:1d:14:8a:ec:38:9a:
         f1:a8:e7:99:b2:42:ab:df:ec:8c:fe:d3:c7:f3:b4:7b:44:d8:
         82:7d:50:bc:7a:e9:3f:f2:af:d1:5b:48:fd:8a:2a:4e:2e:0b:
         16:cd:d0:93:1c:00:14:f3:2b:4d:8a:40:e7:b6:3e:8c:a2:c5:
         8d:6f:27:e8:30:ab:62:8a:0c:65:13:d6:92:9e:ca:6b:96:7c:
         ab:37:c4:9c:7d:9c:f2:c1:47:65:a9:19:ae:2b:1e:3b:85:f1:
         43:41:04:ea:98:11:c4:f1:c0:c5:20:1b:65:f9:86:22:d3:03:
         16:bf:c9:fc:17:a7:56:5e:fc:76:9b:d2:d7:57:3e:c9:e3:cf:
         d9:d3:ce:b8:0d:21:69:9f:98:b5:7f:f1:79:7c:84:26:5a:ca:
         15:f1:4f:55:51:ef:c4:71:c8:c1:11:1e:f7:c5:b8:45:84:fd:
         f5:b9:9f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 14:55:07 2026 by rpki-client