Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.mft
File:                     5uitxyAU5Xp04wROsWbnYJaPI5U.mft (raw, json)
Hash identifier:          hI1DIRGN0nE+9eWqecTe9y6IO9UFM0TWSG088Wgy8jY=
Subject key identifier:   C1:AF:4B:85:59:DE:DA:9A:53:A0:BA:9B:9E:B1:BE:CB:05:BA:74:79
Authority key identifier: E6:E8:AD:C7:20:14:E5:7A:74:E3:04:4E:B1:66:E7:60:96:8F:23:95
Certificate issuer:       /CN=e6e8adc72014e57a74e3044eb166e760968f2395
Certificate serial:       01A00093A9F64FFE53C09B1A600AE42ACEE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5uitxyAU5Xp04wROsWbnYJaPI5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.mft
Manifest number:          0FD1
Signing time:             Fri 14 Aug 2026 14:01:12 +0000
Manifest this update:     Fri 14 Aug 2026 14:01:12 +0000
Manifest next update:     Sat 15 Aug 2026 14:01:12 +0000
Files and hashes:         1: 5uitxyAU5Xp04wROsWbnYJaPI5U.crl (hash: +tfr6OhEh7hW5vNM1HAX6PGVE2d2rWbQWbh6+R2diP8=)
                          2: vPg4rxX1m6skDbDCiDcsAk0EFcs.roa (hash: YJ2se2VyY3agIp8kMLK7ttHHu7VzNPvUoX36Tb1G48Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5uitxyAU5Xp04wROsWbnYJaPI5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:93:a9:f6:4f:fe:53:c0:9b:1a:60:0a:e4:2a:ce:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6e8adc72014e57a74e3044eb166e760968f2395
        Validity
            Not Before: Aug 14 14:01:12 2026 GMT
            Not After : Aug 15 14:01:12 2026 GMT
        Subject: CN=c1af4b8559deda9a53a0ba9b9eb1becb05ba7479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:64:cb:87:94:52:51:f6:2f:c0:12:c9:d1:af:
                    15:08:94:ee:05:60:f4:7e:e9:d3:ef:00:cb:b5:8b:
                    ea:1b:34:b0:02:02:31:a7:c8:ed:1b:10:f2:21:9e:
                    4c:4e:63:59:e5:1a:e3:00:a0:36:35:31:1c:dd:40:
                    1c:9f:8a:0f:67:5f:eb:19:88:51:f8:86:35:74:0a:
                    24:0c:4f:31:30:36:7f:b0:7f:d5:18:a9:66:94:40:
                    e4:ea:1e:fe:d2:ab:d6:3f:de:9c:87:8b:99:f6:eb:
                    8d:24:0f:7f:ef:e0:18:bd:04:32:25:18:b8:57:c9:
                    81:64:49:3c:94:ae:1c:48:fa:a7:e0:57:a8:9f:cb:
                    82:7d:7e:3e:ef:01:02:c7:d5:d3:2e:3e:39:f8:4c:
                    67:23:bc:bc:b2:5f:40:07:b6:f4:da:83:58:7a:a3:
                    8d:de:39:00:75:46:1c:d7:e4:b8:d1:18:af:3d:c8:
                    49:bd:72:d2:ac:f7:03:3e:6f:3e:24:da:17:2d:d5:
                    60:00:5c:86:09:a0:9a:ab:ea:b6:32:00:c5:4c:f5:
                    fd:db:6b:f8:20:f9:f6:ad:a6:5e:80:7e:8d:a1:09:
                    f1:f6:0e:f1:46:58:e0:67:3d:cd:23:01:12:6a:33:
                    0f:28:3d:f1:96:22:e8:b5:66:e7:0d:82:54:e9:fd:
                    a5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:AF:4B:85:59:DE:DA:9A:53:A0:BA:9B:9E:B1:BE:CB:05:BA:74:79
            X509v3 Authority Key Identifier:
                keyid:E6:E8:AD:C7:20:14:E5:7A:74:E3:04:4E:B1:66:E7:60:96:8F:23:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uitxyAU5Xp04wROsWbnYJaPI5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:40:92:40:b8:f9:98:52:73:d3:64:4f:4f:7c:87:90:a4:32:
         4a:7d:47:38:f5:d8:41:7b:d6:9c:8a:db:be:9e:6c:93:9f:78:
         a7:70:59:06:16:c2:b7:0d:a9:7e:6d:5c:d3:51:d5:9b:cf:52:
         b7:c1:03:b3:33:dc:f5:78:de:ca:29:82:13:40:35:30:9c:67:
         1a:c1:63:cb:07:05:c7:f2:ea:e5:26:68:b1:4c:ed:84:9c:8a:
         45:5c:fa:dd:59:f8:ec:fb:9b:63:23:85:84:6b:89:92:03:07:
         5c:55:0b:fe:69:1d:e8:0a:92:44:80:8e:fa:ee:29:c3:c9:ce:
         a2:06:15:9e:48:14:eb:33:3a:10:c0:50:33:fb:b4:3b:43:fa:
         3a:cf:6a:43:14:8f:8c:f6:40:98:fb:92:a4:da:9e:cc:e1:cb:
         77:a6:74:4e:25:87:15:84:a6:0b:10:8d:f0:29:61:c5:52:a7:
         78:64:7f:d5:4d:a1:09:e9:bd:ff:4e:c1:cc:a0:2b:33:ac:e6:
         dc:49:7c:42:43:e3:c1:77:c4:ab:e0:df:a3:c1:f8:99:28:79:
         58:42:0d:37:81:9d:43:70:ee:ef:bf:f2:12:fa:26:ff:99:93:
         63:1c:73:0d:1a:b6:c3:0d:63:95:07:92:b7:06:34:ee:9f:95:
         b4:9a:70:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:48 2026 by rpki-client