Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft
File:                     5TmMlveEeBsu3CA8dRxOh5h4X6E.mft (raw, json)
Hash identifier:          o1KFuOwCA57QrNx9GasTANQxRtE2gztzD6crpD6dkX0=
Subject key identifier:   D2:CE:1B:78:FE:39:38:94:F0:17:88:87:B1:10:DB:72:10:04:F5:2D
Authority key identifier: E5:39:8C:96:F7:84:78:1B:2E:DC:20:3C:75:1C:4E:87:98:78:5F:A1
Certificate issuer:       /CN=e5398c96f784781b2edc203c751c4e8798785fa1
Certificate serial:       01A0BB0AEF8A39BFB6DD4E42ED0700A66F4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft
Manifest number:          0682
Signing time:             Sat 19 Sep 2026 19:00:51 +0000
Manifest this update:     Sat 19 Sep 2026 19:00:51 +0000
Manifest next update:     Sun 20 Sep 2026 19:00:51 +0000
Files and hashes:         1: 5TmMlveEeBsu3CA8dRxOh5h4X6E.crl (hash: EWoDRdbGkZonlV+CfYLg0mgzT7heiLiRhr9jQeLAOFc=)
                          2: TlB35RpoAYh9JfFwZIdprGXzgU8.roa (hash: XzBThBrqkP0celJU8AjVVtRAPROC88dRjyzplXxnsx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 15:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bb:0a:ef:8a:39:bf:b6:dd:4e:42:ed:07:00:a6:6f:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5398c96f784781b2edc203c751c4e8798785fa1
        Validity
            Not Before: Sep 19 19:00:51 2026 GMT
            Not After : Sep 20 19:00:51 2026 GMT
        Subject: CN=d2ce1b78fe393894f0178887b110db721004f52d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:99:c1:a7:87:af:77:a4:34:13:1e:ca:7f:1c:
                    a0:de:6c:87:af:52:a6:5e:09:fb:df:2b:56:1a:6f:
                    aa:d5:7a:bf:f3:15:fb:cd:1e:73:32:4e:aa:37:0f:
                    2b:2b:b6:bd:90:03:79:ae:7d:cf:eb:21:47:f6:07:
                    d4:06:43:e5:bc:be:1b:89:f0:c6:e1:25:0a:c5:62:
                    33:56:17:f1:65:00:63:9e:f0:72:02:f7:3f:5a:62:
                    d0:81:15:4b:19:c4:45:dd:4c:ed:66:ae:40:23:d8:
                    8e:41:c8:d9:0a:a2:ba:80:1e:c1:d6:9b:91:98:5f:
                    34:47:5c:bd:14:9c:76:27:cd:43:53:2f:6c:6e:22:
                    a8:4b:e1:b8:fe:31:7c:7a:65:d6:fb:75:00:5c:4d:
                    5b:bc:af:ff:ac:92:f6:7e:6b:e3:f8:43:a8:9c:fd:
                    e9:6e:b3:4d:3d:74:1f:d9:cb:4c:d4:55:64:ab:96:
                    fb:54:5b:ca:31:11:8f:8f:87:5d:9d:9c:c5:de:05:
                    64:a2:6e:78:cf:ce:7f:96:35:1e:56:77:6c:91:1b:
                    85:10:d2:55:ce:d4:fb:df:80:89:34:bd:6a:a2:42:
                    ac:8c:30:dc:a1:74:4b:31:64:b9:4f:79:37:35:5a:
                    ad:f7:92:f1:23:90:19:86:44:29:b9:c7:bc:0c:01:
                    0f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:CE:1B:78:FE:39:38:94:F0:17:88:87:B1:10:DB:72:10:04:F5:2D
            X509v3 Authority Key Identifier:
                keyid:E5:39:8C:96:F7:84:78:1B:2E:DC:20:3C:75:1C:4E:87:98:78:5F:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:0b:2c:8d:93:f1:49:94:98:21:13:50:17:1f:6b:a3:e0:e0:
         78:18:4b:21:bc:50:d2:17:50:98:dc:c6:14:5a:a4:0a:c8:28:
         b0:37:34:20:2d:e7:5d:ef:09:f6:7e:18:fc:ae:42:f7:6d:0b:
         52:f0:9c:c7:3d:0e:36:8d:ae:cb:db:ac:be:67:0c:ba:47:4b:
         51:5d:95:7e:4a:5a:cc:28:2f:af:5f:a2:7b:49:bd:fc:e3:34:
         61:eb:43:e2:2c:db:55:3e:4a:01:4a:da:00:c7:28:d5:8f:87:
         18:f5:14:8c:1a:e9:dc:8e:39:d6:9a:7e:d4:93:13:1d:86:94:
         e3:36:36:a9:33:05:b6:e4:68:18:87:fe:4f:e8:18:17:fe:e3:
         e9:31:25:69:44:66:77:38:f8:08:b7:67:71:42:91:66:12:26:
         a6:da:a6:04:aa:e8:6d:ae:48:ab:19:4d:66:e6:69:0b:17:39:
         9a:9f:e1:76:0a:a2:ea:0a:15:9e:92:f8:cd:14:68:5c:ab:9e:
         4b:66:dc:e8:47:af:ce:7b:22:f1:50:f7:06:b0:1d:95:39:14:
         7a:81:66:19:16:7e:72:56:8c:94:30:2b:db:5f:a9:f1:f9:d6:
         53:0c:f7:32:3c:3c:0b:ce:ef:04:47:cc:3f:57:b8:3a:73:18:
         0a:b6:8f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 23:26:34 2026 by rpki-client