Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
File:                     00_-5-di-aBv4vR-eh5S2eun-v0.mft (raw, json)
Hash identifier:          pNp4yTVscac19sQmSqbX/yfOlyxqv28UJdk/7quQ09s=
Subject key identifier:   71:31:8D:39:E0:BD:7D:28:D5:1A:F0:7B:AA:86:97:06:A9:CC:24:D1
Authority key identifier: D3:4F:FE:E7:E7:62:F9:A0:6F:E2:F4:7E:7A:1E:52:D9:EB:A7:FA:FD
Certificate issuer:       /CN=d34ffee7e762f9a06fe2f47e7a1e52d9eba7fafd
Certificate serial:       01A0005C202D81F8CBFB7391A2B86C2D46BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
Manifest number:          144D
Signing time:             Fri 14 Aug 2026 13:00:32 +0000
Manifest this update:     Fri 14 Aug 2026 13:00:32 +0000
Manifest next update:     Sat 15 Aug 2026 13:00:32 +0000
Files and hashes:         1: 00_-5-di-aBv4vR-eh5S2eun-v0.crl (hash: T7kV9tEvpZ+wqm3wFt+JU7CmYPk7ju+do95qmJWBIqA=)
                          2: NaC2EXhqguVissfFb8R9GK-pfWk.roa (hash: /tVqb/8j9ibKJcyJbXGCxzBW5/AN/dkNicwbisF6Ij8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5c:20:2d:81:f8:cb:fb:73:91:a2:b8:6c:2d:46:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d34ffee7e762f9a06fe2f47e7a1e52d9eba7fafd
        Validity
            Not Before: Aug 14 13:00:32 2026 GMT
            Not After : Aug 15 13:00:32 2026 GMT
        Subject: CN=71318d39e0bd7d28d51af07baa869706a9cc24d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cb:e1:7c:9a:0d:2b:2d:cf:78:7f:c0:af:2b:
                    19:e0:ee:f3:6d:6c:b5:ef:01:59:58:15:12:db:d6:
                    ff:ac:c1:b2:04:48:88:99:7e:83:7a:1d:05:9a:c4:
                    51:89:46:36:12:82:ef:11:43:ee:da:a8:7c:9b:48:
                    5e:89:e7:68:92:f6:28:25:df:62:29:6d:a0:cb:7b:
                    36:69:4f:c5:7b:9d:b5:93:4e:75:bf:26:91:89:d3:
                    92:5c:e8:a5:21:73:01:0f:5b:9f:d5:8f:93:65:95:
                    56:eb:8a:35:03:8f:ba:53:26:ef:0f:ce:97:d4:a2:
                    4a:f3:38:a1:7f:9a:ba:57:f9:f2:aa:a0:1e:19:ce:
                    97:15:3c:87:c7:a9:99:cf:20:36:00:c7:51:17:34:
                    eb:67:df:04:d8:58:47:e3:6b:06:c7:29:8d:34:e3:
                    cb:fc:b4:41:5c:4e:0a:e4:f8:90:30:b9:79:d2:e4:
                    43:c2:58:76:c0:fe:80:a4:4e:25:0c:c0:40:72:b8:
                    61:ca:8f:de:45:5f:5d:f3:b6:6e:c3:7e:80:de:39:
                    59:fb:38:a1:bb:5e:91:81:9a:76:1a:47:18:01:45:
                    97:f1:0c:1b:04:f0:fa:96:d0:16:af:0c:64:b9:e0:
                    45:ab:28:00:6b:0b:a7:69:21:92:2f:5d:90:0c:98:
                    e8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:31:8D:39:E0:BD:7D:28:D5:1A:F0:7B:AA:86:97:06:A9:CC:24:D1
            X509v3 Authority Key Identifier:
                keyid:D3:4F:FE:E7:E7:62:F9:A0:6F:E2:F4:7E:7A:1E:52:D9:EB:A7:FA:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:0f:67:56:d0:83:81:9b:b8:76:c1:f8:26:8d:13:6b:b7:66:
         69:da:93:ee:6b:25:f7:e0:93:1f:be:62:1a:91:27:97:25:c9:
         53:a2:e3:e0:60:70:50:73:63:6a:c3:ab:08:2b:40:8c:96:39:
         a5:27:d9:a2:34:13:3c:22:f8:4b:05:32:94:12:b3:f4:96:7c:
         d4:b2:28:25:06:e1:d8:cc:26:ed:2e:23:25:99:96:cd:f3:be:
         21:78:30:15:e8:ce:e0:ab:6b:0d:c2:8e:cc:13:f7:6a:45:f2:
         d3:0d:3c:1d:22:92:35:71:4f:cc:73:61:cd:0b:e2:6c:a6:f9:
         57:37:af:d9:cc:48:e9:00:28:ec:b4:88:49:f9:5b:2e:b8:2b:
         48:21:22:e4:c6:58:4b:c5:02:49:48:0f:b2:36:f2:f4:ab:83:
         0f:f1:b2:cb:c4:a8:72:df:a0:c8:c7:dc:f7:d0:6f:e7:be:fc:
         94:58:42:7b:2f:14:7b:bf:76:f2:22:6f:75:3b:c4:c0:8d:08:
         62:4c:6e:78:69:59:5e:b0:4a:94:82:d8:59:2d:e2:d8:34:79:
         83:f5:1e:d3:97:09:e4:95:e6:56:4a:d6:a0:0c:45:f2:21:dc:
         d7:39:fb:5e:d3:55:98:ac:83:c3:a9:95:f4:6c:26:41:5f:97:
         cf:13:0c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:47 2026 by rpki-client