Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
File:                     5NsDAf4kYcbeP3GNhHy13HwAstI.mft (raw, json)
Hash identifier:          ZTg4zn10Ea9o4pSJmxX74Y0GQ5UZq1ZSBeOwN4k2hIs=
Subject key identifier:   3A:72:B5:3F:21:9F:BC:86:48:19:6A:09:F9:7A:2F:F3:CE:C4:59:08
Authority key identifier: E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
Certificate issuer:       /CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Certificate serial:       01A13E5D45942AEE3FEB26C186AD5C1571A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
Manifest number:          168B
Signing time:             Thu 15 Oct 2026 07:01:02 +0000
Manifest this update:     Thu 15 Oct 2026 07:01:02 +0000
Manifest next update:     Fri 16 Oct 2026 07:01:02 +0000
Files and hashes:         1: 2_kKsluZPpTjZPOr9nXKxoDbv6o.roa (hash: oJRwhRHFVN4UC8uIJgD85cpNy3gmR91KVrX4wcGTHWc=)
                          2: 5NsDAf4kYcbeP3GNhHy13HwAstI.crl (hash: Ny8Az9WOmPgK4dcsiiU88KoWPvm/of554JFgLN+STuQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 07:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:5d:45:94:2a:ee:3f:eb:26:c1:86:ad:5c:15:71:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
        Validity
            Not Before: Oct 15 07:01:02 2026 GMT
            Not After : Oct 16 07:01:02 2026 GMT
        Subject: CN=3a72b53f219fbc8648196a09f97a2ff3cec45908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c7:0a:45:4f:ee:bd:13:6c:64:7e:b4:03:a5:
                    64:d1:e3:6d:14:93:5f:6c:08:eb:66:f4:8c:79:2e:
                    4e:90:14:ee:93:e7:9f:b8:21:31:8e:5c:a3:b8:0d:
                    10:ce:d5:5b:d8:6f:4e:7a:06:27:20:72:48:4a:c7:
                    6c:38:19:98:9f:e6:f4:6c:f4:c7:a5:7a:b9:60:6a:
                    c5:be:dc:e4:50:06:37:b9:27:82:48:90:66:73:c5:
                    ef:be:b3:e0:87:68:14:95:42:a4:62:92:25:ec:93:
                    63:d3:05:af:a2:af:00:98:b6:dd:94:b9:f8:27:20:
                    c5:37:00:b2:41:f0:00:34:2f:a3:8b:69:65:e9:a4:
                    ea:53:f4:88:ae:fc:3a:05:cc:d4:59:c5:65:8b:ec:
                    01:f3:1b:48:46:12:b2:d3:6e:c4:c9:45:3b:8f:b9:
                    28:7d:51:91:f7:4a:95:b8:ba:1b:f6:a1:82:45:2e:
                    c6:bd:9a:af:be:77:de:57:2e:b5:0f:97:94:5b:4d:
                    fd:3c:c8:53:e4:ef:f3:6b:40:c9:ca:a8:f3:d1:c0:
                    48:6e:a8:5d:07:3f:4f:a8:f0:fd:4d:80:e9:bd:bf:
                    aa:68:64:cb:11:76:ac:82:3a:0f:d9:48:6b:61:cf:
                    a8:e4:b0:b4:ab:61:9c:72:26:82:4a:11:51:1f:f6:
                    81:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:72:B5:3F:21:9F:BC:86:48:19:6A:09:F9:7A:2F:F3:CE:C4:59:08
            X509v3 Authority Key Identifier:
                keyid:E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:61:62:66:d1:3f:7e:cc:01:b6:f1:4a:20:14:e3:6c:fe:41:
         64:08:6b:2e:1e:fe:0c:46:a3:77:ba:ea:aa:f1:7d:f6:32:4a:
         8f:22:fc:78:47:a5:5c:4c:e7:cd:df:6f:90:14:52:b6:ce:98:
         e4:51:72:cb:cd:3f:65:1f:74:4b:58:13:f7:83:25:4e:bf:8d:
         ce:0c:fb:b1:16:df:f6:f8:fe:2a:54:e0:95:bd:8e:9e:cc:83:
         13:cb:c6:65:d4:e5:c4:45:c5:5e:99:ac:92:42:bd:08:f7:e6:
         9f:4d:e1:f6:c1:1e:9c:02:94:b2:9e:4d:f0:4b:b5:2d:3a:07:
         f4:6e:57:a2:c2:f2:13:0e:e9:eb:24:4b:32:e0:94:26:4a:87:
         58:57:8f:13:90:16:6e:66:63:97:06:57:22:97:13:a7:cf:80:
         f7:f6:bf:61:3b:57:87:5b:a7:36:f1:56:e1:53:f0:54:f5:be:
         cf:29:40:64:3f:e7:18:93:62:ff:47:2a:cb:d5:db:60:45:4c:
         f8:b2:49:d6:73:09:36:f9:5d:cb:63:84:86:85:07:7f:e8:1b:
         b7:a4:9e:a0:56:35:85:a5:a6:16:19:21:2e:44:1d:8c:b9:70:
         e2:6c:70:4a:ca:dc:e1:65:a4:6c:9c:a5:55:ca:98:07:31:22:
         8f:76:8e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:07 2026 by rpki-client