Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.mft
File:                     5KVOQra3iNjki0iEQt2RiySFrDU.mft (raw, json)
Hash identifier:          Dy2QRSsKS83FL4k0nYLFO9+u3SxUHyRWvDG1Z29d52I=
Subject key identifier:   95:C8:CD:2B:52:D1:EB:D0:9E:C6:20:49:F1:12:B3:FF:8D:61:B5:F3
Authority key identifier: E4:A5:4E:42:B6:B7:88:D8:E4:8B:48:84:42:DD:91:8B:24:85:AC:35
Certificate issuer:       /CN=e4a54e42b6b788d8e48b488442dd918b2485ac35
Certificate serial:       01A06D94FA179B5DA11A8F6B106AF1EC33C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5KVOQra3iNjki0iEQt2RiySFrDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.mft
Manifest number:          047F
Signing time:             Fri 04 Sep 2026 18:01:14 +0000
Manifest this update:     Fri 04 Sep 2026 18:01:14 +0000
Manifest next update:     Sat 05 Sep 2026 18:01:14 +0000
Files and hashes:         1: 5KVOQra3iNjki0iEQt2RiySFrDU.crl (hash: U/17f8YzQd0GfriBKvJTkKk6F/MYFDLULP+fmp0XjCg=)
                          2: v2rVsh0dCI0ULQlOGc8HMoLg5uo.roa (hash: 6uedt+3d7jJXVdMAyo0QQWrH7s27rp7WpYCrWtYVZzI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5KVOQra3iNjki0iEQt2RiySFrDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:94:fa:17:9b:5d:a1:1a:8f:6b:10:6a:f1:ec:33:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4a54e42b6b788d8e48b488442dd918b2485ac35
        Validity
            Not Before: Sep  4 18:01:14 2026 GMT
            Not After : Sep  5 18:01:14 2026 GMT
        Subject: CN=95c8cd2b52d1ebd09ec62049f112b3ff8d61b5f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9b:ad:03:79:11:33:c6:d4:e3:6b:64:c0:e5:
                    c8:84:54:ef:07:ef:2c:ee:64:6c:77:f1:5b:a9:a3:
                    69:57:fa:81:6f:0a:7d:df:a0:d8:15:9c:12:be:85:
                    30:1e:fb:92:bf:30:fe:35:85:71:67:26:e4:46:e3:
                    48:8c:7f:9a:cd:cb:d2:b7:e6:8e:2e:5a:aa:c4:02:
                    8c:6f:d3:d5:74:af:d7:89:e5:fc:d1:ab:9f:04:d3:
                    a2:1a:0d:9e:a7:8d:33:8d:cb:2f:94:78:f2:a1:8b:
                    9b:17:03:14:ff:72:e9:66:a4:1d:bc:23:2e:fd:63:
                    2c:f6:85:19:52:6e:9d:33:4a:6f:f3:35:f5:84:c1:
                    6b:61:ec:b0:e6:d9:10:90:c8:b1:7c:77:2a:5b:ea:
                    21:c9:98:b7:b3:51:83:f4:88:57:45:a8:4d:aa:0f:
                    68:0c:e7:62:9b:ba:26:aa:cd:d4:6e:7e:a9:ba:59:
                    4d:b7:95:81:3f:8c:34:73:68:3c:5b:8c:ab:cf:97:
                    f5:da:8f:5a:f9:29:3b:58:59:9e:38:97:a9:57:32:
                    8e:78:97:78:48:14:fe:2f:1f:82:92:97:ab:ea:c7:
                    b0:0a:c9:ea:53:55:f9:59:4a:31:6a:af:3d:79:22:
                    5d:61:3a:ae:2b:5b:75:d8:3a:61:30:7c:8a:9f:0d:
                    1f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C8:CD:2B:52:D1:EB:D0:9E:C6:20:49:F1:12:B3:FF:8D:61:B5:F3
            X509v3 Authority Key Identifier:
                keyid:E4:A5:4E:42:B6:B7:88:D8:E4:8B:48:84:42:DD:91:8B:24:85:AC:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KVOQra3iNjki0iEQt2RiySFrDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:4e:3f:b8:2c:ab:9b:2b:7e:f7:94:89:46:f8:2c:72:63:86:
         b7:ee:44:0b:b3:08:1e:d0:3d:5f:8c:c6:42:4f:7a:24:d8:9c:
         53:68:6f:79:d7:98:a5:e1:29:a2:b5:b3:9d:0d:d6:88:ba:3c:
         e2:13:56:ce:32:6b:d6:05:5c:ad:93:4d:b9:ce:98:ae:a7:26:
         f1:48:f3:c7:a9:e1:03:3b:49:5f:fd:31:ba:1c:5d:e2:9f:39:
         b0:bf:6f:b9:cb:21:c2:d8:b2:6a:e9:87:32:60:e2:40:bd:ff:
         74:0c:db:53:5b:1b:52:a2:5b:a4:f1:d0:0f:28:c4:04:b4:af:
         40:17:4a:ee:13:cd:ab:20:2d:b0:c6:7d:b1:b8:7a:40:fe:76:
         92:1e:f8:02:93:59:b6:71:7f:08:cb:f6:b3:a3:b1:19:0a:7c:
         a9:4e:bc:8b:a8:67:65:64:9f:1f:66:be:2b:5d:2b:1f:06:68:
         12:ef:6c:a0:39:78:81:cc:be:af:44:96:56:e3:fd:1e:18:85:
         84:1a:b0:f0:83:05:b1:11:b7:74:f7:3d:77:91:a9:3a:00:2b:
         dc:d4:6d:30:f1:54:82:9a:47:25:46:7a:b1:2b:d7:cd:61:ed:
         9f:2b:69:53:41:68:68:dc:c8:d1:53:c6:dd:f4:1f:66:06:65:
         a9:d5:c2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:47:30 2026 by rpki-client