Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.mft
File:                     n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.mft (raw, json)
Hash identifier:          7ujZEI49Iyuc/bK0+rMzyKGCO1gR1wFb9tx/3gIDki4=
Subject key identifier:   BF:22:5C:A4:00:94:40:BE:80:90:DA:7C:62:4B:86:87:A9:F5:1E:5D
Authority key identifier: 9F:9A:95:8E:3C:20:4A:6D:4E:55:36:EC:43:76:5D:04:D1:B0:C9:6A
Certificate issuer:       /CN=9f9a958e3c204a6d4e5536ec43765d04d1b0c96a
Certificate serial:       01A08A8D928C9F647F2094002FF4496252EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.mft
Manifest number:          025F
Signing time:             Thu 10 Sep 2026 09:02:08 +0000
Manifest this update:     Thu 10 Sep 2026 09:02:08 +0000
Manifest next update:     Fri 11 Sep 2026 09:02:08 +0000
Files and hashes:         1: n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.crl (hash: Pk3HaoJ8+HlhBUP86hpxvD3G8cC/lS/x+RLJYv9TNvY=)
                          2: xXO4hAuj6CV2n-3NGJk-DbRFOdI.roa (hash: dzRHmEV436bNSbP8ukf6XV97axT5lZpoDEiJJC7vBXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 09:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:8d:92:8c:9f:64:7f:20:94:00:2f:f4:49:62:52:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f9a958e3c204a6d4e5536ec43765d04d1b0c96a
        Validity
            Not Before: Sep 10 09:02:08 2026 GMT
            Not After : Sep 11 09:02:08 2026 GMT
        Subject: CN=bf225ca4009440be8090da7c624b8687a9f51e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6b:77:c8:b9:34:2d:b4:f5:e4:66:32:36:0d:
                    bc:bf:23:4a:ce:73:e8:3e:33:77:3b:89:41:39:d2:
                    e8:a6:03:f8:11:cd:78:97:2a:5f:3a:5d:3c:cf:1a:
                    f7:d9:63:ce:34:5b:80:ad:47:ac:7f:a7:00:79:84:
                    89:78:c6:4c:8d:ee:bc:0d:1d:52:b7:05:d7:07:2e:
                    23:75:01:2d:48:bb:46:7f:d7:a9:25:2a:0e:17:62:
                    c0:57:87:9e:4a:cc:f0:53:f4:89:3a:a6:23:32:cf:
                    3b:93:3c:d0:de:4d:cb:16:ed:98:e4:89:7c:2c:38:
                    ad:ef:09:cd:9c:f1:f0:12:01:76:b6:d3:02:f2:83:
                    75:70:c6:6f:1e:5e:94:c4:53:cc:58:ac:a7:52:d9:
                    e6:13:d3:d2:fd:e7:f8:5d:75:a8:4a:f2:9f:20:06:
                    44:bd:0a:e7:49:7d:e3:08:1d:eb:18:16:ad:04:81:
                    a0:b9:52:9d:d9:53:28:03:73:75:26:ee:9b:4f:e4:
                    68:e3:fc:c5:06:33:e9:66:e4:60:8c:10:9a:32:38:
                    ed:90:fe:fc:c5:b8:5f:24:3b:0e:7f:57:b5:1b:b4:
                    36:f4:32:48:15:1e:e8:1e:a1:15:f1:cd:3b:fa:d3:
                    5b:e9:9a:0d:07:74:13:3c:bf:40:87:d8:d4:65:c4:
                    60:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:22:5C:A4:00:94:40:BE:80:90:DA:7C:62:4B:86:87:A9:F5:1E:5D
            X509v3 Authority Key Identifier:
                keyid:9F:9A:95:8E:3C:20:4A:6D:4E:55:36:EC:43:76:5D:04:D1:B0:C9:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:c1:4f:ee:a2:8c:63:69:bc:78:45:8a:a7:73:49:f3:fb:ff:
         af:e9:39:de:07:76:cc:49:0e:9b:91:66:06:58:b1:a6:90:a8:
         ba:07:0f:15:94:a9:1b:86:13:e2:41:aa:f8:a8:ae:a1:68:c8:
         49:82:2c:03:48:82:bb:ec:cd:22:46:dc:c1:ce:96:b2:70:a5:
         1a:d1:4e:ae:9e:da:4f:33:5c:42:e7:77:98:3d:fe:9e:b1:4f:
         aa:a6:f0:47:22:88:6d:92:0d:5d:d1:57:20:7d:62:82:a1:3d:
         a7:50:20:3f:04:f6:ed:67:54:ab:2b:d8:9f:93:cc:aa:cd:2a:
         28:b6:f7:37:52:d5:28:37:d1:50:ce:62:c9:18:95:c6:c5:b2:
         d6:71:d7:8d:27:24:27:e8:df:94:d5:3c:a3:5b:44:c4:b6:11:
         1b:12:63:dc:24:a5:0f:9b:76:f4:0a:bd:3c:c7:75:72:44:05:
         af:57:82:52:a6:94:87:ec:da:04:90:90:59:9c:0a:c5:2f:64:
         8c:a0:da:3a:51:dc:45:b2:f0:8c:70:32:df:3a:2e:5d:e6:c7:
         f5:1f:bd:ad:f1:39:ef:43:d4:bd:2c:1b:d4:1a:4c:c3:f6:98:
         2c:d0:90:fc:57:20:bd:4c:c3:fb:61:2d:12:34:c3:1c:20:62:
         fc:f1:80:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:34:56 2026 by rpki-client