Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft
File:                     0-5NbhwEoPWClbKpchCs1Hv32Wo.mft (raw, json)
Hash identifier:          J/cRaXitdu12W8iHtsaAAAwWE5/T6di/x63sa8nYqRU=
Subject key identifier:   30:5E:59:E1:D2:57:93:23:8A:8F:D7:DB:CC:DF:E1:60:7B:09:3B:55
Authority key identifier: D3:EE:4D:6E:1C:04:A0:F5:82:95:B2:A9:72:10:AC:D4:7B:F7:D9:6A
Certificate issuer:       /CN=d3ee4d6e1c04a0f58295b2a97210acd47bf7d96a
Certificate serial:       01A131B443E74E92419C739EF56D06C64854
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0-5NbhwEoPWClbKpchCs1Hv32Wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft
Manifest number:          0367
Signing time:             Mon 12 Oct 2026 20:00:59 +0000
Manifest this update:     Mon 12 Oct 2026 20:00:59 +0000
Manifest next update:     Tue 13 Oct 2026 20:00:59 +0000
Files and hashes:         1: 0-5NbhwEoPWClbKpchCs1Hv32Wo.crl (hash: LGxyh0TiuLXP+IL9nc/3Lg1yaLAR/FkfGPoxnCGCYbE=)
                          2: _5oe6VqZsqBT0LMhmKV2LIl_uf8.roa (hash: /SkExJhWDQiBSVIh+Uw/CkRQN60+0HSnourFk+/DB2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0-5NbhwEoPWClbKpchCs1Hv32Wo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:31:b4:43:e7:4e:92:41:9c:73:9e:f5:6d:06:c6:48:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3ee4d6e1c04a0f58295b2a97210acd47bf7d96a
        Validity
            Not Before: Oct 12 20:00:59 2026 GMT
            Not After : Oct 13 20:00:59 2026 GMT
        Subject: CN=305e59e1d25793238a8fd7dbccdfe1607b093b55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:af:d3:ec:15:78:a6:6a:1d:6c:b9:54:1f:2c:
                    ac:8e:00:ea:74:58:82:0b:ff:9f:3c:64:44:77:ec:
                    e8:ba:46:9a:85:3d:52:43:d3:4c:64:54:12:be:de:
                    e7:06:8b:0b:c3:53:71:4f:a7:d2:8c:2a:89:e2:98:
                    a2:32:ec:12:00:ff:e6:cb:f4:01:0c:62:82:1c:72:
                    0b:b9:3d:bd:e1:1f:62:00:38:b8:09:3d:b0:d0:55:
                    24:c4:a7:06:a6:b5:69:0f:18:ac:da:14:9f:7e:94:
                    fe:63:73:ec:85:3d:b7:1f:e3:c7:27:36:a2:81:7e:
                    30:18:80:c9:03:4c:f0:0e:e9:4d:81:c7:e2:9b:b6:
                    07:b2:44:ed:0e:fe:fc:33:a8:b0:fe:db:2d:4d:27:
                    69:31:ed:75:d7:de:4d:38:be:e7:3b:7f:3c:35:eb:
                    39:00:76:4e:f4:58:63:f6:bb:61:fa:81:a0:d2:4e:
                    cc:05:1b:28:52:f9:68:cc:7e:04:5a:72:c5:d7:df:
                    00:7e:03:ca:7a:27:79:ae:e4:b2:18:0b:f8:5f:5e:
                    01:82:ee:2f:0a:1b:81:c6:6f:31:04:38:7a:5b:52:
                    b2:f7:20:fe:ae:02:e7:15:9d:32:b7:bd:7a:46:eb:
                    c0:50:ff:cc:7c:e2:fe:31:ca:3e:ce:f5:88:e5:6b:
                    e3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:5E:59:E1:D2:57:93:23:8A:8F:D7:DB:CC:DF:E1:60:7B:09:3B:55
            X509v3 Authority Key Identifier:
                keyid:D3:EE:4D:6E:1C:04:A0:F5:82:95:B2:A9:72:10:AC:D4:7B:F7:D9:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-5NbhwEoPWClbKpchCs1Hv32Wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:73:c1:b4:49:57:32:8d:11:e5:5f:47:13:6f:2f:24:a6:af:
         5b:9d:ef:9c:51:aa:46:9a:5b:dc:16:32:fd:6f:ca:cf:92:12:
         bc:46:d0:2e:5a:3c:91:a7:2f:ae:5b:c7:14:43:de:d7:c0:ad:
         75:93:42:c6:3c:c0:af:43:86:7d:33:02:6b:95:04:a7:a7:dd:
         60:d4:d1:70:51:95:df:be:41:b1:eb:54:99:d5:e2:a2:20:ca:
         ce:d6:2e:c2:c5:ee:d7:65:ae:2e:5f:30:02:a9:f7:87:a0:91:
         b7:65:07:07:39:3a:b5:a8:75:03:9c:42:9a:14:f3:7f:fd:01:
         c6:3f:3f:be:90:87:69:87:9f:50:f9:5f:4c:ca:9f:c4:aa:03:
         9f:dc:8c:e5:df:b6:8a:33:6f:f5:55:3a:97:94:f2:5f:65:75:
         58:1a:b5:33:92:76:46:8e:10:14:69:8a:dd:b1:f4:9a:69:9e:
         48:b5:d7:cc:e0:7e:21:ef:be:15:9f:73:93:91:16:8f:45:64:
         35:53:a8:77:ab:91:67:06:14:1c:af:58:cf:61:23:42:df:e0:
         03:4b:6f:1f:b0:6f:5e:b8:7c:46:6f:2a:2e:7b:0c:9a:eb:c0:
         38:a9:48:97:98:6c:d1:fb:1e:65:41:1c:6d:bc:34:9e:35:99:
         02:43:f5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 05:55:25 2026 by rpki-client