Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
File:                     X5PadXwX_jig5s1wJ1xzyMaciW4.mft (raw, json)
Hash identifier:          kfg5zuyqtdmvyvECcXALHzymTAZZwYrcz8dxZS1EZ3Y=
Subject key identifier:   E5:F2:DB:3D:24:6A:E2:9A:FD:5D:D6:87:59:EF:F5:57:45:1F:B9:81
Authority key identifier: 5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E
Certificate issuer:       /CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
Certificate serial:       01A08A8D5489AA5246DFF4185D34F8C34B57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
Manifest number:          0E13
Signing time:             Thu 10 Sep 2026 09:01:52 +0000
Manifest this update:     Thu 10 Sep 2026 09:01:52 +0000
Manifest next update:     Fri 11 Sep 2026 09:01:52 +0000
Files and hashes:         1: EhpMBlG4nDKvcGQKRYPAEZtRdEU.roa (hash: 00M7VIQ9njSy4l1huIv3bbpiOTYXp7U9IOJHNMG4ZKk=)
                          2: X5PadXwX_jig5s1wJ1xzyMaciW4.crl (hash: V3VytOw0Q4KVcYg1c/CTlJ3u+Czw+ozW9t25RBFVP6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:8d:54:89:aa:52:46:df:f4:18:5d:34:f8:c3:4b:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
        Validity
            Not Before: Sep 10 09:01:52 2026 GMT
            Not After : Sep 11 09:01:52 2026 GMT
        Subject: CN=e5f2db3d246ae29afd5dd68759eff557451fb981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e7:a6:5c:b4:6a:1a:a1:1c:7a:ab:bb:50:4d:
                    fd:e2:b9:d3:e3:9c:74:f6:c9:fb:ff:22:7e:81:65:
                    c5:59:10:76:d5:25:44:e3:16:74:47:b2:7a:4b:16:
                    c2:a5:1e:df:5e:db:b8:a4:c7:4d:5b:a1:55:3c:92:
                    0a:1c:3f:7c:66:a1:d4:53:e7:76:8d:54:8b:4f:34:
                    a7:ad:d6:7a:6b:a6:8b:b5:fc:8f:d1:d8:33:c1:9f:
                    0e:2e:7f:35:2a:89:f6:c0:30:df:76:fb:9f:05:d4:
                    aa:7a:94:d6:ff:ac:40:77:19:d1:9a:5e:a8:fa:5f:
                    da:3b:e1:bf:99:14:2a:17:34:06:58:5b:53:31:f8:
                    bb:ec:05:af:60:67:c1:20:77:49:ae:b6:15:59:34:
                    da:45:50:a8:97:ba:4c:70:2c:51:7e:af:5a:cc:c3:
                    1e:eb:41:c0:dd:38:22:e7:32:23:83:4b:a0:e3:f1:
                    54:91:75:6f:08:d5:5d:de:f7:6c:98:6b:d3:2b:b7:
                    b0:0a:83:df:dc:fc:35:75:7c:08:4e:87:45:13:2f:
                    a3:3a:75:78:c5:4a:76:fe:11:8c:39:91:d7:84:fa:
                    16:75:b4:24:95:04:d7:a8:c5:cf:d7:8f:34:06:db:
                    09:fe:de:a4:7e:e4:de:d4:78:0f:3a:60:76:dd:c7:
                    83:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F2:DB:3D:24:6A:E2:9A:FD:5D:D6:87:59:EF:F5:57:45:1F:B9:81
            X509v3 Authority Key Identifier:
                keyid:5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:21:f7:f3:e0:32:fd:1f:75:3b:0e:07:7d:99:f9:eb:32:6e:
         09:fc:26:35:37:fa:3f:aa:96:e1:12:80:25:fd:af:0f:2a:25:
         00:da:a9:70:88:7c:f5:17:d5:d3:a2:b5:85:48:5b:f9:ec:3b:
         1f:ad:d9:5d:11:7e:c9:89:16:05:c3:e9:aa:6a:a6:21:2c:bf:
         e3:35:05:70:f3:9f:68:b7:d2:e3:ea:2b:29:ef:32:b2:d0:77:
         fc:18:3d:15:f9:86:69:6e:b3:1b:61:d5:2c:3d:95:ac:a5:9e:
         94:2a:8c:af:79:8d:2a:af:60:7e:3c:69:87:9d:e3:33:70:45:
         45:3c:52:f5:88:ab:8a:d0:6b:d8:d5:da:21:8e:a3:07:5e:80:
         91:0f:1b:e7:54:0b:4f:47:5f:32:65:66:54:c0:5c:33:82:a2:
         3f:d0:f7:d8:ca:4e:11:12:59:94:e2:a7:90:46:39:f4:6f:fa:
         8f:3d:2e:8e:b2:19:ab:22:f4:bc:eb:7a:4d:c5:4e:8c:09:a5:
         70:4e:6f:14:db:8a:f0:eb:08:62:9d:94:6f:4f:80:63:6c:42:
         20:7e:74:07:d1:8f:d5:da:5b:d2:4e:f0:a9:b2:7e:49:00:57:
         96:94:fe:68:59:33:72:c0:dd:9e:98:1c:94:04:fd:15:35:fb:
         58:1f:0d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:35:31 2026 by rpki-client