Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
File:                     5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft (raw, json)
Hash identifier:          QBBzW9kA7OrskuO79f+6xofN+2oygSJyIovAwkaT+/M=
Subject key identifier:   B5:4C:0F:91:FD:3C:E9:9A:9B:44:DD:C0:32:87:91:E7:04:06:47:10
Authority key identifier: E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C
Certificate issuer:       /CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c
Certificate serial:       01A193C41F8319723C8C31567475BE6FACBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
Manifest number:          0CE0
Signing time:             Sat 31 Oct 2026 21:01:06 +0000
Manifest this update:     Sat 31 Oct 2026 21:01:06 +0000
Manifest next update:     Sun 01 Nov 2026 21:01:06 +0000
Files and hashes:         1: 5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl (hash: o5hpLP5k6I6dgWMb4I3lTUFOpPj/Rlwi4YWE6BfOkZU=)
                          2: oPgrYeYQdKE5w12V1Qsc5asf-z0.roa (hash: DyrqcRbA6WGivtdHIlCxrVDtSLyegGOpED1YlRSd3w0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:93:c4:1f:83:19:72:3c:8c:31:56:74:75:be:6f:ac:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c
        Validity
            Not Before: Oct 31 21:01:06 2026 GMT
            Not After : Nov  1 21:01:06 2026 GMT
        Subject: CN=b54c0f91fd3ce99a9b44ddc0328791e704064710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cc:7f:a2:12:f6:cb:24:83:0a:7a:46:92:41:
                    5f:a0:59:2f:60:73:bd:f4:30:b0:6b:b1:43:3f:6e:
                    72:cc:c6:e6:5c:db:b4:9a:df:dd:39:54:e0:96:e2:
                    d0:1f:85:93:6b:2e:6c:d0:c4:d1:93:a6:a7:68:c1:
                    76:f4:f5:70:67:43:3c:a5:9d:d5:da:a4:44:08:7e:
                    85:53:c5:10:39:16:b8:f5:a0:cc:43:17:da:9d:7e:
                    a6:a2:d2:45:d3:33:7f:58:06:63:05:b8:74:0f:e1:
                    f4:92:bb:be:31:c9:a6:1e:45:a9:2d:60:df:c1:18:
                    a0:41:a5:5a:f5:f6:b9:cb:f6:fb:b1:3c:83:a2:6c:
                    15:7e:75:69:ce:0d:b3:9f:e9:f2:5d:fd:9a:f6:54:
                    a8:63:b5:b3:1b:ad:0a:39:f3:51:ab:02:94:d1:de:
                    94:33:c2:d6:b9:ae:70:40:93:ed:ae:18:17:0b:71:
                    64:2b:83:86:b1:e6:33:8f:b4:50:2d:88:85:68:45:
                    04:75:04:4d:09:0d:c7:74:0e:61:42:20:42:31:53:
                    c8:a5:80:60:9a:fa:10:58:e1:e0:c9:79:ac:16:f3:
                    94:91:f2:68:e7:5d:27:c5:9d:d5:26:ec:0f:52:58:
                    9a:0f:40:d0:4a:42:79:fd:20:09:f0:ce:dc:a1:73:
                    10:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:4C:0F:91:FD:3C:E9:9A:9B:44:DD:C0:32:87:91:E7:04:06:47:10
            X509v3 Authority Key Identifier:
                keyid:E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:86:32:87:7b:08:29:0d:81:05:bf:bd:c4:32:f5:76:7b:94:
         33:00:86:1d:51:28:82:d3:0f:81:0a:63:36:f0:8c:79:31:37:
         f7:3c:5c:53:2d:eb:8b:a9:47:4d:7e:35:57:43:f8:9f:47:75:
         a3:b3:ef:cf:69:92:23:d0:55:76:30:7f:1e:9b:a1:05:e0:14:
         ce:1f:94:b9:95:1c:38:d8:df:5b:a0:5e:26:75:f8:6b:9c:40:
         3e:8c:f7:32:81:a7:60:ac:2a:62:c1:6c:ba:7f:3d:45:cd:76:
         94:94:35:9e:78:a7:4f:da:51:01:63:5f:5d:b0:52:7a:42:fb:
         56:13:f8:0b:11:de:21:45:30:2a:1a:d9:8e:dc:ac:56:cd:41:
         19:e5:47:d5:d6:1a:42:19:6b:b1:4e:f0:11:6c:1a:4d:ab:3f:
         e7:ad:e2:6f:ff:a1:ca:4c:a1:e6:03:56:9d:76:90:c7:f2:a1:
         23:87:1a:c6:ff:12:bb:d5:d7:84:70:ec:2d:7a:eb:99:8e:b1:
         e5:b7:71:2d:15:92:93:de:37:90:c0:d9:dd:26:41:66:20:0a:
         cb:94:4b:d6:88:02:b1:fd:66:49:cc:a1:75:78:81:dc:87:a0:
         1e:12:8d:1d:63:30:df:9e:e6:67:d3:4f:05:82:e7:28:3b:8d:
         55:33:2b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 00:11:32 2026 by rpki-client