Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
File:                     AwkPrDzELxmXRVoS5kMGRjfGncM.mft (raw, json)
Hash identifier:          8QKo3NFGxEZz0O81TQ/94POkIxFqB3LxPEQK89tg6B4=
Subject key identifier:   2B:CE:42:E3:8B:B3:DD:3B:66:30:41:FD:F7:C2:D4:37:FB:69:6F:A5
Authority key identifier: 03:09:0F:AC:3C:C4:2F:19:97:45:5A:12:E6:43:06:46:37:C6:9D:C3
Certificate issuer:       /CN=03090fac3cc42f1997455a12e643064637c69dc3
Certificate serial:       01A146BB393815CEA3C57D9CB35A108AA19C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
Manifest number:          0FE5
Signing time:             Fri 16 Oct 2026 22:00:37 +0000
Manifest this update:     Fri 16 Oct 2026 22:00:37 +0000
Manifest next update:     Sat 17 Oct 2026 22:00:37 +0000
Files and hashes:         1: AwkPrDzELxmXRVoS5kMGRjfGncM.crl (hash: cMOPpETvkXqXdoEJzfzml8EPTVq86M8Gfv0+dGJrKg0=)
                          2: OoyL6bjrpv7zlvqenv5ZgNB0gGE.roa (hash: Tm9hWa2oiDIAZqLLnYyHl8n9xWir4VblcdnhJ8WlcHo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 20:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:46:bb:39:38:15:ce:a3:c5:7d:9c:b3:5a:10:8a:a1:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03090fac3cc42f1997455a12e643064637c69dc3
        Validity
            Not Before: Oct 16 22:00:37 2026 GMT
            Not After : Oct 17 22:00:37 2026 GMT
        Subject: CN=2bce42e38bb3dd3b663041fdf7c2d437fb696fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5c:a8:0e:1a:f6:c4:b3:c6:24:49:11:fc:e8:
                    15:d7:94:3d:cb:cc:70:2b:13:f8:c0:a7:a2:32:81:
                    1e:82:2d:43:02:ed:2a:9e:80:fb:da:02:37:49:f5:
                    63:5b:0a:2e:16:a3:c9:37:7a:1e:2d:17:2d:13:58:
                    92:80:05:61:9b:52:fa:99:99:f5:59:eb:4e:e1:86:
                    d3:90:c4:1a:12:79:49:71:95:af:4a:e6:01:a6:57:
                    b4:79:a5:5b:5f:b8:71:bf:c3:b9:03:25:35:22:de:
                    57:ab:39:f8:6f:4f:4a:e7:6c:91:5e:0c:61:80:c4:
                    da:a2:50:c8:93:44:d4:6c:2d:d9:f0:c1:89:9f:48:
                    08:ca:03:16:ea:14:20:e2:0e:c0:c1:39:ee:a8:c5:
                    79:95:83:1f:b9:a1:e3:49:84:0f:ea:96:88:7e:43:
                    43:3d:41:24:21:08:2b:87:1b:2c:82:da:62:e2:b2:
                    42:5e:be:5b:21:81:b5:81:17:82:09:41:ba:5a:5e:
                    fa:4d:8a:47:2a:05:4b:84:1c:af:21:e4:b2:63:17:
                    3b:82:12:ba:92:41:3b:ea:f7:be:bb:2d:2f:65:af:
                    3f:4e:d9:45:87:94:2a:7b:84:65:68:3d:44:72:7f:
                    3a:6b:e9:4b:49:a2:9b:6e:68:e6:bb:26:f8:28:3a:
                    11:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:CE:42:E3:8B:B3:DD:3B:66:30:41:FD:F7:C2:D4:37:FB:69:6F:A5
            X509v3 Authority Key Identifier:
                keyid:03:09:0F:AC:3C:C4:2F:19:97:45:5A:12:E6:43:06:46:37:C6:9D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:72:6e:88:73:c3:8a:de:e5:80:83:6f:a0:40:c3:e2:59:d7:
         67:5d:61:e9:27:63:be:40:97:2e:03:bd:ad:09:47:d2:ff:10:
         cf:b2:29:ea:d9:95:ad:46:b9:be:5e:dd:62:d3:48:83:f7:5f:
         b8:04:c5:f5:d6:63:f2:a3:53:90:1f:88:fb:a8:72:6c:ee:f2:
         35:37:87:5a:5b:63:3c:2d:e1:b3:2b:37:2c:7a:0a:75:1e:8f:
         f7:59:c3:0f:66:e4:ae:b0:e8:fc:39:dd:65:ce:45:11:d1:b7:
         88:5d:7b:89:85:75:83:3a:7b:5f:c1:ec:ab:f9:f9:db:6d:8d:
         65:93:b9:3c:f4:9a:1d:b3:ad:01:59:93:46:fc:c6:5d:7c:83:
         5f:04:df:c9:e5:ad:ca:2c:2d:f2:7b:95:82:da:65:4f:c1:86:
         22:27:cd:34:31:3b:c7:30:3e:a4:6a:17:d8:1d:89:8c:bd:c9:
         a2:98:d7:b7:96:59:70:0b:77:cf:e9:c4:a9:1e:dd:3f:5e:d7:
         08:bf:31:32:54:13:91:d7:d2:8e:57:f2:9c:fe:84:fb:e1:2a:
         64:36:6b:a9:b6:a1:8f:24:10:a8:17:c0:6b:7b:81:15:93:fb:
         03:f6:f7:00:bd:c4:56:a8:fe:72:f3:38:14:99:a5:91:a4:c8:
         8d:eb:2b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 07:57:49 2026 by rpki-client