Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
File:                     5_4i9VHpWw8VAzxQNVLkm8phfGo.mft (raw, json)
Hash identifier:          Q+4PQ8GMSUyhNlrVwW4InSfyDsMw/upuTZCX0FqRyig=
Subject key identifier:   5D:46:82:A7:5B:64:BD:08:40:D3:6E:B7:DA:43:CA:2B:5D:E7:79:E1
Authority key identifier: E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
Certificate issuer:       /CN=e7fe22f551e95b0f15033c503552e49bca617c6a
Certificate serial:       01A125791766D1EBCACA544FE162A356942C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
Manifest number:          0701
Signing time:             Sat 10 Oct 2026 11:00:55 +0000
Manifest this update:     Sat 10 Oct 2026 11:00:55 +0000
Manifest next update:     Sun 11 Oct 2026 11:00:55 +0000
Files and hashes:         1: 5_4i9VHpWw8VAzxQNVLkm8phfGo.crl (hash: mw8u8FpOiVX2Th4Pd/VFA/YmLqJNT2QR0ASrxRG12Wo=)
                          2: O12iTFYfdA2zCw72150Nud1E6y0.roa (hash: z5mYMpvdZLPaUzxNIg/54hb62dd6baAvlEXsN8ohQB8=)
                          3: _fFHLP85mXG233c_oo6_tp_deIs.roa (hash: n25U7OP6QQrrsEGd6Mi0uXlEH7hkC7fcd6BN0xsYQhk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:25:79:17:66:d1:eb:ca:ca:54:4f:e1:62:a3:56:94:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7fe22f551e95b0f15033c503552e49bca617c6a
        Validity
            Not Before: Oct 10 11:00:55 2026 GMT
            Not After : Oct 11 11:00:55 2026 GMT
        Subject: CN=5d4682a75b64bd0840d36eb7da43ca2b5de779e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cc:91:f5:8a:27:5c:79:6a:82:27:6f:a3:de:
                    f4:51:8a:fe:7a:d3:05:e1:61:fc:c8:f1:82:10:21:
                    cb:a3:00:1a:7b:6e:88:8d:ae:b4:72:3a:25:46:91:
                    47:d8:49:06:15:36:18:23:7c:85:51:97:98:43:71:
                    19:27:42:67:02:fd:df:21:cb:e8:e1:6e:7d:cb:1a:
                    25:92:e5:33:7c:f1:34:b1:ce:fc:2c:a5:94:09:66:
                    5d:ef:b3:01:3f:fb:9a:84:61:1c:c9:74:a4:f6:5b:
                    e2:a5:08:79:f0:b4:0d:66:93:6f:c7:8d:14:df:55:
                    eb:12:59:3c:d2:b6:c5:ff:19:67:db:23:00:c0:dc:
                    23:e3:e8:a0:2c:d3:15:cf:23:41:4c:10:58:1a:05:
                    c3:6f:32:a6:16:1d:ca:cd:52:d3:72:9c:94:68:79:
                    7b:d3:04:3b:92:48:50:2a:46:d0:58:fb:61:53:5e:
                    10:96:b8:09:37:1e:f0:12:f5:b1:cc:9f:e8:4e:76:
                    a7:30:61:6d:0c:16:75:10:94:3d:31:b8:23:72:a3:
                    3f:0c:76:49:3d:68:6d:9a:31:bb:05:f0:39:90:2b:
                    04:79:8d:d1:9a:61:84:eb:7a:0b:1a:98:1e:cd:a7:
                    cf:57:9c:1f:d0:fb:96:e2:f4:c2:25:70:94:14:2c:
                    69:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:46:82:A7:5B:64:BD:08:40:D3:6E:B7:DA:43:CA:2B:5D:E7:79:E1
            X509v3 Authority Key Identifier:
                keyid:E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:fb:ca:7a:ff:49:a5:5e:b4:4f:71:7b:a1:ac:17:f7:a1:d1:
         40:3f:73:ed:e0:88:70:3b:33:a2:f2:55:50:15:bb:ec:c9:49:
         01:78:e8:10:01:d9:21:07:2e:87:32:2b:28:ea:c8:5f:82:97:
         59:e6:f3:08:72:a6:4c:17:43:be:68:bb:2b:72:f4:a6:3e:ef:
         08:5c:b9:5f:f2:db:97:92:6c:41:6a:e2:6d:5e:e6:f3:89:29:
         24:4b:cc:b1:99:8c:0e:ed:df:72:b8:05:6a:62:90:12:f6:01:
         4d:e5:fd:3a:22:15:32:92:3f:79:9b:7c:6c:88:72:38:f2:99:
         0f:74:08:98:fa:52:b1:f6:43:11:91:75:25:e7:e8:99:16:3c:
         74:7e:24:c7:53:f7:5a:0a:4a:d2:38:6a:64:83:52:8b:0a:95:
         91:80:2e:16:a4:33:0c:33:34:1d:eb:66:29:69:39:e6:fe:62:
         9f:e6:d9:91:00:79:2e:78:3a:a2:b7:bb:c9:fe:5c:f2:28:4c:
         d4:9a:46:83:f6:fa:ec:57:11:f8:35:52:25:e6:8d:db:d4:24:
         76:7a:20:6b:0a:13:1b:d6:d4:71:62:28:da:c2:dc:4d:f1:e7:
         1b:ac:7c:98:58:a7:eb:e3:c9:28:48:78:df:52:f0:07:8d:8e:
         1b:e1:a7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:22:26 2026 by rpki-client