Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft
File:                     jgo5Gq64_HyDP4JX16nnSlWzOv4.mft (raw, json)
Hash identifier:          vevYyfXrTYwp4MCupHA/72KBY74pquN+RUv1ZPXxHdo=
Subject key identifier:   5B:E0:BE:93:D0:2B:CB:FF:64:66:5B:12:7B:D4:C4:7B:E9:F4:8F:7E
Authority key identifier: 8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE
Certificate issuer:       /CN=8e0a391aaeb8fc7c833f8257d7a9e74a55b33afe
Certificate serial:       01A1163C5E4B4D0B3A1243773AB442F4C304
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft
Manifest number:          19D5
Signing time:             Wed 07 Oct 2026 12:00:17 +0000
Manifest this update:     Wed 07 Oct 2026 12:00:17 +0000
Manifest next update:     Thu 08 Oct 2026 12:00:17 +0000
Files and hashes:         1: jgo5Gq64_HyDP4JX16nnSlWzOv4.crl (hash: 3sv/8MJL1YS6CeISfYMvDyHiNRoYWE4Ccz3uAWNc/q0=)
                          2: wBtREldvDjl4K9_Eyc6xek7-RYI.roa (hash: z4RdhE9lhhi0tt8aHo4p1WawqFAV7GTzx2aHrOIBbVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:16:3c:5e:4b:4d:0b:3a:12:43:77:3a:b4:42:f4:c3:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e0a391aaeb8fc7c833f8257d7a9e74a55b33afe
        Validity
            Not Before: Oct  7 12:00:17 2026 GMT
            Not After : Oct  8 12:00:17 2026 GMT
        Subject: CN=5be0be93d02bcbff64665b127bd4c47be9f48f7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9b:24:bd:fc:77:19:26:7c:e1:63:64:6f:22:
                    fb:6e:85:97:df:07:f5:5b:ec:07:5c:09:18:02:bd:
                    0f:ca:59:00:a4:9e:c3:58:d0:ef:ed:43:a5:ed:f1:
                    d8:36:70:ad:9f:89:18:f8:67:78:f0:16:b8:c2:23:
                    15:87:9a:8e:e2:b0:13:06:ca:85:0a:70:28:dd:da:
                    53:b5:c9:ff:bb:8d:43:15:2e:39:e7:e6:3d:16:76:
                    4c:9d:e3:fb:b4:ae:7e:58:24:3a:c4:ae:22:bf:3a:
                    aa:16:80:48:3d:52:25:ec:6b:d0:b4:2b:0c:a6:85:
                    e7:8e:2b:03:b0:fc:cf:cd:8b:01:de:45:db:45:62:
                    ba:63:b9:7e:46:8c:49:cc:86:ee:9e:be:ac:14:b0:
                    9e:ae:87:83:3a:2c:7f:58:15:59:98:8f:10:cb:ff:
                    74:f8:c5:2c:4a:0f:67:64:c9:35:48:05:73:2d:1a:
                    cd:4b:ca:25:7a:40:ca:54:b9:5d:a5:65:0a:a6:1d:
                    04:ee:cc:12:d3:88:ca:d4:26:fa:d1:41:2c:4c:58:
                    e2:e6:27:8d:55:2c:44:3e:ca:7b:37:12:e0:98:59:
                    e2:65:c9:45:9e:27:5b:f9:23:29:69:5a:4e:a2:9d:
                    4c:c9:ff:8b:f3:f7:86:76:a6:16:55:62:08:af:f5:
                    f8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E0:BE:93:D0:2B:CB:FF:64:66:5B:12:7B:D4:C4:7B:E9:F4:8F:7E
            X509v3 Authority Key Identifier:
                keyid:8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:37:87:34:8c:88:f4:a7:b3:f6:17:d9:78:01:c2:ce:f8:25:
         de:62:f1:0e:fc:28:41:34:40:82:c1:2a:17:6b:88:9b:e7:f3:
         42:71:68:7e:a5:96:a6:91:02:de:f7:7f:db:1b:32:4c:e0:2d:
         f6:a9:0b:b8:03:9c:65:3e:55:cc:4a:5c:cc:54:b9:e3:80:0b:
         45:91:e7:54:3f:0e:2b:63:7f:f3:2d:89:52:93:8a:0c:03:a6:
         e1:81:86:4b:5e:8e:39:8e:8f:dd:15:dc:19:5e:c6:95:cf:91:
         ce:6b:42:f8:2f:04:a9:11:fa:6a:cd:94:a4:f6:5f:5a:13:fb:
         d8:ed:fd:db:cb:0c:b4:75:8e:f6:57:5d:6b:0a:8a:8d:18:5a:
         8f:37:4c:fb:14:d4:3b:78:e7:20:6e:fe:c6:89:83:08:08:db:
         6e:7a:7f:d3:79:4c:8a:c3:b8:ba:e8:98:02:cf:cc:34:03:38:
         8e:57:86:a9:e6:be:0e:44:1c:56:56:63:8d:9d:93:f1:73:80:
         08:bc:3a:e1:64:bb:69:1c:20:b3:35:64:59:1f:36:7e:55:6d:
         23:1f:e2:08:f0:28:c5:f9:6d:bf:70:e6:d3:19:e5:7c:b2:d2:
         f4:83:6b:52:43:83:b8:fc:9b:3c:59:4b:84:09:44:84:50:e3:
         c3:00:8b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 15:11:36 2026 by rpki-client