Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft
File:                     m5fCLQsziopFqhNFsJF7oNyXM5A.mft (raw, json)
Hash identifier:          xBsBhU9F1ct4MBe2apiGKQOmHgV0CLEhAy1tFt4L+d0=
Subject key identifier:   E3:38:5A:25:58:1B:D4:A6:F2:6E:80:EE:06:03:12:25:9F:29:4C:59
Authority key identifier: 9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90
Certificate issuer:       /CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
Certificate serial:       01A16B6D150CB51EEABB6911FB5DA07432F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft
Manifest number:          16F8
Signing time:             Sat 24 Oct 2026 01:01:13 +0000
Manifest this update:     Sat 24 Oct 2026 01:01:13 +0000
Manifest next update:     Sun 25 Oct 2026 01:01:13 +0000
Files and hashes:         1: 61nXLWiLNthRTvWX64Fv7Aiwf_E.roa (hash: C6Ewv4dAXXufstpmAXr9+tKYxI6LwFVuw358jAoTr6Q=)
                          2: QlMsfkJfSm0fUcxiYGVPGdGD4fA.roa (hash: CRz3lsPjoW3JZTtpME0HEZ/likjgfqyzP+ZOWT4Oi2k=)
                          3: fGxSLO2uDpgERORQ864qGfhUGBs.roa (hash: 7oxHD74xcuwoKWUd/b/P3x2kf6o/UEgOD2PiJIUxQeU=)
                          4: m5fCLQsziopFqhNFsJF7oNyXM5A.crl (hash: 1iq1ApMdPPQUtu+EigyGFOurtFkSo9ViGip4o3/yofg=)
                          5: z9fTcJ6BwHGafAxKgV8m2cAUPqs.roa (hash: HhotdTCLEhBn/XmQ52b2JJFeeMZwYQqW5x7lcVcO9bQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 01:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6b:6d:15:0c:b5:1e:ea:bb:69:11:fb:5d:a0:74:32:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
        Validity
            Not Before: Oct 24 01:01:13 2026 GMT
            Not After : Oct 25 01:01:13 2026 GMT
        Subject: CN=e3385a25581bd4a6f26e80ee060312259f294c59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a7:d7:3f:44:64:f4:ec:d0:6a:a7:2e:ae:4b:
                    5c:55:e1:a7:5e:83:56:36:40:f5:06:a5:a9:e7:af:
                    b9:c5:64:3f:8d:1a:39:5f:c8:0e:e5:cd:7b:58:9b:
                    77:03:00:47:4a:73:99:5a:fe:55:3a:83:e1:42:86:
                    96:68:2a:30:78:19:d8:c5:f9:a1:ca:20:29:82:47:
                    d4:b1:20:e5:5e:51:f5:de:ef:ee:12:e5:cb:9f:54:
                    40:9e:1e:7f:97:e8:d9:9d:ca:3c:32:57:d7:ee:e7:
                    68:c4:bd:6b:78:72:36:77:25:a0:3e:73:ff:75:27:
                    3d:3e:51:a5:c0:4f:f1:09:2e:98:40:48:62:f8:d0:
                    ea:1f:ec:51:05:b7:17:99:60:54:d5:01:1b:e4:66:
                    14:5b:c1:35:61:ca:31:74:56:4e:d9:01:a9:b3:6b:
                    11:77:1b:45:fd:24:ec:43:69:90:79:ec:5f:35:d5:
                    fe:b0:30:90:4e:c1:09:a8:4a:3c:38:c9:60:41:31:
                    89:10:44:68:af:5b:4c:96:53:4c:23:35:86:a3:78:
                    a1:24:bc:3b:16:94:2e:cd:c8:00:d5:2a:c2:88:43:
                    55:fd:e6:e4:27:71:55:dd:13:c7:9b:20:48:92:3d:
                    40:df:28:21:a0:57:ae:a1:91:44:b5:71:08:39:1b:
                    14:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:38:5A:25:58:1B:D4:A6:F2:6E:80:EE:06:03:12:25:9F:29:4C:59
            X509v3 Authority Key Identifier:
                keyid:9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:d8:ae:79:09:5a:3a:b8:bd:9c:23:34:d2:aa:b8:cf:cc:bf:
         87:60:3d:fb:fd:70:10:84:a8:91:70:f4:b0:2e:4f:72:ed:38:
         52:b2:f3:37:08:2b:9c:79:54:87:9b:78:6f:02:7a:b2:7b:aa:
         49:25:2b:41:cb:a2:ea:82:58:14:b3:3f:0d:3a:c5:d3:b3:a1:
         ba:ef:96:69:5e:e5:aa:8e:14:c9:f9:8a:3a:80:57:cc:45:07:
         f4:e0:77:dc:20:a4:38:9a:14:26:20:83:02:3b:0e:1b:c9:30:
         ab:0e:d7:3e:a2:15:91:c4:e4:02:e0:20:d9:ca:95:ce:f2:dc:
         cd:61:e1:95:0a:33:43:5e:da:3c:1f:0f:c4:4f:a1:84:00:1c:
         e8:3f:b9:5d:ef:30:b6:75:12:b5:c2:f4:45:61:18:b5:93:2c:
         58:ca:dd:e1:9b:8e:0a:15:aa:96:78:5e:8f:e9:4c:56:b6:4a:
         34:6d:d4:ea:39:02:d6:b7:e4:7d:45:25:26:99:ca:a5:38:d1:
         07:76:9d:e5:68:44:ec:c6:62:93:bf:29:d9:95:e0:02:6e:7c:
         1e:bd:89:9d:dc:aa:11:6c:9a:66:1e:b4:2b:1f:6a:e0:a3:dc:
         a7:38:81:f9:43:71:49:e8:d1:b0:ac:58:df:08:32:21:fc:63:
         79:00:62:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:12:42 2026 by rpki-client