Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
File:                     5c4xqiBddBAUR-_9bDE1GGFGRTo.mft (raw, json)
Hash identifier:          zXqxMOIQjfr7GjhRngENtPlwblKE+ZqKm1LuGi44qAg=
Subject key identifier:   17:58:98:FC:5B:F1:4A:B3:FD:6F:D5:75:D7:2F:81:E6:32:A4:67:0F
Authority key identifier: E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A
Certificate issuer:       /CN=e5ce31aa205d74101447effd6c3135186146453a
Certificate serial:       01A13F390B7CE11858D4591899EBF3F4238C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
Manifest number:          1AA3
Signing time:             Thu 15 Oct 2026 11:01:05 +0000
Manifest this update:     Thu 15 Oct 2026 11:01:05 +0000
Manifest next update:     Fri 16 Oct 2026 11:01:05 +0000
Files and hashes:         1: 5c4xqiBddBAUR-_9bDE1GGFGRTo.crl (hash: zCedCUtZV7xnCQtUcZ6bMKDMyYyDGBzvqRS/ynfn9V0=)
                          2: Ro7iV5ZNVYzNssuuDgGoEbDMQoI.roa (hash: keE5gBWDN7d06/rNw4aGS5QaZg/Yuv2eluYkRO/QO9I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:39:0b:7c:e1:18:58:d4:59:18:99:eb:f3:f4:23:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5ce31aa205d74101447effd6c3135186146453a
        Validity
            Not Before: Oct 15 11:01:05 2026 GMT
            Not After : Oct 16 11:01:05 2026 GMT
        Subject: CN=175898fc5bf14ab3fd6fd575d72f81e632a4670f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ed:e5:9a:97:3e:92:3c:40:38:a6:9f:e3:01:
                    ad:0d:9b:5e:26:2a:b7:99:2b:be:eb:8e:33:2e:94:
                    3f:83:67:37:4f:30:62:73:ac:30:20:1e:82:1a:8e:
                    e4:4c:5d:aa:0f:b4:77:4e:96:ca:98:1d:02:2e:0c:
                    e2:05:65:a4:30:a1:c8:89:fb:49:5a:c6:2a:1c:f3:
                    b9:9a:28:55:cb:f6:93:91:b5:75:84:0b:aa:d7:e0:
                    70:a4:23:3f:84:e1:a6:ee:42:43:fd:b9:39:45:2d:
                    03:6b:53:a0:12:22:eb:7a:aa:3e:ef:fa:f6:0d:87:
                    38:01:a1:df:8c:82:45:56:c3:e6:d7:36:5d:90:8a:
                    35:98:8e:c7:0c:5b:76:c1:35:0e:f1:f9:86:a4:3e:
                    19:d1:ff:e3:11:3c:38:2f:12:78:25:81:a7:e5:c2:
                    e6:58:39:61:81:64:0d:57:8a:86:18:1a:19:eb:c0:
                    56:8d:20:59:2f:08:44:21:d4:23:5c:f8:57:20:45:
                    41:0f:2e:f7:0f:87:7d:7f:b8:b6:f5:d1:bf:20:36:
                    2c:ff:7e:98:5f:58:2b:3b:59:d0:e2:4d:62:55:bf:
                    25:28:53:bf:d3:0d:95:b0:b6:cd:5b:47:eb:6b:f1:
                    2b:9a:c5:c8:21:0f:12:b8:53:97:70:26:0a:1c:2b:
                    ef:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:58:98:FC:5B:F1:4A:B3:FD:6F:D5:75:D7:2F:81:E6:32:A4:67:0F
            X509v3 Authority Key Identifier:
                keyid:E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:8d:6e:d2:7e:48:80:34:53:c8:6c:57:87:6d:63:ab:aa:e4:
         00:13:0d:1b:93:17:4a:ed:de:de:ab:70:2b:69:58:f1:c3:ba:
         99:7d:7d:52:8e:2c:e8:fe:f0:ad:7c:c6:bb:2f:55:d9:2b:08:
         64:c7:9f:51:9a:d6:49:ae:ed:e6:26:dd:70:2d:87:37:76:92:
         aa:19:02:24:36:c9:60:43:76:33:08:81:19:11:38:1c:2c:07:
         2a:bf:84:2e:2a:1e:b6:c2:95:cb:90:86:47:51:a0:e9:48:4c:
         18:22:f1:5b:61:8b:0c:82:28:f4:0d:ef:17:f4:9c:c8:8e:a5:
         e9:04:ef:f6:75:9d:2a:e1:81:c0:23:bb:9b:2e:e4:02:f1:4a:
         14:8d:d9:a4:3e:1e:e3:45:09:bf:94:52:d0:35:32:58:b5:cf:
         92:0f:cb:cf:40:27:70:75:da:89:71:90:e3:7b:1e:19:e2:2a:
         dc:b9:74:fe:43:17:a6:09:7b:f1:f7:76:7e:aa:17:63:ad:d8:
         7a:3a:d2:54:db:90:53:9e:a5:78:df:1b:92:8a:14:35:a4:50:
         ff:2f:81:cd:de:25:7c:3e:90:2a:6e:c5:dd:75:15:d9:7f:04:
         07:77:a1:50:3a:2d:5e:04:05:ce:82:d8:23:2d:c6:09:7e:46:
         89:b3:93:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:47:11 2026 by rpki-client