Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
File:                     5WzVePQvjeBnI2dnxs_CusvBbgU.mft (raw, json)
Hash identifier:          F2QiSiOhjMrCoqAbaCIsM1i+eHLqzLPizpCT3s7cXYY=
Subject key identifier:   8F:7F:A3:95:34:C7:6F:94:13:60:21:E8:10:46:9C:24:22:F9:C5:E0
Authority key identifier: E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05
Certificate issuer:       /CN=e56cd578f42f8de067236767c6cfc2bacbc16e05
Certificate serial:       01A17D73EA79B6C675E3FB9BCC1A3997AB2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
Manifest number:          1A43
Signing time:             Tue 27 Oct 2026 13:01:50 +0000
Manifest this update:     Tue 27 Oct 2026 13:01:50 +0000
Manifest next update:     Wed 28 Oct 2026 13:01:50 +0000
Files and hashes:         1: 5WzVePQvjeBnI2dnxs_CusvBbgU.crl (hash: 1j3VjBqOCumDMcBs2STItnFq2TWLJkrwO6FgXjDkBsI=)
                          2: _xb7dLIH6IMlpZq1SYlWl6nvqS4.roa (hash: oZ1UVmQ5z1c0zOrIXMtPyJxvit0yakzMpq+pTeT+fvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:73:ea:79:b6:c6:75:e3:fb:9b:cc:1a:39:97:ab:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e56cd578f42f8de067236767c6cfc2bacbc16e05
        Validity
            Not Before: Oct 27 13:01:50 2026 GMT
            Not After : Oct 28 13:01:50 2026 GMT
        Subject: CN=8f7fa39534c76f94136021e810469c2422f9c5e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:28:8f:0a:a3:3b:84:1c:21:ab:d5:0a:e4:a3:
                    75:a1:2e:ed:5e:a5:39:65:80:4d:63:5d:03:ee:f1:
                    ad:35:de:61:f8:9f:f2:6d:f5:0d:fa:6a:f6:56:c0:
                    45:29:11:e5:ac:41:98:94:07:37:75:c7:4a:05:4f:
                    c7:7c:77:c7:2c:d4:ae:67:ca:ee:c4:2a:31:d7:84:
                    5e:7e:ef:ac:54:f0:af:f8:94:45:f9:2f:fe:1f:6f:
                    68:bc:ab:72:fc:4f:69:e9:82:c9:62:65:f0:c7:86:
                    ec:9d:06:33:0a:02:6d:f6:45:1a:74:f9:e1:20:15:
                    ba:aa:c7:86:99:78:d4:d2:39:1d:53:8b:ca:df:01:
                    a6:71:c0:d8:62:28:0a:4a:9b:f1:b0:e4:05:ad:2f:
                    86:8e:25:73:a7:0d:85:67:32:1a:4a:0e:36:cb:4e:
                    bc:47:b3:b6:56:c3:1a:ab:86:e4:63:1b:98:a0:1e:
                    1c:eb:dc:77:08:c3:1a:1d:da:6c:e1:d3:81:22:9d:
                    12:f9:ce:cc:f4:0b:99:86:60:99:ff:d4:1e:2c:62:
                    2d:a3:65:83:b9:c9:13:2a:37:96:e9:58:31:d4:ce:
                    f2:3c:48:a2:f3:e0:0b:64:88:1f:1d:95:8f:37:8b:
                    63:71:c8:5c:c9:d8:5d:5b:d1:4d:65:64:20:e6:80:
                    ba:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:7F:A3:95:34:C7:6F:94:13:60:21:E8:10:46:9C:24:22:F9:C5:E0
            X509v3 Authority Key Identifier:
                keyid:E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:46:d6:7a:d9:44:a8:93:77:e4:db:16:c8:50:64:4e:8e:e1:
         ca:73:98:0f:6e:3f:3e:c6:50:dc:a1:cd:aa:99:4a:08:93:da:
         b0:07:7d:88:1c:5c:06:60:8a:9d:3b:63:8a:09:de:67:ec:c9:
         de:b0:6f:19:b8:ce:3a:2e:9c:c4:a9:10:f7:c8:da:47:c4:00:
         98:8d:c5:a4:2d:68:cc:8e:52:d1:fa:31:86:ce:9e:82:4d:a6:
         93:a2:12:33:cc:ec:5d:6f:b8:31:68:cb:60:d3:06:86:7f:41:
         c6:65:7a:2d:66:24:6d:c1:1a:81:bd:97:ba:2d:87:11:05:6d:
         9c:26:f3:94:0a:03:31:66:e9:1f:10:69:bc:79:85:a4:45:0b:
         97:69:1f:bf:74:a4:d7:3a:0f:b7:43:ea:79:8d:49:6b:5b:3d:
         d4:43:1e:b0:b2:76:71:5c:8a:65:35:da:df:08:74:ac:d9:83:
         3c:25:4b:4f:f1:bf:e3:6b:6c:3d:48:bf:2d:e4:aa:69:cf:70:
         ab:85:87:92:f7:58:52:37:19:ad:6c:1a:d4:f6:b7:15:ec:f9:
         40:ed:af:73:ae:03:3f:fe:02:e2:63:00:60:79:b6:af:d6:bf:
         27:d6:ae:d8:36:4f:de:a8:00:52:b0:f3:35:11:4a:db:95:ff:
         98:2c:c8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:41:25 2026 by rpki-client