Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
File:                     5qTLdM9STBgSHVO1MsA8BvSta-Y.mft (raw, json)
Hash identifier:          snkU0FVmZI8VsCeZfn3XTAfUZIf/HTzxr0zwn/IUgx8=
Subject key identifier:   53:22:56:9D:5A:5C:30:7A:9B:30:BF:47:11:E8:6C:E1:3E:80:27:FE
Authority key identifier: E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6
Certificate issuer:       /CN=e6a4cb74cf524c18121d53b532c03c06f4ad6be6
Certificate serial:       01A13C6EDC2DE4F6144D8182CA2330682D80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
Manifest number:          149E
Signing time:             Wed 14 Oct 2026 22:01:00 +0000
Manifest this update:     Wed 14 Oct 2026 22:01:00 +0000
Manifest next update:     Thu 15 Oct 2026 22:01:00 +0000
Files and hashes:         1: 5qTLdM9STBgSHVO1MsA8BvSta-Y.crl (hash: rCXT3Icy2NfLPPz/YNld1t7YywPji5WhNDuZDWVb1Vs=)
                          2: PHHmlI_lozSBsIeTe7D4ho8MMgk.roa (hash: Q0/1mQZnoW0veYxUY+kdm56TFO9WzQm4B7+icQrGOc4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 22:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3c:6e:dc:2d:e4:f6:14:4d:81:82:ca:23:30:68:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6a4cb74cf524c18121d53b532c03c06f4ad6be6
        Validity
            Not Before: Oct 14 22:01:00 2026 GMT
            Not After : Oct 15 22:01:00 2026 GMT
        Subject: CN=5322569d5a5c307a9b30bf4711e86ce13e8027fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7c:fe:5d:58:f5:d3:69:93:0e:79:77:fc:e9:
                    03:07:f3:c4:a6:a0:17:ef:e9:cc:53:0a:57:65:a8:
                    85:75:25:81:15:64:97:9b:28:19:47:55:92:98:9c:
                    e4:66:5b:37:76:65:f7:eb:d5:db:ff:14:0a:c3:c3:
                    01:11:b3:56:d2:06:f6:be:7c:2b:47:5d:38:23:91:
                    74:e7:3e:61:4b:44:73:8d:f9:39:81:bd:90:2d:bc:
                    77:44:a2:3d:d5:e2:c4:d4:96:da:5a:93:3c:e9:86:
                    48:e5:12:46:bf:5c:09:85:2e:d2:5a:06:f8:79:8b:
                    02:eb:7a:2e:cb:b9:6c:a7:55:85:42:46:a9:d0:d8:
                    17:98:d0:ec:42:06:fc:a5:4b:a2:29:d2:d2:08:f9:
                    bc:14:9c:f1:ff:2b:47:d4:78:63:d2:09:ab:bb:35:
                    ab:a0:76:d8:4d:75:7c:af:cd:0e:e9:7c:e9:6a:05:
                    d3:aa:72:6b:38:35:64:51:06:e5:ac:66:d2:b3:57:
                    44:a0:71:a5:3c:6a:64:4d:99:0d:91:e7:c3:9b:a5:
                    d0:58:73:c2:86:8f:ad:86:65:3b:34:c6:55:b1:5a:
                    1f:27:a7:50:0d:8b:a6:4d:42:98:b0:ac:c6:bb:ac:
                    42:6f:de:fc:1d:d1:5c:9b:8c:ef:b2:af:bc:57:e8:
                    e4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:22:56:9D:5A:5C:30:7A:9B:30:BF:47:11:E8:6C:E1:3E:80:27:FE
            X509v3 Authority Key Identifier:
                keyid:E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:e7:41:ef:78:7c:cb:cf:72:bc:dd:16:72:d3:42:f7:84:5e:
         df:08:96:65:6d:99:45:b7:b5:67:82:fa:51:2d:f1:2e:cf:9c:
         43:9b:b5:fa:56:00:73:06:8f:63:8c:1d:2b:8f:90:75:f7:b2:
         a1:f9:5a:f3:4d:6b:67:9c:e4:87:07:4f:67:c3:4d:7d:3b:7d:
         6f:56:8b:a4:58:64:e5:7d:9b:c0:62:fa:6d:5c:62:8d:30:0c:
         02:9b:1d:38:8d:0e:a6:6e:de:6a:0f:da:58:24:bc:72:54:19:
         80:50:92:e9:e9:77:c0:4d:dc:ea:de:c2:7c:50:89:e1:34:56:
         eb:1b:4e:82:ba:8b:0b:a9:0c:75:29:1e:ab:77:26:a0:0f:f3:
         e8:56:6d:7a:cb:84:2d:c9:04:27:2a:c9:fc:fc:6e:53:2f:98:
         ce:d2:b4:53:b5:9a:6f:68:4a:ee:db:5f:e2:18:3b:01:ce:2c:
         ee:b5:81:96:68:62:e1:54:0a:c8:b0:e3:0f:3f:c4:3d:d8:33:
         ef:d8:78:ff:da:f6:07:4e:0c:79:e3:a2:07:4a:fa:b6:7a:69:
         8a:76:5a:68:e2:6f:8a:56:25:0e:fa:09:56:5d:b8:97:02:c3:
         82:ac:30:3a:12:8f:6d:cc:17:45:81:5c:e9:77:3c:23:9f:52:
         fe:f0:b2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:13:40 2026 by rpki-client