Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.mft
File:                     5wQefn0YTV261xQp42W58Kx2ylI.mft (raw, json)
Hash identifier:          N7fyTnf9SltpbBooJxGXmFZpisSa/M7sonqA1gsk0kM=
Subject key identifier:   FB:94:6B:95:DD:A9:81:BA:8E:E2:1E:87:11:AC:58:7D:4A:C2:84:FA
Authority key identifier: E7:04:1E:7E:7D:18:4D:5D:BA:D7:14:29:E3:65:B9:F0:AC:76:CA:52
Certificate issuer:       /CN=e7041e7e7d184d5dbad71429e365b9f0ac76ca52
Certificate serial:       01A11D883E8ED5C13B9DD3DB0CEB41846322
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5wQefn0YTV261xQp42W58Kx2ylI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.mft
Manifest number:          0372
Signing time:             Thu 08 Oct 2026 22:00:30 +0000
Manifest this update:     Thu 08 Oct 2026 22:00:30 +0000
Manifest next update:     Fri 09 Oct 2026 22:00:30 +0000
Files and hashes:         1: 5wQefn0YTV261xQp42W58Kx2ylI.crl (hash: KAFPR0pFNyRQIELk+viiKfnMjWbUuhLZDsGaWxpOuko=)
                          2: JGaj-VMF82BATvYd0lQOFLHFMc8.roa (hash: pT58jY5xAuPaGqFJHp5UHGx9TDCbSHrDu393sd5XVkQ=)
                          3: Tgyba4QUN4V8tZaz-LrXuKGglcI.roa (hash: 3N1ko+R/E9uyhb+olKiqz7rmkIhC5Q0D6JIxxMh2AjI=)
                          4: ng1Tkoik0468H1Ss1bWCZlgGMXA.roa (hash: syZ/2LZN01/WEB1S0lL+Wm4S4EZXka7JcoKvJG2ctoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5wQefn0YTV261xQp42W58Kx2ylI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1d:88:3e:8e:d5:c1:3b:9d:d3:db:0c:eb:41:84:63:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7041e7e7d184d5dbad71429e365b9f0ac76ca52
        Validity
            Not Before: Oct  8 22:00:30 2026 GMT
            Not After : Oct  9 22:00:30 2026 GMT
        Subject: CN=fb946b95dda981ba8ee21e8711ac587d4ac284fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a2:49:dd:79:1c:13:3d:00:52:70:73:75:c5:
                    5a:3f:67:ea:99:3c:45:b0:b4:18:94:00:44:de:6d:
                    71:c2:89:0b:0c:a0:9b:1d:7a:11:dc:32:17:bb:ec:
                    74:5c:f4:7e:24:7f:7f:f2:db:7d:f5:9f:57:5b:90:
                    d2:59:86:72:a8:62:e5:32:74:5e:af:05:70:72:c5:
                    ed:51:a6:65:18:ca:15:42:ca:6a:4f:70:33:4c:81:
                    b6:88:4a:b3:fd:e6:57:95:4a:b9:49:c7:c7:45:09:
                    70:d3:60:32:5c:93:00:22:f3:b9:88:a9:90:40:e8:
                    16:cf:7f:06:8e:5c:39:16:2a:04:c2:ca:31:52:7d:
                    67:e6:ea:8b:09:7f:20:44:a2:f8:fe:58:4f:eb:c3:
                    58:f0:a3:81:f8:c5:8c:fd:3c:e5:b3:d1:92:03:4e:
                    c3:ee:25:0f:fc:db:c5:4d:ec:4b:a8:19:76:1d:07:
                    04:3c:ab:2f:00:07:81:7a:83:aa:2e:b1:92:10:c6:
                    71:be:54:4b:b6:23:bc:67:2f:79:6d:a9:da:dc:35:
                    69:82:c3:ab:e9:f3:14:d8:09:c1:93:55:b7:6d:f4:
                    c0:e0:f9:20:33:ce:c1:e4:df:c9:53:3a:f2:39:10:
                    24:0b:7f:41:b5:b6:4d:a2:61:1b:de:61:ec:95:33:
                    4a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:94:6B:95:DD:A9:81:BA:8E:E2:1E:87:11:AC:58:7D:4A:C2:84:FA
            X509v3 Authority Key Identifier:
                keyid:E7:04:1E:7E:7D:18:4D:5D:BA:D7:14:29:E3:65:B9:F0:AC:76:CA:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wQefn0YTV261xQp42W58Kx2ylI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:6e:84:18:8f:db:88:c7:3b:21:b0:42:72:c9:6b:43:d5:39:
         d1:d3:92:db:f5:d2:d9:ed:10:c9:46:5f:78:63:1f:db:bb:9a:
         28:44:71:eb:86:33:59:d4:0c:e0:b4:02:80:18:e4:0b:b3:65:
         78:97:97:7d:6c:2d:5c:b9:5c:f9:ac:b5:1f:3b:ea:8e:6c:22:
         fa:70:cd:0e:b2:0d:1d:0e:be:46:92:ab:36:c7:0d:1a:1b:2c:
         3d:b3:cf:5a:28:b6:33:cd:12:93:25:87:b4:37:0e:e0:f0:0e:
         26:c8:9f:8d:26:77:e3:af:de:f2:46:71:91:37:50:13:ef:7c:
         d0:01:dd:c6:e0:a3:1f:a0:12:d3:b3:70:99:03:26:fe:e1:46:
         fa:67:19:7e:e9:44:e8:66:99:ba:c8:ce:c7:32:44:a9:a0:29:
         7b:7e:1d:b9:7d:df:31:d5:3e:01:7c:74:4e:a7:c1:ac:b0:1a:
         0c:11:1a:32:dd:6b:b9:f6:99:f1:52:bb:06:13:30:f7:53:0b:
         69:7e:07:b1:7b:ab:7e:27:3c:df:66:1d:c9:84:9b:35:bd:d0:
         4d:ba:8e:05:37:6e:37:cd:04:9f:ca:e6:18:20:6c:57:16:6b:
         d7:0d:c8:88:03:c6:9d:af:00:ca:7f:62:ba:a5:9e:45:0a:82:
         64:2c:5e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 05:23:22 2026 by rpki-client