Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
File:                     x5g7OpdY_L54cz2RVa7SZsiCojw.mft (raw, json)
Hash identifier:          6b733QfDxPYbVU+dhDszuQ4b8ultVBtpYs1BzUxTISI=
Subject key identifier:   A1:CB:17:6C:32:9F:75:76:28:8C:C1:8A:53:4B:DA:71:9A:54:6B:4E
Authority key identifier: C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C
Certificate issuer:       /CN=c7983b3a9758fcbe78733d9155aed266c882a23c
Certificate serial:       01A11B6334F56E9D0678062394A6708660B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
Manifest number:          17A5
Signing time:             Thu 08 Oct 2026 12:00:48 +0000
Manifest this update:     Thu 08 Oct 2026 12:00:48 +0000
Manifest next update:     Fri 09 Oct 2026 12:00:48 +0000
Files and hashes:         1: INecSgDNWHvp6sU-WpJihfiFh4s.roa (hash: PMEEstkE23N+oMl4zNZYpTJcYs3rPhZEK/XuV630Gno=)
                          2: f25A04rpXtD2_br_jQIVVfQ8etM.roa (hash: iSZljQkRURevE7K28zcSzw6RdndhY9rvXLjgdmSdTqY=)
                          3: ggUa6LfIuLLVR5P1Qr24VmoyZso.roa (hash: rdmuXEokTMYqrj4xUmy2EZVO5gA++Wv14CxkDlRPOSQ=)
                          4: gnB4DwAgCjyQcWFzJEdE7GWr73o.roa (hash: HW/BGej/dJUcVDYCwLRVJHa3/FSej9vAGH4VzbSF+To=)
                          5: tmpjXkdMeErzXzSF-Knv6lEK4MM.roa (hash: 59w580G8bYKyMW9mWYISKVPkaSir7aOf2hHeB7WsN6s=)
                          6: w_ptOPR66g-2hUDEWzrs74clcAE.roa (hash: 6vuuqzAxRKqIgwnNrTyFV+eVf/OZTeXgi5JQBVeXXCI=)
                          7: x5g7OpdY_L54cz2RVa7SZsiCojw.crl (hash: 0bNFn+rbxHhvxI70dfEtXKFkzg9M7C3IPvojXEmLfSU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 12:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1b:63:34:f5:6e:9d:06:78:06:23:94:a6:70:86:60:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7983b3a9758fcbe78733d9155aed266c882a23c
        Validity
            Not Before: Oct  8 12:00:48 2026 GMT
            Not After : Oct  9 12:00:48 2026 GMT
        Subject: CN=a1cb176c329f7576288cc18a534bda719a546b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:63:64:2e:1c:c0:c8:b0:ce:8e:20:4f:63:71:
                    0e:92:51:71:39:31:e9:05:bc:e5:8c:fb:d0:1b:60:
                    54:48:21:40:12:6f:82:4e:b2:c1:ac:38:6e:09:6d:
                    03:cd:91:cc:0f:7d:e6:50:6e:4b:ad:5b:59:39:20:
                    41:7e:7b:96:20:c8:ec:cf:07:28:8e:24:45:df:f6:
                    b2:ee:6b:41:bb:04:30:e4:8c:81:59:4d:2c:7f:d1:
                    c9:e5:65:fc:95:af:8c:2c:8a:d4:42:cf:38:99:c6:
                    26:c2:4c:ab:4b:80:30:40:d7:74:2c:35:b5:5f:7c:
                    4d:69:78:29:7d:39:08:88:af:27:bb:73:2e:7a:95:
                    cb:f0:ea:2b:a2:45:a5:70:8e:d2:83:bf:48:06:56:
                    5a:64:61:88:89:c4:8d:fe:fe:84:8d:b9:eb:c3:ca:
                    b9:32:77:26:70:c8:ed:da:ee:83:8f:ea:ed:c4:9f:
                    c6:21:0c:a1:12:06:70:5f:40:8b:59:6a:6c:26:8f:
                    bf:df:b5:35:bc:b4:27:3f:67:20:da:92:a2:de:4b:
                    c9:df:91:1c:b5:71:71:3b:2a:83:f9:8a:67:c2:fa:
                    db:58:a1:c5:9b:18:32:c8:e7:a0:13:6f:9e:02:91:
                    71:a5:17:79:d4:1d:5e:ac:9d:a6:ed:68:1c:b5:95:
                    5d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:CB:17:6C:32:9F:75:76:28:8C:C1:8A:53:4B:DA:71:9A:54:6B:4E
            X509v3 Authority Key Identifier:
                keyid:C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:6f:2e:0d:9a:c1:84:e2:53:30:55:f0:c9:8b:0e:5f:26:18:
         fd:47:8e:08:6b:94:09:89:e1:da:9e:7d:e8:ec:fd:68:62:11:
         a7:54:35:e9:c1:e8:df:89:75:50:7e:cb:72:97:b4:c1:6c:79:
         c2:0f:bb:75:f5:3b:20:58:ec:61:8c:62:68:9b:a8:f5:f1:14:
         56:96:c7:fe:0d:aa:ea:f2:9d:b3:40:e7:38:d1:35:04:a8:0e:
         8b:74:08:3a:79:20:54:14:ca:d0:d4:f6:98:1f:05:de:80:25:
         db:e6:ec:a4:54:c3:20:7f:55:67:7b:e7:ce:ed:84:d5:0e:85:
         1f:18:cc:8c:53:e3:58:46:20:61:1a:66:42:99:1a:4c:1d:94:
         9b:6c:42:a7:09:ed:b8:7b:55:9a:3d:0c:ea:2a:34:65:20:c6:
         fc:ad:89:38:66:9c:3a:b1:3d:25:6d:99:0e:e2:6b:c9:71:d2:
         29:ef:60:51:f2:37:db:44:fe:2f:8d:42:20:af:19:b8:1e:de:
         82:56:c6:c9:c3:c1:15:79:fd:8d:d3:ee:77:bb:91:f5:70:e1:
         de:50:d0:ea:06:40:d3:01:35:3f:cb:d4:be:58:f3:c1:a9:61:
         c0:3e:1f:5d:af:e7:85:4e:64:d0:15:87:07:db:a9:44:62:7f:
         1c:3b:13:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:56:17 2026 by rpki-client