Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
File:                     ga5w39QwUnNv6F8A0phM43a3brM.mft (raw, json)
Hash identifier:          eNiWK8q5OoUhRr4wZKExtoCo10IYZ7FwIDeHOjT+dfw=
Subject key identifier:   AB:14:BD:2E:A6:93:57:83:BF:5A:E5:46:32:96:73:8A:B4:FB:1F:3B
Authority key identifier: 81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3
Certificate issuer:       /CN=81ae70dfd43052736fe85f00d2984ce376b76eb3
Certificate serial:       01A178F0DFC1F8770A1F0101ADB7946A2F88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
Manifest number:          0C1E
Signing time:             Mon 26 Oct 2026 16:00:14 +0000
Manifest this update:     Mon 26 Oct 2026 16:00:14 +0000
Manifest next update:     Tue 27 Oct 2026 16:00:14 +0000
Files and hashes:         1: EvlHWqhQzmdjRG2k6tk-9HD_zOg.roa (hash: CaEBziMi2C6rN6WGf7O34W/+WtB1Ogao7r0fRD3u2XA=)
                          2: ga5w39QwUnNv6F8A0phM43a3brM.crl (hash: MeDHcuR+M1VMjC1gMBx4l3dlhUu4UcYK8tVc0M8MwPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:78:f0:df:c1:f8:77:0a:1f:01:01:ad:b7:94:6a:2f:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81ae70dfd43052736fe85f00d2984ce376b76eb3
        Validity
            Not Before: Oct 26 16:00:14 2026 GMT
            Not After : Oct 27 16:00:14 2026 GMT
        Subject: CN=ab14bd2ea6935783bf5ae5463296738ab4fb1f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c7:dc:84:b1:29:30:c5:3d:95:95:ac:44:6a:
                    2d:ba:c8:f9:24:07:d7:62:d6:d1:d4:e1:e6:c9:90:
                    bd:40:30:da:e5:e4:36:ea:0f:02:8e:cc:13:93:b2:
                    40:76:8d:54:b3:cc:36:0a:47:6d:fe:ff:d9:73:3a:
                    aa:44:d3:d2:39:a7:cc:05:96:e8:eb:05:3f:1c:13:
                    61:2a:9f:65:5b:71:db:04:56:b2:8c:2d:03:a8:42:
                    30:47:a0:7c:7e:3a:f3:ee:c4:29:58:92:17:6b:79:
                    07:ef:61:38:b5:1e:fa:e5:f1:40:ae:07:76:82:dc:
                    49:b1:81:7a:36:86:d1:6c:b3:10:6a:e4:8f:0a:99:
                    2f:dd:49:be:52:35:fe:df:9a:88:c9:96:ca:fc:4f:
                    33:57:d9:66:5a:54:f2:05:34:89:d4:79:98:46:bc:
                    d5:7a:c9:52:50:00:2f:58:e0:bb:e1:be:16:3d:65:
                    f3:48:d0:01:cc:07:d6:a8:38:2f:de:92:db:fb:55:
                    a5:76:40:1f:40:54:f6:2f:b3:34:6c:02:61:42:27:
                    1a:8b:ce:ac:3a:ed:85:ff:a2:ee:e4:e6:8f:b2:c6:
                    e5:b2:74:78:91:2f:fc:df:a9:42:bd:da:96:32:06:
                    67:c9:ff:2e:e0:8c:82:f9:4e:db:fe:59:b2:05:1b:
                    3b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:14:BD:2E:A6:93:57:83:BF:5A:E5:46:32:96:73:8A:B4:FB:1F:3B
            X509v3 Authority Key Identifier:
                keyid:81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:57:d3:1b:5d:22:e8:8a:6c:3f:15:cc:bc:70:a1:97:8e:34:
         aa:7c:69:6a:da:f7:b9:71:46:12:db:34:0c:f8:97:e2:92:f7:
         87:67:71:73:eb:17:6f:29:6e:19:a5:17:b9:09:c2:69:51:7e:
         a3:32:81:4c:b9:9d:33:94:48:90:d5:68:66:ff:04:34:83:9e:
         cc:86:5a:1a:99:71:ab:bd:5b:3e:a7:c0:a4:e2:c6:15:5c:9f:
         7f:19:98:bc:4c:da:5c:8a:98:a9:e8:90:58:3b:0a:f0:1d:7e:
         f1:49:93:22:2e:94:2a:7b:d7:da:65:4a:3c:8f:01:2f:2a:f1:
         4d:47:16:96:cc:c9:0e:be:64:c0:fb:13:62:ad:90:ec:16:b3:
         4a:03:01:6a:11:f6:ad:de:02:72:ff:42:99:8b:84:41:f4:f2:
         3b:c3:33:57:52:cb:36:a5:72:2f:98:7e:a1:62:6b:ca:07:c9:
         f6:80:7e:5b:d6:5b:db:d5:68:0a:91:58:e3:51:db:7c:7e:a5:
         d0:33:e7:7b:a8:f8:d6:db:57:c2:e0:90:a8:a7:1b:f0:33:e0:
         db:e8:be:08:25:76:6f:8c:33:5e:bb:ea:b8:e2:2a:0a:89:76:
         b0:41:63:a0:8b:7c:48:3d:e4:36:0b:4e:c9:7c:b0:09:33:26:
         77:cb:0f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:59:09 2026 by rpki-client