Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/s5RC9lqgEV62E6s4LH5Ic_CU9Kg.mft
File:                     s5RC9lqgEV62E6s4LH5Ic_CU9Kg.mft (raw, json)
Hash identifier:          rnA2OPrjszH8Eo1cMccak9FaEhCsxmrmzULEQG6Sxm4=
Subject key identifier:   1A:71:64:58:43:BF:51:5D:C3:27:09:E3:34:B9:C4:E2:4A:0E:76:B7
Authority key identifier: B3:94:42:F6:5A:A0:11:5E:B6:13:AB:38:2C:7E:48:73:F0:94:F4:A8
Certificate issuer:       /CN=b39442f65aa0115eb613ab382c7e4873f094f4a8
Certificate serial:       01A14C8729FC7996CE5909B5D9C323B78811
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s5RC9lqgEV62E6s4LH5Ic_CU9Kg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/s5RC9lqgEV62E6s4LH5Ic_CU9Kg.mft
Manifest number:          0126
Signing time:             Sun 18 Oct 2026 01:01:28 +0000
Manifest this update:     Sun 18 Oct 2026 01:01:28 +0000
Manifest next update:     Mon 19 Oct 2026 01:01:28 +0000
Files and hashes:         1: Zx7ta9FTjec_p2jtXFF25Klln9I.roa (hash: U3Gh0cqZqaCBOfUs4nY1MHFOyoBpx1SuOO2bjlOIHvQ=)
                          2: s5RC9lqgEV62E6s4LH5Ic_CU9Kg.crl (hash: bInv1NZYRxBpYGN47cJVr0/iFXEkqEqzMefHMIc6QXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/s5RC9lqgEV62E6s4LH5Ic_CU9Kg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/s5RC9lqgEV62E6s4LH5Ic_CU9Kg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s5RC9lqgEV62E6s4LH5Ic_CU9Kg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 01:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4c:87:29:fc:79:96:ce:59:09:b5:d9:c3:23:b7:88:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b39442f65aa0115eb613ab382c7e4873f094f4a8
        Validity
            Not Before: Oct 18 01:01:28 2026 GMT
            Not After : Oct 19 01:01:28 2026 GMT
        Subject: CN=1a71645843bf515dc32709e334b9c4e24a0e76b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e6:62:36:ef:88:6b:92:65:ba:25:70:e6:5a:
                    68:7c:4c:78:5d:ec:e2:c9:59:aa:5c:5d:29:0f:22:
                    e6:41:35:64:b7:f3:81:e0:b6:04:9b:b0:64:df:c6:
                    fa:0a:26:93:a6:08:c2:85:5f:68:de:f4:4e:0d:0d:
                    b7:24:65:99:fa:12:24:ab:5b:83:d6:82:3c:26:7c:
                    3c:ca:91:f5:6c:a3:28:6f:d6:12:b5:40:41:54:53:
                    38:61:c7:3a:4f:50:b7:56:d1:64:3f:8b:d7:f3:9f:
                    19:31:b8:3c:bd:f3:88:cb:88:68:a6:31:75:61:ba:
                    6e:58:86:f2:a9:9a:13:b5:d6:38:15:8a:11:c2:ee:
                    3d:63:94:cb:bb:f7:ce:e9:98:59:5e:d0:22:09:87:
                    7a:d8:df:73:7f:5a:b8:47:85:83:5f:60:69:ad:5b:
                    84:6e:9a:97:f5:0d:ea:44:54:3e:82:48:b8:a8:98:
                    f9:6a:83:03:39:c4:d4:f8:61:2e:8b:df:36:e3:70:
                    af:cc:25:a4:d2:c7:33:cf:44:3e:db:7d:d1:61:75:
                    dc:70:3e:68:2d:90:43:96:f8:4a:e2:87:a4:9a:ea:
                    c7:eb:57:22:17:13:76:88:dd:f5:6d:0c:ba:74:73:
                    1c:a6:bc:0f:1e:f4:13:0a:62:53:45:78:c1:9e:d9:
                    dc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:71:64:58:43:BF:51:5D:C3:27:09:E3:34:B9:C4:E2:4A:0E:76:B7
            X509v3 Authority Key Identifier:
                keyid:B3:94:42:F6:5A:A0:11:5E:B6:13:AB:38:2C:7E:48:73:F0:94:F4:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5RC9lqgEV62E6s4LH5Ic_CU9Kg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/s5RC9lqgEV62E6s4LH5Ic_CU9Kg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/s5RC9lqgEV62E6s4LH5Ic_CU9Kg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:cc:45:01:36:6f:0d:a9:f0:a4:4c:c8:3a:e0:cd:a3:8b:1d:
         bc:ce:3d:44:f8:a5:cc:63:95:fb:7b:f1:80:ee:38:3e:91:d4:
         9f:bb:cd:5a:fc:ba:3b:7d:f4:44:9e:df:32:d9:70:e5:7f:b2:
         d2:27:bf:f7:40:6c:32:12:12:bb:c6:7b:25:00:e6:8e:70:31:
         7f:62:96:93:82:8f:7c:1a:33:88:33:b8:63:6f:9a:f1:63:d1:
         3e:f9:58:1a:a4:61:21:8f:7c:35:58:7a:8d:64:5a:9b:93:0a:
         67:29:13:da:55:70:57:db:51:3f:26:9a:f0:84:71:26:9a:f7:
         7c:d5:1f:2c:a2:e4:36:02:be:21:32:8c:d9:a8:9f:c0:48:2b:
         aa:ce:18:ed:8f:9f:45:26:eb:d6:6f:5d:a5:09:fb:0c:68:87:
         1e:a0:b7:08:9e:22:bf:ec:77:8d:76:a8:67:4c:a9:a9:d6:8b:
         c3:19:ce:6a:d4:ba:7f:7b:17:af:fb:6e:a1:e3:91:88:82:a9:
         0f:c7:6c:3a:23:0a:65:4b:24:e5:f1:fc:5a:70:fb:5d:0c:0c:
         9d:5a:eb:45:8c:fc:ab:31:df:07:13:04:8f:d3:95:47:2d:bb:
         ec:9c:26:15:e9:c6:5c:f2:15:dc:d7:98:1d:90:9b:2d:29:73:
         dd:8b:9a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 12:06:36 2026 by rpki-client