Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
File:                     05aWp2gOlVKR_q-h77qfvP8viIs.mft (raw, json)
Hash identifier:          3BiIkcX9BSiA74ErEKgT0jXQPX/rcmTsKcKcjA922Pg=
Subject key identifier:   CD:83:1B:D0:A2:DE:10:D0:8E:11:69:D0:39:17:EF:C7:C1:B4:10:F0
Authority key identifier: D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B
Certificate issuer:       /CN=d39696a7680e955291feafa1efba9fbcff2f888b
Certificate serial:       01A17927C59A32BA6D76E7C617917F9536A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
Manifest number:          15B4
Signing time:             Mon 26 Oct 2026 17:00:11 +0000
Manifest this update:     Mon 26 Oct 2026 17:00:11 +0000
Manifest next update:     Tue 27 Oct 2026 17:00:11 +0000
Files and hashes:         1: 05aWp2gOlVKR_q-h77qfvP8viIs.crl (hash: F9z//CMpZ1fUuGXyBcmDAxJzvyjuujDnHYsqWbs358k=)
                          2: gbxId3GOowlzCHPpf6Jyfef6KGQ.roa (hash: 4i/aGAudyyDfHz6MTEKI9eUEQHtSeNI1RbC1NE+R+ds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:79:27:c5:9a:32:ba:6d:76:e7:c6:17:91:7f:95:36:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d39696a7680e955291feafa1efba9fbcff2f888b
        Validity
            Not Before: Oct 26 17:00:11 2026 GMT
            Not After : Oct 27 17:00:11 2026 GMT
        Subject: CN=cd831bd0a2de10d08e1169d03917efc7c1b410f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:10:d2:70:72:1f:ac:d1:71:1d:a3:5a:9a:3b:
                    b7:39:90:5b:ad:de:ad:f6:7b:0f:35:14:54:89:3b:
                    d6:68:ba:0f:60:eb:31:c8:24:ad:9e:db:7a:43:2b:
                    08:39:3b:42:4e:a8:00:78:83:95:cd:60:8f:71:09:
                    dd:f3:9c:79:bf:79:e5:64:2b:99:e5:13:08:0d:af:
                    d2:b4:ac:e2:8b:be:07:79:01:43:07:b3:76:c5:39:
                    76:8f:cc:44:ca:af:27:95:e9:d0:9d:52:e5:be:8b:
                    84:91:cd:b6:45:d0:ea:50:53:7a:04:a0:a6:b2:13:
                    15:99:9b:1c:48:f5:0e:32:70:67:8a:56:67:2c:6e:
                    ca:1e:d0:c2:d5:9d:5e:c3:96:f2:99:b3:21:5d:d3:
                    e1:14:59:ae:d3:9b:71:31:c6:71:ee:4f:c1:3b:e1:
                    f5:b3:26:8f:65:81:55:a0:2f:8b:a3:c5:14:5f:87:
                    10:ed:34:95:82:1c:d7:a9:72:2b:86:20:c0:02:1f:
                    07:48:48:7f:ae:ae:9c:a6:02:8b:ef:89:4d:d1:4e:
                    3e:8f:ee:1c:e9:e1:c4:8c:4b:c3:18:50:6e:39:ca:
                    6d:fc:70:4f:01:b8:5f:cb:41:cb:6e:ad:bc:6c:d9:
                    eb:d7:ef:44:db:3d:2e:3f:52:cb:b7:ca:70:18:3f:
                    37:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:83:1B:D0:A2:DE:10:D0:8E:11:69:D0:39:17:EF:C7:C1:B4:10:F0
            X509v3 Authority Key Identifier:
                keyid:D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:82:f6:11:4a:c3:58:69:41:b5:85:cc:a5:f1:65:49:24:38:
         e6:1b:d1:78:dc:e2:3a:c1:62:a8:21:65:a4:f6:0b:58:99:2d:
         cd:34:3a:d6:17:80:b5:72:99:47:43:5a:0d:a6:7f:d3:27:33:
         03:50:ea:c8:8c:b2:e2:83:f6:ea:3a:33:95:94:36:50:6b:b1:
         8a:a0:f9:ed:a8:ba:70:75:b7:f5:6f:21:e3:7f:77:c9:98:de:
         cb:e2:e6:e9:3e:71:e0:f2:f9:91:d6:24:c1:22:f0:41:a7:b2:
         2b:e8:32:15:6d:ed:57:79:c1:91:5f:6f:74:ca:68:af:6b:d8:
         a8:a9:70:90:f0:8e:56:92:d8:86:2f:fd:41:1b:fd:75:4a:f7:
         fd:1d:1d:99:36:20:55:8b:8f:3a:2f:e7:2b:21:d2:be:d2:17:
         ba:f1:4b:f6:d4:87:35:52:b5:03:43:b9:f8:af:ce:90:69:f7:
         88:37:c6:20:d3:86:82:c9:75:4d:6d:ea:98:54:5f:b7:d6:07:
         dc:fb:c4:dc:de:a4:0a:38:43:e1:8a:c1:2f:48:64:e9:09:a4:
         ac:a8:76:eb:04:22:e9:3b:dc:0c:e5:7c:c6:68:3c:32:3a:3a:
         41:c1:ff:33:5f:ec:59:86:95:3c:b0:e2:bf:a0:75:c5:5e:59:
         9e:74:0d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:59:23 2026 by rpki-client