Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
File:                     0LxS2U5i76Pr8syhb0LS5WBziPA.mft (raw, json)
Hash identifier:          tmWnPIxNVpI2IDJlGv+yQEQ3hZOJWn0g3K/ea6+S2Qc=
Subject key identifier:   5B:B8:B9:5D:B0:FD:DB:E5:34:61:D3:C2:D0:24:B8:DD:5F:C8:B0:85
Authority key identifier: D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
Certificate issuer:       /CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Certificate serial:       01A1630EF1EFC08838D39F5CFD468602DFC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
Manifest number:          04D4
Signing time:             Thu 22 Oct 2026 10:01:26 +0000
Manifest this update:     Thu 22 Oct 2026 10:01:26 +0000
Manifest next update:     Fri 23 Oct 2026 10:01:26 +0000
Files and hashes:         1: 0LxS2U5i76Pr8syhb0LS5WBziPA.crl (hash: IMRMpzoAIcuGabr5POjDWVfLN05SecrTBlqzvuSczdo=)
                          2: xokwMX7pBQZJD8_4WfB-FdFEXi8.roa (hash: I09l7esTbT+gqVY+7jBoty1HjPWzG3I2RBTZMIcgZgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Oct 2026 08:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:63:0e:f1:ef:c0:88:38:d3:9f:5c:fd:46:86:02:df:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
        Validity
            Not Before: Oct 22 10:01:26 2026 GMT
            Not After : Oct 23 10:01:26 2026 GMT
        Subject: CN=5bb8b95db0fddbe53461d3c2d024b8dd5fc8b085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:69:b1:6a:f4:cd:05:3f:ef:6c:cd:b2:33:94:
                    37:ab:8a:b8:5a:68:a7:d7:ba:f4:35:ac:4e:b7:d9:
                    8d:1b:f4:60:9b:a4:1a:2d:b1:0e:6e:e7:a7:d6:c1:
                    d2:e7:6d:d2:2f:d7:72:95:c7:b0:a7:fa:12:c4:cf:
                    2e:32:0c:a6:b8:3c:ea:68:38:e7:8c:4c:c5:2d:00:
                    bc:09:e5:e3:b2:d3:d4:5b:9e:0f:f3:45:09:a5:d0:
                    14:34:ca:09:73:26:f4:57:82:c0:44:de:4c:4c:77:
                    36:6b:92:76:6b:3a:5c:81:0d:43:d1:55:c2:bb:fe:
                    ca:fe:84:8b:08:63:9b:03:17:ae:48:b0:e5:d5:7c:
                    f9:6a:73:be:4f:fc:3e:8d:de:fc:d7:12:1c:20:8d:
                    d9:73:71:49:b2:a6:0d:c0:78:7c:29:64:fe:69:7f:
                    b7:32:44:53:8c:94:0b:be:61:b4:7e:d0:fd:63:c0:
                    b3:44:8b:48:25:a2:b9:64:18:d2:86:93:ff:31:c5:
                    f5:d3:7c:59:59:a0:08:d1:aa:90:41:e0:3c:61:13:
                    d0:f8:d4:11:86:62:b2:2f:4d:0e:c5:7b:3e:8a:e7:
                    74:78:36:96:d9:36:93:05:38:86:57:b9:58:f1:d9:
                    1c:6b:89:43:51:fa:48:25:ac:11:13:b4:b3:8e:fd:
                    7a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B8:B9:5D:B0:FD:DB:E5:34:61:D3:C2:D0:24:B8:DD:5F:C8:B0:85
            X509v3 Authority Key Identifier:
                keyid:D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:7f:7a:2d:88:94:c7:06:d5:a5:f6:7f:6c:2a:f4:14:0e:1d:
         fa:94:2f:5a:fb:46:db:a3:b2:28:dd:8b:a4:41:97:83:35:bf:
         c3:51:ae:6f:37:b4:1a:65:27:74:d4:3e:68:f3:5f:64:e4:0a:
         89:cb:b8:92:d4:5f:ab:e4:2d:13:95:ea:4a:45:a5:8f:e2:ad:
         23:c2:a8:63:ce:c9:75:fb:4c:36:08:bf:d9:43:f4:1f:ac:3b:
         4a:88:8f:e9:75:de:e4:98:ee:64:73:d2:30:50:b4:ba:c5:76:
         a3:7f:de:3f:77:9e:ad:5d:4c:a7:a4:53:b6:88:72:f6:40:7f:
         fa:45:5b:00:92:f9:8e:c2:be:39:25:52:53:6b:81:c7:0f:e2:
         e7:13:8a:49:e3:c3:4f:63:68:58:38:c0:b9:91:43:08:7a:73:
         df:73:1e:4b:d5:d6:89:44:96:33:a2:50:3e:7d:fb:c0:8c:2e:
         18:ad:49:10:42:fc:e7:b1:93:2b:76:ba:5a:ab:1a:94:63:e2:
         86:83:59:cc:35:ca:82:0e:fc:f1:29:b7:7a:97:3c:11:95:68:
         16:34:71:e7:da:7e:4a:88:37:54:6a:a2:fe:c0:04:8a:d8:ba:
         9f:05:61:79:79:32:af:fa:56:65:bb:1a:0a:10:8e:56:de:0e:
         4b:ff:f3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 15:38:14 2026 by rpki-client