Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
File:                     F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft (raw, json)
Hash identifier:          oCcYwWjRVQcvZcP3MHCoro7iwfzKcInQOQM8Ybfv32A=
Subject key identifier:   2F:93:BB:34:43:DE:B5:BD:D7:40:CD:9A:04:CC:89:BC:C5:DB:41:78
Authority key identifier: 17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A
Certificate issuer:       /CN=17972d43835cd6a66e54e5a5856ce57de282d43a
Certificate serial:       01A03DF1FDB64233897BE6041B718A1A7A0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
Manifest number:          111A
Signing time:             Wed 26 Aug 2026 12:01:04 +0000
Manifest this update:     Wed 26 Aug 2026 12:01:04 +0000
Manifest next update:     Thu 27 Aug 2026 12:01:04 +0000
Files and hashes:         1: F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl (hash: 5qndYlXyO+MXdEgbVAb7iXUJfnYkJA/kHr5hwR0M0Xc=)
                          2: zzFYra5xZw5Yy-fz5dClERnnWlg.roa (hash: Wpga3aZynT3QdMPkk/GpaE5YFxq1IKAu5eZho4xu1iU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 12:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3d:f1:fd:b6:42:33:89:7b:e6:04:1b:71:8a:1a:7a:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17972d43835cd6a66e54e5a5856ce57de282d43a
        Validity
            Not Before: Aug 26 12:01:04 2026 GMT
            Not After : Aug 27 12:01:04 2026 GMT
        Subject: CN=2f93bb3443deb5bdd740cd9a04cc89bcc5db4178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9f:83:25:f3:81:d6:48:58:07:0a:01:9e:19:
                    83:3f:e5:e6:00:52:05:bc:77:1a:c6:39:42:af:f9:
                    c5:39:f3:d4:ae:d1:0c:da:2d:b0:e7:86:ce:9f:94:
                    d4:b6:4d:4c:8f:da:49:9c:92:28:45:3a:f8:ae:c4:
                    cb:f9:8d:72:c4:48:76:9b:4e:98:1b:c8:8a:48:8a:
                    60:f6:97:bd:73:cf:62:b8:18:2a:af:69:90:73:d3:
                    af:c5:7b:c7:b7:91:ff:ea:d7:3b:16:c7:c0:77:5f:
                    45:19:e8:23:52:c1:3f:b4:61:48:a4:82:a2:77:67:
                    c5:1a:5a:cc:e3:3a:32:dc:6b:31:ac:48:b3:72:c9:
                    c3:1f:60:30:b0:11:08:7d:6f:89:46:9a:07:92:47:
                    fd:9d:e3:e2:6b:3c:86:49:73:b0:a0:fe:5f:6f:8f:
                    d2:12:50:c1:eb:f5:f3:6c:8f:68:d4:2a:03:12:33:
                    f9:e6:bc:de:d7:8f:28:af:cd:b9:14:b4:60:d5:a1:
                    60:d0:e3:f9:af:8c:12:47:2e:8d:d0:99:65:99:e3:
                    2c:8e:14:df:d7:bb:ac:b2:b0:bc:eb:78:08:4b:86:
                    7a:bd:8f:e9:c0:e8:32:78:23:09:66:1a:d4:89:95:
                    6f:bb:53:50:f5:8b:c5:d5:71:e2:e3:2f:8d:53:ea:
                    22:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:93:BB:34:43:DE:B5:BD:D7:40:CD:9A:04:CC:89:BC:C5:DB:41:78
            X509v3 Authority Key Identifier:
                keyid:17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:74:88:46:d5:55:3a:13:ae:5a:0c:fe:e8:91:5b:a9:8a:ee:
         ee:a2:17:f5:66:8b:0b:cd:a8:28:9e:ec:b1:08:7a:9b:91:50:
         f9:4b:54:37:5f:ab:ac:c3:c6:ff:6b:bf:f2:ce:e7:79:ee:65:
         60:bf:3c:66:7c:33:a0:e4:f0:0a:67:4c:da:75:55:cf:7b:15:
         4d:fb:6e:d0:c5:1a:2b:71:b7:39:ff:e2:4b:4b:6a:ae:30:32:
         5e:a1:5e:e4:e9:a9:76:94:00:1b:11:2a:d3:de:c9:b3:4b:28:
         84:66:91:f1:21:49:69:15:df:69:98:d8:44:7f:58:11:cf:35:
         59:6b:72:52:11:aa:80:c0:0f:96:34:e0:11:fa:ef:5c:48:3a:
         10:75:98:f6:19:9d:5c:45:32:2b:60:1c:1d:8c:04:5c:73:6e:
         17:f3:d4:15:ea:58:31:8a:e2:a1:9d:04:79:13:50:8d:69:9b:
         81:65:64:ec:da:12:9e:bb:97:ef:5a:63:58:56:3e:49:ab:3f:
         1d:e9:33:83:a7:25:56:a9:26:fb:4a:36:08:6f:fa:dc:51:78:
         1b:2f:1e:26:b7:52:a9:95:ec:f3:e0:85:e8:d2:93:d4:77:57:
         40:ba:86:d1:7c:95:cb:66:d7:14:0d:11:2e:97:32:a8:39:e2:
         f3:08:54:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:55:41 2026 by rpki-client