Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/l5oEa_9hohu7Kche9ClhJoX7g0s.mft
File:                     l5oEa_9hohu7Kche9ClhJoX7g0s.mft (raw, json)
Hash identifier:          kCQgsKGM8yfG5AbhLy1Gdz8X/cyTHI/Mswvy3g8kUWI=
Subject key identifier:   28:A5:DB:D7:57:A2:CA:E2:49:45:95:43:4D:36:19:28:7B:91:5C:45
Authority key identifier: 97:9A:04:6B:FF:61:A2:1B:BB:29:C8:5E:F4:29:61:26:85:FB:83:4B
Certificate issuer:       /CN=979a046bff61a21bbb29c85ef429612685fb834b
Certificate serial:       01A14F878687FF34764255E38BD101E677D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l5oEa_9hohu7Kche9ClhJoX7g0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/l5oEa_9hohu7Kche9ClhJoX7g0s.mft
Manifest number:          0127
Signing time:             Sun 18 Oct 2026 15:00:44 +0000
Manifest this update:     Sun 18 Oct 2026 15:00:44 +0000
Manifest next update:     Mon 19 Oct 2026 15:00:44 +0000
Files and hashes:         1: 4UrXqTyIhsiIh5MLmWgIum1q7pw.roa (hash: 2Njc07dtF+G/jfmcnG8T0/AFPXKazhzNBGgSu3w0kFk=)
                          2: 5-DKG8fn4QobpRmv9gABaxQoiuE.roa (hash: DUPw9M0VyA/Xw3DEIPcetVhxVErX2fs+ure40DbwSwQ=)
                          3: gcoprSDzcSsV57DfpyN6ORzFOu0.roa (hash: e7PiSt8oPiVMxtHNp1MWSD4g+jfiUZHkgB0+FgMdhXo=)
                          4: l5oEa_9hohu7Kche9ClhJoX7g0s.crl (hash: P67krNkQfAzfCf/+r2BPpOmzyavbBa6ZxtezdbRio+g=)
                          5: t5alOfpywogJ69ms_ghfbpQSXMo.roa (hash: Xm7EQvutEbyH9q4RgfnjrzY/7bndMKJ0WVlpuryg+3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/l5oEa_9hohu7Kche9ClhJoX7g0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/l5oEa_9hohu7Kche9ClhJoX7g0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l5oEa_9hohu7Kche9ClhJoX7g0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 15:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4f:87:86:87:ff:34:76:42:55:e3:8b:d1:01:e6:77:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979a046bff61a21bbb29c85ef429612685fb834b
        Validity
            Not Before: Oct 18 15:00:44 2026 GMT
            Not After : Oct 19 15:00:44 2026 GMT
        Subject: CN=28a5dbd757a2cae2494595434d3619287b915c45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:08:b5:a0:34:77:9e:c5:90:f8:ad:f6:b7:d6:
                    2b:a0:c8:38:57:f7:9c:c3:20:84:a3:c9:11:d9:35:
                    84:2b:78:13:ea:cf:52:28:99:b2:59:51:36:be:58:
                    9a:d5:a9:63:ca:01:f7:44:dd:fd:dc:4d:a1:50:69:
                    ad:2d:fb:6b:d4:51:44:94:54:ce:40:df:4f:5d:b4:
                    58:2b:f2:48:26:8f:d5:b3:ea:6a:74:4e:bb:72:c3:
                    73:c3:75:03:06:96:22:4a:9a:69:63:4f:22:de:b9:
                    f3:7c:24:b8:cb:16:19:5e:56:fe:8f:52:a9:24:18:
                    28:bb:7d:fc:da:02:26:f5:83:6b:3e:78:da:72:1a:
                    52:e4:71:6a:0c:d1:79:e7:5c:5b:04:23:b3:74:56:
                    56:0f:b9:10:3b:29:d3:c8:b6:40:45:cf:1e:37:a4:
                    1e:ed:ae:77:ab:7f:64:bd:13:69:43:1c:31:76:0f:
                    aa:0c:8b:2c:d2:0c:af:43:01:fc:b7:61:00:67:70:
                    0b:92:88:3f:d7:ed:0f:28:81:a4:d0:a4:e4:fc:43:
                    8e:05:d2:d9:be:7f:ab:94:d9:54:89:47:ab:39:93:
                    71:c2:66:49:df:e7:28:18:86:6d:3f:93:c5:60:86:
                    bc:b4:a5:36:d2:c1:c0:58:12:c0:9f:54:09:08:e4:
                    3a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A5:DB:D7:57:A2:CA:E2:49:45:95:43:4D:36:19:28:7B:91:5C:45
            X509v3 Authority Key Identifier:
                keyid:97:9A:04:6B:FF:61:A2:1B:BB:29:C8:5E:F4:29:61:26:85:FB:83:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5oEa_9hohu7Kche9ClhJoX7g0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/l5oEa_9hohu7Kche9ClhJoX7g0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/l5oEa_9hohu7Kche9ClhJoX7g0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:5e:7c:b1:06:53:de:03:99:5a:90:2c:72:32:8b:b9:98:20:
         1a:3c:a8:13:c8:bc:f1:ee:a0:5b:e3:c0:c7:a2:ab:ef:e4:bc:
         97:98:e6:6f:a4:77:5d:54:de:8d:6e:a4:ca:26:2f:fa:1a:c2:
         cf:c2:7a:6d:20:a2:70:82:64:30:ff:52:ba:14:87:6e:f0:bb:
         18:9e:fa:fc:f8:8b:ef:a0:68:af:5c:bf:ae:31:55:91:cd:b4:
         8a:09:09:35:3a:e6:43:51:84:98:af:9f:d0:65:6a:c4:9d:5f:
         b2:ac:09:25:17:6a:46:64:0c:4d:e0:19:86:92:2f:df:26:6f:
         20:df:a9:4d:a1:26:62:e2:92:22:47:28:e6:68:c1:a6:6e:3c:
         07:56:94:47:d9:d4:18:ce:55:e9:9c:e0:38:de:10:ce:95:a7:
         e9:89:7c:40:29:7f:7a:02:93:fd:2d:2e:d6:1f:d5:8c:0e:06:
         75:60:f3:b3:41:54:5e:70:11:a6:c7:1a:c1:28:9c:f3:3b:e8:
         b8:62:24:e3:db:8c:c9:64:4d:bb:b5:da:3f:1a:a4:3f:be:ba:
         07:bb:87:aa:2d:6e:2a:cb:83:d8:b3:ce:81:22:53:bc:b4:30:
         6a:c4:67:b2:04:cf:e5:af:83:d4:9f:e5:f4:30:52:18:07:48:
         e9:17:7c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 01:25:38 2026 by rpki-client