Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
File:                     5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft (raw, json)
Hash identifier:          t1jjpdjn+kUaeEZNQFha6P7VzOu9fsrQ+mKGXzOWZYc=
Subject key identifier:   ED:8E:59:DF:A1:7F:10:82:20:8D:B4:84:34:9A:69:1F:22:B7:A2:7C
Authority key identifier: E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A
Certificate issuer:       /CN=e45e4c8c3a885026df8cd6337978e7faa91a446a
Certificate serial:       01A13C6E417D80D827C242C04F9B2BE4A1D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
Manifest number:          1AA4
Signing time:             Wed 14 Oct 2026 22:00:21 +0000
Manifest this update:     Wed 14 Oct 2026 22:00:21 +0000
Manifest next update:     Thu 15 Oct 2026 22:00:21 +0000
Files and hashes:         1: 5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl (hash: p7AtQ1kuLXovSP3GNxPO8jDu0/raQxQ++94ue0pbLdI=)
                          2: ko2j8hnKnRa6XfeSySN88cJHiqc.roa (hash: MyMKVgwxSjCpWrh/r1qz4ah1FabN79izJ21lx/qGswk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 22:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3c:6e:41:7d:80:d8:27:c2:42:c0:4f:9b:2b:e4:a1:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e45e4c8c3a885026df8cd6337978e7faa91a446a
        Validity
            Not Before: Oct 14 22:00:21 2026 GMT
            Not After : Oct 15 22:00:21 2026 GMT
        Subject: CN=ed8e59dfa17f1082208db484349a691f22b7a27c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ea:52:ea:ac:dd:fd:ad:82:16:cd:a4:e4:2b:
                    b3:64:3a:82:c4:81:3b:48:21:b3:38:1a:61:51:14:
                    e2:8c:58:48:f6:a8:f3:b8:c0:93:5a:5b:81:6b:96:
                    81:15:de:85:2d:42:a8:f8:b4:66:66:3b:66:be:33:
                    c6:11:57:ec:1e:db:f9:09:5b:d1:13:6a:58:35:91:
                    14:8a:07:39:be:a7:58:0a:b4:da:d9:8b:d5:0d:df:
                    ec:ac:89:f8:31:95:b0:00:d6:47:b0:98:ae:d9:ab:
                    55:2a:54:20:8f:d4:91:86:ba:1c:f3:ae:5b:b4:a6:
                    ba:59:4d:95:b8:ac:d1:d6:81:25:f3:e0:28:63:d1:
                    4c:92:60:eb:b3:7a:b9:96:b0:2d:c2:18:0c:13:61:
                    b4:d2:96:87:7b:73:03:39:b7:1c:13:00:41:ee:46:
                    4b:29:4a:8c:d2:31:76:80:5b:7c:e0:9a:40:05:2c:
                    f9:bb:5b:10:f1:19:b5:6b:5b:8d:b9:d5:1f:4f:92:
                    23:f7:89:cb:48:32:68:a5:8f:44:0a:a9:3f:2c:22:
                    3d:91:a4:6c:97:25:60:2d:5d:04:b0:86:46:4c:97:
                    07:cd:4e:8e:87:1f:27:b9:e5:7a:5a:fc:9c:0d:be:
                    c8:a2:e5:4b:53:35:ba:7d:40:c7:cf:2a:f9:f7:19:
                    68:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8E:59:DF:A1:7F:10:82:20:8D:B4:84:34:9A:69:1F:22:B7:A2:7C
            X509v3 Authority Key Identifier:
                keyid:E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:44:f7:00:6d:39:83:1c:90:ef:81:fa:3c:63:8d:ce:96:01:
         67:4d:47:bc:d3:8c:07:30:41:f5:8b:19:db:ef:c4:80:d6:90:
         f3:3e:df:dc:d7:3e:3b:84:e2:1a:f2:df:d9:0d:fc:33:c1:14:
         76:43:b9:a9:02:b7:00:8f:b6:e6:40:da:88:37:9c:fa:08:76:
         0a:62:dd:a8:f3:eb:20:f3:44:65:40:73:0c:bb:5b:b0:37:a2:
         b1:4d:73:44:b6:76:d3:2a:00:19:93:96:b8:ea:48:08:7f:99:
         32:6b:7c:ed:6a:59:f9:00:45:bb:84:ff:e9:d3:f2:94:2a:f0:
         b1:2e:b9:66:73:9d:16:4c:8b:11:4e:7d:e5:14:cb:0f:a3:4e:
         d9:a0:98:fc:5a:30:e6:35:2b:36:5f:2e:e6:82:7b:a6:64:93:
         f7:46:fb:2d:04:31:56:3e:24:f5:47:92:4a:69:e2:22:87:65:
         05:6a:ff:a7:20:2f:e0:02:30:f1:12:b1:33:7e:9b:e0:7c:48:
         1a:e5:82:32:b2:54:0c:bf:40:5b:ca:cf:b7:19:88:83:f7:d8:
         96:b9:e3:59:61:8b:5a:c7:d8:e9:b9:9c:2c:30:eb:22:3c:cf:
         25:c3:99:9e:bf:02:97:e5:08:1a:b5:d0:12:3a:65:46:3c:6b:
         5d:c0:6a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:08 2026 by rpki-client