Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft
File:                     5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft (raw, json)
Hash identifier:          iWfIcjOXXZMsayyL465U0YyWC2cJ7ldftyZXC+/4EcM=
Subject key identifier:   81:57:77:D9:3C:34:75:D7:4F:2B:F2:59:F5:02:77:60:F2:DB:74:4A
Authority key identifier: E4:67:3E:6D:6E:1C:F6:F6:01:15:E3:05:08:BE:15:BB:BF:E5:EA:AD
Certificate issuer:       /CN=e4673e6d6e1cf6f60115e30508be15bbbfe5eaad
Certificate serial:       01A13D817B86CE344CBAC7B9B27730950E7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft
Manifest number:          1AAA
Signing time:             Thu 15 Oct 2026 03:00:57 +0000
Manifest this update:     Thu 15 Oct 2026 03:00:57 +0000
Manifest next update:     Fri 16 Oct 2026 03:00:57 +0000
Files and hashes:         1: 5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.crl (hash: PMo377y8v8mXC7aulPylQ6R8e6MLQkSusE5TTF24D54=)
                          2: pGPIjgXbqa3E4qtB9K-nnRy5nwE.roa (hash: r9BkXCN77JVUwf1Rk1CC7NUcp98tk3M5Xo6C9+zBv3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 03:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:81:7b:86:ce:34:4c:ba:c7:b9:b2:77:30:95:0e:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4673e6d6e1cf6f60115e30508be15bbbfe5eaad
        Validity
            Not Before: Oct 15 03:00:57 2026 GMT
            Not After : Oct 16 03:00:57 2026 GMT
        Subject: CN=815777d93c3475d74f2bf259f5027760f2db744a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:10:51:83:f7:df:df:cf:ed:ec:d2:6c:da:0d:
                    cb:97:5d:16:39:a5:02:b0:ae:70:32:a8:8d:c2:51:
                    37:4c:6c:74:ca:64:99:87:7d:5d:bb:ed:dc:83:b5:
                    33:98:28:36:a1:dc:fb:ea:7b:6f:34:07:4c:21:e5:
                    6d:6a:b9:57:1f:de:4d:16:65:23:6f:f5:77:d0:af:
                    5a:c1:aa:9d:af:b0:4a:02:bc:a0:bd:2e:bf:59:93:
                    9d:87:69:bb:12:14:a3:91:e9:28:d7:01:cd:57:2b:
                    19:5e:97:2d:59:aa:17:c5:fe:af:ad:b8:71:81:7d:
                    e7:5b:d7:80:e8:3d:71:c9:e2:24:0a:7e:92:02:00:
                    7f:03:62:a2:30:8e:19:c6:e4:b6:cc:af:54:cd:0e:
                    87:b9:26:79:1e:40:73:cc:b5:ff:a9:42:91:63:ee:
                    31:2a:0d:56:77:d5:1a:0c:42:6f:48:c3:ef:fb:e5:
                    04:81:f6:ce:7a:d4:fb:bb:f2:22:4c:b1:5c:88:6a:
                    9a:71:73:9b:16:a5:bf:34:d2:c0:51:35:aa:0a:ae:
                    d8:ef:4e:99:35:3f:75:26:6b:cc:04:84:a9:42:3c:
                    82:80:f6:15:66:47:d1:8f:71:c0:4c:2a:e8:b1:98:
                    ae:ac:8c:71:f0:eb:8e:d5:b3:e8:bf:66:04:32:b8:
                    f1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:57:77:D9:3C:34:75:D7:4F:2B:F2:59:F5:02:77:60:F2:DB:74:4A
            X509v3 Authority Key Identifier:
                keyid:E4:67:3E:6D:6E:1C:F6:F6:01:15:E3:05:08:BE:15:BB:BF:E5:EA:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:1a:63:50:05:a7:1c:6c:79:bd:4d:e0:b9:cf:f3:ad:d4:0d:
         d9:42:4c:ea:19:60:67:40:a8:c3:c2:66:4d:a9:61:ea:aa:71:
         f3:b0:1e:84:c2:33:1c:e4:86:8b:71:3c:51:92:6e:1f:96:af:
         1a:ab:0d:e9:72:63:77:6c:e4:05:28:a6:d4:6c:ec:ea:cf:84:
         81:c2:40:0a:9a:20:bd:ad:19:1e:0e:7b:63:b6:7d:64:bf:5b:
         0c:bb:4d:90:0e:43:7a:dd:11:8a:31:68:96:26:15:19:26:29:
         ce:42:54:24:19:17:09:54:70:e2:f9:8f:09:c3:90:f0:21:52:
         60:24:bc:d9:1a:cb:91:5a:3f:07:cf:00:90:ca:30:35:47:d9:
         53:a8:54:fc:5b:fa:af:92:20:52:42:7d:83:a4:7b:98:dc:04:
         42:cb:e6:6b:60:d1:da:41:c4:c5:1e:0f:7a:51:9a:bf:cf:02:
         66:1a:ce:d0:cb:97:2a:cf:e8:29:fd:38:b8:d0:5d:43:ee:13:
         f8:c8:ad:23:b4:66:4e:38:0f:2b:3e:9f:76:ba:2a:53:4e:b5:
         c7:fe:c7:63:34:c1:af:8c:0b:7b:29:2c:17:5f:57:7c:79:5c:
         75:c0:49:16:d7:8c:83:5c:7b:18:21:d6:5a:1d:38:c4:ec:ce:
         ee:8e:a3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:21:06 2026 by rpki-client