Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
File:                     R01HT5RpSoEE9eQTqyucCVWbefA.mft (raw, json)
Hash identifier:          nQJG4q44k83Vxa/cKnzdzn1otC3+xrJUanvOUVdTdRY=
Subject key identifier:   F1:EE:94:A1:E9:C0:92:D4:48:D5:4C:62:B5:AD:31:FA:D1:17:42:D9
Authority key identifier: 47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0
Certificate issuer:       /CN=474d474f94694a8104f5e413ab2b9c09559b79f0
Certificate serial:       01A17BF249615CC6E39013594CBE051E8611
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
Manifest number:          06E7
Signing time:             Tue 27 Oct 2026 06:00:38 +0000
Manifest this update:     Tue 27 Oct 2026 06:00:38 +0000
Manifest next update:     Wed 28 Oct 2026 06:00:38 +0000
Files and hashes:         1: R01HT5RpSoEE9eQTqyucCVWbefA.crl (hash: le2hRJjL6cfB3hUg6V+lp68Dn7+FjRgU72+/dGFwwP0=)
                          2: SBUsospASb3EsMhP62NmTHT6SVw.roa (hash: 0+KXBZnA9I41d7SaRHS/S7In8wI7A6juxPzuhg0b63k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:f2:49:61:5c:c6:e3:90:13:59:4c:be:05:1e:86:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=474d474f94694a8104f5e413ab2b9c09559b79f0
        Validity
            Not Before: Oct 27 06:00:38 2026 GMT
            Not After : Oct 28 06:00:38 2026 GMT
        Subject: CN=f1ee94a1e9c092d448d54c62b5ad31fad11742d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:25:38:f1:5a:26:6f:be:aa:86:e0:42:f3:e4:
                    5c:95:d1:f8:c2:e7:aa:19:42:5c:46:0f:44:2c:d3:
                    7f:43:90:21:e2:3e:73:fc:b2:60:2b:06:57:53:c1:
                    90:4e:e3:4e:b4:c0:d5:82:7e:b7:32:63:ca:51:64:
                    ba:f6:d0:90:38:54:7c:9f:70:46:d2:ba:08:85:f5:
                    1b:71:d3:0e:86:f4:cb:53:22:18:d3:9b:d9:05:54:
                    68:fb:48:c4:17:aa:3f:d0:f6:63:3e:a7:bc:94:34:
                    d8:63:cd:0c:6b:42:c3:7d:08:6f:11:d7:1a:45:dc:
                    91:a0:6a:e6:5a:ea:84:99:47:50:73:a9:d4:c5:3f:
                    92:64:91:72:12:62:50:9a:ff:70:e8:a2:0e:64:3a:
                    f7:ff:08:b8:02:53:00:cb:5d:91:ec:cc:96:75:65:
                    22:45:a4:44:af:ec:e8:79:83:71:3a:bd:64:06:81:
                    d1:e6:fc:17:f2:e3:87:22:c9:54:8a:97:6d:36:5e:
                    a4:2a:17:d7:a3:1e:f3:eb:7c:19:87:aa:67:27:04:
                    87:ce:88:fc:46:63:be:7f:0c:27:63:1e:c9:fc:fc:
                    3c:08:7e:e0:81:fe:87:99:c2:1f:7e:1a:26:5b:6f:
                    92:57:16:aa:29:86:99:87:b8:3d:bd:1e:ed:a9:f2:
                    86:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:EE:94:A1:E9:C0:92:D4:48:D5:4C:62:B5:AD:31:FA:D1:17:42:D9
            X509v3 Authority Key Identifier:
                keyid:47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:88:66:fc:70:69:47:0c:10:e2:3e:77:7a:6b:5f:00:5c:8b:
         a4:46:bb:e6:8a:8d:b7:b8:e7:80:6b:05:a3:6a:23:25:bc:b2:
         8f:b2:0a:bd:c6:c8:d5:d8:ab:38:de:2a:4e:c0:1f:8e:a4:66:
         61:5b:2d:98:d2:19:8c:27:71:4d:45:21:fe:ee:6c:2a:9e:96:
         c2:45:e4:be:ae:7e:70:17:db:7c:f3:e8:3f:e1:ea:90:95:6f:
         f4:28:9e:c3:84:f9:ec:8f:78:20:48:93:67:f8:c1:e6:6e:5c:
         37:a5:21:6a:d1:76:70:59:a3:6c:b2:1f:e1:75:47:11:d1:fb:
         b0:c9:b5:39:ae:76:da:76:48:7a:11:6f:c3:8f:15:15:ba:6d:
         72:95:ce:3f:ba:82:21:c3:d1:a4:86:03:61:40:31:b9:4d:37:
         b8:79:33:e6:c5:4a:a3:3c:de:74:d4:c6:25:d8:d5:5d:38:17:
         c3:e8:b5:9c:79:f3:a8:11:0f:f4:3a:d8:a5:a0:cd:65:a0:7b:
         97:cc:5e:19:56:cc:06:36:9e:77:f2:a9:37:ae:3a:7e:c0:2f:
         58:4f:9e:65:c1:07:51:f5:68:dd:ec:2e:cb:c8:ec:17:ad:8c:
         bb:04:5c:be:c1:48:b5:71:5e:67:22:56:eb:9d:f1:8a:a0:ee:
         e4:9b:68:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:28:33 2026 by rpki-client