Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/23322a-b7a4-4632-bde6-b19ab3c2d0ed/1/5olOhd5rSDFY9D2ADrLns_2IE98.mft
File:                     5olOhd5rSDFY9D2ADrLns_2IE98.mft (raw, json)
Hash identifier:          PlwSeb4wuPWCh/GXqj7997xVQxDQfF/g7Lxqzr7qbms=
Subject key identifier:   DE:A7:6F:4F:8D:F5:7A:0F:52:EF:F5:EC:FE:7D:14:14:61:CA:63:B4
Authority key identifier: E6:89:4E:85:DE:6B:48:31:58:F4:3D:80:0E:B2:E7:B3:FD:88:13:DF
Certificate issuer:       /CN=e6894e85de6b483158f43d800eb2e7b3fd8813df
Certificate serial:       01A1946905678D0475332ACD80994E935817
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5olOhd5rSDFY9D2ADrLns_2IE98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/23322a-b7a4-4632-bde6-b19ab3c2d0ed/1/5olOhd5rSDFY9D2ADrLns_2IE98.mft
Manifest number:          5C
Signing time:             Sun 01 Nov 2026 00:01:12 +0000
Manifest this update:     Sun 01 Nov 2026 00:01:12 +0000
Manifest next update:     Mon 02 Nov 2026 00:01:12 +0000
Files and hashes:         1: 5olOhd5rSDFY9D2ADrLns_2IE98.crl (hash: hLy96ywrXLj/O3Iz2+ieycWy0Lb6o1ZFc1ONrZ/qaXw=)
                          2: CdBv0Bq4MxXF7cS5YGBDnebFrG4.roa (hash: OpXgldlACDzWIRzJ5FMUs1BN6KpyeKQrkTOYJVvOfRM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/23322a-b7a4-4632-bde6-b19ab3c2d0ed/1/5olOhd5rSDFY9D2ADrLns_2IE98.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/23322a-b7a4-4632-bde6-b19ab3c2d0ed/1/5olOhd5rSDFY9D2ADrLns_2IE98.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5olOhd5rSDFY9D2ADrLns_2IE98.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 23:49:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:94:69:05:67:8d:04:75:33:2a:cd:80:99:4e:93:58:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6894e85de6b483158f43d800eb2e7b3fd8813df
        Validity
            Not Before: Nov  1 00:01:12 2026 GMT
            Not After : Nov  2 00:01:12 2026 GMT
        Subject: CN=dea76f4f8df57a0f52eff5ecfe7d141461ca63b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:01:3f:ee:e8:ef:49:9d:54:47:18:a6:87:9d:
                    10:be:cf:49:ea:50:b6:ec:d2:18:b3:9d:67:5b:69:
                    fc:ff:82:88:4e:49:87:f6:51:b6:08:67:9f:f7:a9:
                    95:f7:3c:f9:fb:d6:0c:b9:3c:a8:72:0a:99:53:77:
                    be:2f:9f:23:88:b2:a8:e8:76:d1:c9:68:29:d1:8d:
                    77:53:96:3f:d8:b2:65:3d:14:c6:90:0e:06:73:83:
                    1f:21:f8:83:e1:02:3d:5b:76:d3:18:a3:7a:df:3b:
                    30:4f:26:f5:4e:41:47:9f:87:e4:cc:1e:a3:a9:93:
                    0a:04:4e:5d:20:c4:69:58:8f:6b:51:71:2d:8f:d1:
                    ed:0f:12:9a:09:96:45:ae:10:5b:3e:5c:4d:5a:db:
                    3f:44:03:95:25:6d:54:64:b0:b5:4f:60:65:3a:a3:
                    49:74:15:95:c2:df:3b:a2:e1:82:ff:66:48:75:11:
                    9d:e1:f4:67:7d:a7:19:48:c2:af:94:19:1b:ea:67:
                    f5:cc:ff:95:0f:e4:64:c4:c8:8b:df:64:7d:15:32:
                    f2:1e:3e:23:f3:7f:4e:c8:c9:f8:19:11:0b:a6:1f:
                    4d:dd:9f:f1:b2:15:9b:38:e7:d6:1e:85:f0:32:44:
                    dc:57:74:14:6b:58:1b:53:5d:b4:33:7d:b7:88:93:
                    69:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A7:6F:4F:8D:F5:7A:0F:52:EF:F5:EC:FE:7D:14:14:61:CA:63:B4
            X509v3 Authority Key Identifier:
                keyid:E6:89:4E:85:DE:6B:48:31:58:F4:3D:80:0E:B2:E7:B3:FD:88:13:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5olOhd5rSDFY9D2ADrLns_2IE98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/23322a-b7a4-4632-bde6-b19ab3c2d0ed/1/5olOhd5rSDFY9D2ADrLns_2IE98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/23322a-b7a4-4632-bde6-b19ab3c2d0ed/1/5olOhd5rSDFY9D2ADrLns_2IE98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:32:2d:66:94:1b:30:88:e7:fb:a7:98:99:3b:b6:bd:d4:2b:
         1a:78:2f:b2:9e:f3:63:af:81:ba:c6:31:a1:ab:f0:3b:81:57:
         6d:67:34:8e:bc:39:36:8d:16:1b:78:66:4b:b0:1b:13:56:74:
         4a:93:5e:40:a8:05:36:02:f5:9a:c8:2c:01:7a:ba:68:be:1f:
         26:e5:fc:5c:34:2d:50:56:7c:58:4a:21:ac:9e:21:24:9f:46:
         24:4c:5b:aa:6d:8b:6e:53:91:7d:c0:f5:58:01:3a:2a:85:8a:
         8d:48:d1:e8:53:02:ed:c3:37:d2:4e:df:a6:24:63:f3:b4:be:
         1e:fe:38:51:eb:05:cc:81:6c:42:e3:df:bd:53:40:6c:97:ab:
         32:3d:78:59:9a:ff:f8:b0:1e:0c:66:05:a6:53:b4:aa:82:dd:
         20:4f:bd:04:fc:dd:f0:4c:71:f9:29:90:e0:4c:23:ad:bc:dc:
         96:7a:a0:c6:e4:e6:c7:7d:04:3f:46:c4:32:6d:68:87:35:37:
         ba:2b:2d:d8:48:89:0d:25:50:d3:5b:7e:13:5e:ac:da:c4:b0:
         93:9b:ec:05:f4:f0:30:56:38:06:bc:8f:f3:6f:d8:1c:94:42:
         b3:c7:df:3b:60:a0:14:33:39:70:05:c8:e8:ef:9a:a9:d3:cc:
         82:3d:59:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:27:52 2026 by rpki-client