Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/s5V9y_9QghTcodun9TIXIFs-Tqo.mft
File:                     s5V9y_9QghTcodun9TIXIFs-Tqo.mft (raw, json)
Hash identifier:          hBY70ecFC/zQt/YzEuXFmHF+xfokIb60Kz3VW/jZGtM=
Subject key identifier:   14:E7:77:07:57:3A:54:0A:0D:0B:ED:AD:7D:04:A4:18:C4:61:1B:F2
Authority key identifier: B3:95:7D:CB:FF:50:82:14:DC:A1:DB:A7:F5:32:17:20:5B:3E:4E:AA
Certificate issuer:       /CN=b3957dcbff508214dca1dba7f53217205b3e4eaa
Certificate serial:       01A14BAB07329AD1387547DA517525747180
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s5V9y_9QghTcodun9TIXIFs-Tqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/s5V9y_9QghTcodun9TIXIFs-Tqo.mft
Manifest number:          0125
Signing time:             Sat 17 Oct 2026 21:01:01 +0000
Manifest this update:     Sat 17 Oct 2026 21:01:01 +0000
Manifest next update:     Sun 18 Oct 2026 21:01:01 +0000
Files and hashes:         1: _WtOo9YuQrokwTxQAJF58cfpSiw.roa (hash: OUo6i8y7m+/3FUoqkAIpfYsD0Rzx/nPmH8P0JQ2rHyk=)
                          2: s5V9y_9QghTcodun9TIXIFs-Tqo.crl (hash: 7RbZ0WrD5kwAcqFzvaIuRjoY7PZVecoDMisjcAW0v40=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/s5V9y_9QghTcodun9TIXIFs-Tqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/s5V9y_9QghTcodun9TIXIFs-Tqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s5V9y_9QghTcodun9TIXIFs-Tqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 21:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4b:ab:07:32:9a:d1:38:75:47:da:51:75:25:74:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3957dcbff508214dca1dba7f53217205b3e4eaa
        Validity
            Not Before: Oct 17 21:01:01 2026 GMT
            Not After : Oct 18 21:01:01 2026 GMT
        Subject: CN=14e77707573a540a0d0bedad7d04a418c4611bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:83:c9:0f:c6:0b:62:6c:e3:6b:57:92:5a:59:
                    70:f1:59:ae:62:2b:9c:24:3d:99:a4:16:fe:c7:ee:
                    9c:d9:8e:d9:6f:e0:67:0e:4b:3f:28:f4:fb:1d:aa:
                    08:71:5f:92:fc:99:98:e1:2a:ae:91:19:05:47:11:
                    1c:97:e0:03:20:92:21:ff:af:dd:01:3e:8e:09:7c:
                    bf:dd:22:2c:eb:3c:ff:d2:65:b7:0e:dc:58:89:54:
                    23:8d:1c:29:55:bd:e5:0c:59:8d:f4:2e:ba:69:90:
                    dc:4d:0b:b1:c1:59:f5:49:45:b1:d4:bf:2b:2e:0d:
                    ea:7c:6d:89:40:0c:89:9e:8c:ec:8f:54:dd:5e:f5:
                    2a:27:24:dc:d8:68:1d:b8:8b:4a:4f:51:19:31:9f:
                    01:78:62:90:3f:3c:b9:78:9b:40:40:eb:2e:e4:d8:
                    82:f2:de:33:e5:bf:77:59:d5:a7:ce:05:85:d6:26:
                    f5:2e:59:ab:3c:97:7c:3a:fb:50:30:d2:8d:38:4c:
                    3e:bb:50:99:a7:b2:fd:06:2c:9b:31:9e:97:17:44:
                    fc:af:2e:01:cc:be:5d:e2:c1:e1:d3:09:08:85:43:
                    b0:a8:7e:d2:16:a5:f5:12:0b:27:28:73:42:99:df:
                    1a:be:de:3a:4d:31:5b:7f:84:c1:2a:05:96:78:2c:
                    99:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E7:77:07:57:3A:54:0A:0D:0B:ED:AD:7D:04:A4:18:C4:61:1B:F2
            X509v3 Authority Key Identifier:
                keyid:B3:95:7D:CB:FF:50:82:14:DC:A1:DB:A7:F5:32:17:20:5B:3E:4E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5V9y_9QghTcodun9TIXIFs-Tqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/s5V9y_9QghTcodun9TIXIFs-Tqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/s5V9y_9QghTcodun9TIXIFs-Tqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:fa:78:cc:e7:a1:cc:6a:e3:87:9a:4f:45:d7:10:26:fa:11:
         a4:95:e6:8b:0f:b5:67:16:b6:d8:9e:eb:e3:88:9d:27:70:78:
         52:39:8a:b5:ae:29:56:19:d1:00:d6:55:30:4c:59:c9:e0:73:
         b6:6e:9c:89:49:24:24:4f:42:28:59:3d:6d:88:f1:07:18:a4:
         00:43:9a:0f:be:0f:d3:21:54:5c:bf:ae:af:04:48:cd:ff:20:
         31:14:9e:89:d2:e7:1d:11:38:33:9d:3d:45:56:7b:ca:b6:64:
         7e:01:8d:20:8c:61:ba:70:68:32:bf:b5:e0:88:16:36:fa:97:
         3b:27:a1:8e:48:47:54:7c:95:e9:5d:70:64:f7:ee:03:4e:32:
         d4:63:99:83:7f:82:72:c1:b7:4a:5e:0f:de:af:b0:fa:31:92:
         09:ad:8a:0f:e4:9d:b8:2a:6f:3a:78:dc:17:27:e9:75:7d:e1:
         21:fe:ef:d2:2a:ad:db:ba:29:cb:56:64:5e:5b:4d:94:c1:06:
         9c:cd:f3:35:b0:c0:87:2e:82:ea:1c:ce:63:50:be:45:35:a5:
         40:d3:68:8b:1f:80:19:21:74:cd:0a:e4:ff:19:70:28:a3:9a:
         25:c7:04:fc:94:c5:9f:63:70:5e:73:e5:12:cf:e0:78:19:4b:
         fc:a6:c5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:08:13 2026 by rpki-client