Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft
File:                     5_JhNIMO4g3CKYbcinNm0JcrKTA.mft (raw, json)
Hash identifier:          5NtOxZe8qpDap5m3oU8O4W/pigNixW5dgIymaHt2bjQ=
Subject key identifier:   9D:C6:74:87:50:81:C3:E5:E8:8E:76:A7:11:58:A1:77:0B:0A:39:B7
Authority key identifier: E7:F2:61:34:83:0E:E2:0D:C2:29:86:DC:8A:73:66:D0:97:2B:29:30
Certificate issuer:       /CN=e7f26134830ee20dc22986dc8a7366d0972b2930
Certificate serial:       01A131EB21AE7EEC0EDB4402C54359C71CD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft
Manifest number:          0DD1
Signing time:             Mon 12 Oct 2026 21:00:55 +0000
Manifest this update:     Mon 12 Oct 2026 21:00:55 +0000
Manifest next update:     Tue 13 Oct 2026 21:00:55 +0000
Files and hashes:         1: 5_JhNIMO4g3CKYbcinNm0JcrKTA.crl (hash: 4hCcydIfuJ0bliMLbHcZ6ywEjxlMYCf4+ComAmtVIOg=)
                          2: 9MezlHXAeGWTxOc7UTvV8DR5uWo.roa (hash: n9z8Qm42I0TN2dbDtlo0CkxcfTlhf2U1vO8dzmiyccw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:31:eb:21:ae:7e:ec:0e:db:44:02:c5:43:59:c7:1c:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f26134830ee20dc22986dc8a7366d0972b2930
        Validity
            Not Before: Oct 12 21:00:55 2026 GMT
            Not After : Oct 13 21:00:55 2026 GMT
        Subject: CN=9dc674875081c3e5e88e76a71158a1770b0a39b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1f:6e:74:76:09:e5:27:04:d0:79:b9:c0:78:
                    b9:db:fb:22:ad:53:64:17:68:73:31:ce:ca:f6:d3:
                    bc:19:18:ca:fe:68:bc:a3:5e:62:a1:9b:b4:42:f0:
                    68:69:b1:69:d4:e3:27:25:6c:13:9e:19:a5:2e:95:
                    22:c0:94:5a:f6:58:81:9a:f5:70:9c:b2:f4:88:ff:
                    c9:53:dc:26:79:a3:b8:2b:9d:13:fc:04:4f:93:b2:
                    e8:4a:12:af:04:c6:1c:67:b3:6a:3a:bf:b6:19:83:
                    2b:6d:b1:e8:8a:79:81:70:3a:ac:de:e1:7a:92:9f:
                    db:79:a9:c2:c1:dc:ef:a3:0c:42:fe:8a:97:6f:cc:
                    cf:8e:e3:ca:18:2f:65:cd:34:1b:1c:af:42:42:1d:
                    fa:06:e8:42:71:01:4f:f8:95:15:53:c7:57:71:67:
                    ea:43:ae:59:c1:d5:0c:8b:e1:12:65:b0:19:95:f7:
                    f6:ba:24:e5:e6:99:32:8f:13:eb:1d:fb:5e:43:5a:
                    f2:9b:13:a9:87:be:a4:93:f0:2e:f3:bd:f7:c6:6d:
                    dc:f3:bf:f0:d4:9b:29:5a:3f:90:86:3f:1a:79:03:
                    2f:e2:45:78:67:88:23:6d:9c:59:62:3a:39:e1:b1:
                    0a:43:7e:7d:5a:6d:f2:f8:03:9e:e4:cc:7b:59:bb:
                    08:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C6:74:87:50:81:C3:E5:E8:8E:76:A7:11:58:A1:77:0B:0A:39:B7
            X509v3 Authority Key Identifier:
                keyid:E7:F2:61:34:83:0E:E2:0D:C2:29:86:DC:8A:73:66:D0:97:2B:29:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:67:50:98:0b:d3:1b:27:cb:45:11:c1:7b:24:65:65:e3:f0:
         0b:2f:37:0e:4c:8c:eb:10:da:c2:d3:31:21:b1:8e:53:75:97:
         63:bd:68:14:b5:77:4f:44:ce:9f:8f:98:02:a5:be:13:e9:74:
         ed:00:00:a7:d8:88:de:44:b3:ce:6d:4b:08:c2:66:d4:29:5a:
         a7:b0:63:af:eb:69:82:c8:e2:2d:d5:78:35:30:d9:32:11:97:
         a6:1f:d9:5f:04:8b:4d:2a:5a:12:9b:81:5e:1f:67:9a:15:e7:
         84:66:e3:57:45:11:6b:a5:b2:74:d8:b8:82:9d:e3:34:49:2f:
         58:6e:c2:df:2b:32:67:04:5f:df:73:56:b2:e7:52:ae:bf:77:
         17:13:96:cf:70:59:17:6a:a1:ae:2d:f9:e2:eb:77:41:62:26:
         e3:d6:5d:ea:04:ca:0c:4f:46:93:2e:4d:80:fd:21:38:c0:89:
         77:01:1b:14:9f:ab:d6:85:27:f2:f2:38:6e:e5:b6:f6:26:c8:
         54:02:d3:ac:31:11:a9:8e:35:38:37:f1:c2:ed:0f:79:70:82:
         da:88:f1:c7:b6:62:cc:31:e7:ec:1a:41:03:f3:0c:10:e7:47:
         ff:84:03:10:53:e3:9a:d5:59:ac:90:f4:78:c1:fb:61:93:56:
         a7:14:9f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 05:55:34 2026 by rpki-client