Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft
File:                     5llvGxY8qwxFqE7rEyYbZfGiKWI.mft (raw, json)
Hash identifier:          p2nSVuZ1u/04KkHsH/T7n6FmJId942f6eDF32jj10Rk=
Subject key identifier:   71:9C:3D:F8:52:15:B1:AE:79:16:B8:60:01:39:0E:83:A4:EA:1F:81
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Certificate issuer:       /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial:       01A100C7E59AAABC27073D9C99DF3F479EB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft
Manifest number:          1A99
Signing time:             Sat 03 Oct 2026 08:01:02 +0000
Manifest this update:     Sat 03 Oct 2026 08:01:02 +0000
Manifest next update:     Sun 04 Oct 2026 08:01:02 +0000
Files and hashes:         1: 1yFoGNscUr4CLW6dqLRm33BUYvg.roa (hash: JRIdLqy0jettzG16H9R0buawd/EdTcCwurGOVeJ4no4=)
                          2: 5llvGxY8qwxFqE7rEyYbZfGiKWI.crl (hash: slhwt9NKmqGi0KDV4OgSo9rin6Jvf9bbTVlrdPKMH28=)
                          3: 7Qfl9Mds2YXiGHI1bUT6XiSxVL4.roa (hash: q1b4P2s3t9bFP69gx0VvlkJ2k9wbhF00vIOXxyF0Vvc=)
                          4: 7TjKnhX5D5deQHoXLUoiSMDy9Y0.roa (hash: v9zlg7kFGnsHSQNcetbSYedV3Coh51JEiDo9qlPpjd0=)
                          5: Ohn1TkDNg86_ayTFKaxNgyeDWKw.roa (hash: UXNLfN4yk/bOhc93qSx+KAzobQ1bu0Nj3leNruG+aAI=)
                          6: RCGO8Oq5yEvN1IZ3X284dzzUQeU.roa (hash: LRdALHDMlvzEn3Mzy4S60miqNChz9RLJWshvg3Evc1c=)
                          7: RSoSsFPa67XJSU_rYMFvnteNoQk.roa (hash: EJat0fz8NMFL7YZfeXLEntqwJOOPR75hReV0Lx+zuHc=)
                          8: RZbOGzmRLKUkDrECsvD-FTI72cc.roa (hash: Fab+2t5Dd13ANxnSLzfHbZtJxR4520ho/Mfi1jtgezI=)
                          9: WahD60c8L22Ycb_BALwXUk0StuA.roa (hash: EVO53sqtSZqWFofeupHa94Am0ZrXjRJrcXXcGrDKcaU=)
                          10: __bescsDyAwNYJKFrHMgdDKxm34.roa (hash: ACM4zhp6ticayTpOrFeCe1H0xbn/X4/ekQ3eaJIxNvI=)
                          11: aBBjIklmYlMWX-vmbHGnuwsWD2M.roa (hash: +tC+W98mtUX2QstLidBAPcpltrAwZl6PNr50mq8krSU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 02:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:00:c7:e5:9a:aa:bc:27:07:3d:9c:99:df:3f:47:9e:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
        Validity
            Not Before: Oct  3 08:01:02 2026 GMT
            Not After : Oct  4 08:01:02 2026 GMT
        Subject: CN=719c3df85215b1ae7916b86001390e83a4ea1f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a3:39:27:d8:66:18:9b:b5:97:02:4f:bf:e0:
                    3c:1c:82:43:6a:e9:e1:a7:f3:99:62:bd:e7:c1:5f:
                    0e:ae:4d:b3:61:fc:af:ad:3d:be:f1:05:9e:6f:a7:
                    92:7e:c8:a1:e7:b0:60:4b:f8:0d:79:7e:d4:66:46:
                    d4:74:2e:6c:51:30:c0:51:b3:dc:78:c5:1a:d5:e9:
                    3f:bc:34:61:31:ef:03:1a:3c:4e:ea:30:27:2e:5a:
                    83:96:02:5e:8b:39:d1:b1:94:c4:a6:f3:a3:31:96:
                    44:ae:08:dd:b6:fe:6f:fb:c2:bb:c3:35:dc:f3:77:
                    17:c1:c7:ca:6f:02:0d:72:ba:6a:09:f7:4b:b3:d6:
                    e7:0d:eb:ca:40:1d:d0:36:b9:7d:69:34:6d:f8:62:
                    90:28:72:fe:c7:ac:33:7a:c3:6d:33:70:6e:76:f1:
                    24:58:67:b9:24:fe:5b:92:b4:5c:47:3c:7f:8f:1e:
                    ba:da:81:ad:5c:e9:a6:aa:79:cd:c2:50:c6:bb:94:
                    e1:e2:7f:47:08:be:2a:d7:a8:89:5f:18:22:da:b3:
                    9a:10:88:c3:da:28:2f:05:ce:13:8c:fd:76:7e:5d:
                    91:bb:e3:29:74:c4:38:52:2d:f8:b3:3a:4e:d8:3a:
                    0f:39:b6:2e:e3:12:3b:97:cf:28:61:e5:4b:36:39:
                    6c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:9C:3D:F8:52:15:B1:AE:79:16:B8:60:01:39:0E:83:A4:EA:1F:81
            X509v3 Authority Key Identifier:
                keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:b0:b0:4c:ed:a6:a0:7e:c2:6e:b2:9d:d4:85:42:2a:c7:b2:
         1e:1f:1b:aa:e9:6b:6e:e8:ee:a0:4d:80:9a:d3:5a:6f:81:f5:
         8d:d7:0d:ac:1e:41:ab:4f:fc:e0:81:65:6a:b7:ea:8a:25:07:
         21:17:e7:6d:8c:1a:58:55:09:52:86:68:de:83:5e:4e:be:18:
         7d:6d:a0:55:87:2d:76:a0:1d:06:4b:c0:a9:df:4c:3f:8f:e2:
         4d:39:8c:62:ff:f2:0a:57:0e:ba:a9:fb:b3:8d:4e:44:b3:87:
         35:7f:ba:8b:a8:59:fe:db:00:7f:25:71:7c:0f:1c:79:ff:ee:
         6f:20:f2:d4:ee:c4:8f:5e:e6:da:bf:ac:d8:e6:08:45:38:4e:
         11:12:6f:6b:f0:d6:49:5c:e5:c0:6e:67:8d:03:f3:80:83:fd:
         3e:6d:07:d0:a6:34:7f:4a:87:ba:31:28:e6:e4:2c:1c:41:03:
         4a:82:cf:af:02:b1:e2:83:0a:5d:f9:2f:48:96:ab:56:1e:1a:
         e5:26:71:76:43:fc:fc:ea:60:42:f3:22:f4:38:59:d7:e8:98:
         93:5e:cf:e0:3f:3b:8f:55:84:2b:50:e8:4a:1f:01:e8:4f:42:
         ca:f7:6d:56:ea:19:fb:9d:97:3e:45:b3:96:ab:51:19:8c:54:
         59:cd:01:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:06:57 2026 by rpki-client