Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/617e9a-0d3a-47f8-9856-1da055e8b4f3/1/E5TuUsNlrR06vA4w5A0RBZkmF5A.mft
File:                     E5TuUsNlrR06vA4w5A0RBZkmF5A.mft (raw, json)
Hash identifier:          OdlEqyeJqHj2P7EgOqxEjO0XX6HmN5jphzZ9pEw3sWA=
Subject key identifier:   45:B3:93:47:A0:B7:23:C2:76:78:14:AF:15:AC:81:D4:30:AB:C3:40
Authority key identifier: 13:94:EE:52:C3:65:AD:1D:3A:BC:0E:30:E4:0D:11:05:99:26:17:90
Certificate issuer:       /CN=1394ee52c365ad1d3abc0e30e40d110599261790
Certificate serial:       01A17E4EE1BD66A6CFCB270EDDD1D6631549
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E5TuUsNlrR06vA4w5A0RBZkmF5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/617e9a-0d3a-47f8-9856-1da055e8b4f3/1/E5TuUsNlrR06vA4w5A0RBZkmF5A.mft
Manifest number:          01E8
Signing time:             Tue 27 Oct 2026 17:01:01 +0000
Manifest this update:     Tue 27 Oct 2026 17:01:01 +0000
Manifest next update:     Wed 28 Oct 2026 17:01:01 +0000
Files and hashes:         1: 67omSHCgJ7E6ODNlsF6qaRqTPEA.roa (hash: dOFOtK+G0q4faDtqEdXQ7Mev65YvmGNEPtq6H3hEE94=)
                          2: E5TuUsNlrR06vA4w5A0RBZkmF5A.crl (hash: J7ObuVlWOywFm2Lf0XlQbvKQJYmTS6gMikguewdNydA=)
                          3: isUJZOaXIRAqYRY6Xld132B6Ex8.roa (hash: NI6Uy2XnIgyFjNGQe4ZCVVIsMvDHrME9JquZr4Xe+qs=)
                          4: oqTmfsc1D4MnyBsZee6BcgL9gJo.roa (hash: OWbz1TN8yFNhIWGhpwvJQESVbEDOFQPGS/pO8lsLego=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/617e9a-0d3a-47f8-9856-1da055e8b4f3/1/E5TuUsNlrR06vA4w5A0RBZkmF5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/617e9a-0d3a-47f8-9856-1da055e8b4f3/1/E5TuUsNlrR06vA4w5A0RBZkmF5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E5TuUsNlrR06vA4w5A0RBZkmF5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7e:4e:e1:bd:66:a6:cf:cb:27:0e:dd:d1:d6:63:15:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1394ee52c365ad1d3abc0e30e40d110599261790
        Validity
            Not Before: Oct 27 17:01:01 2026 GMT
            Not After : Oct 28 17:01:01 2026 GMT
        Subject: CN=45b39347a0b723c2767814af15ac81d430abc340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:03:57:d0:9a:56:07:e1:20:e9:76:6c:31:90:
                    fb:8e:c6:2f:36:bc:5c:d4:c7:54:a6:33:30:0c:00:
                    b5:d9:18:98:03:0e:a9:91:c7:33:8f:fa:82:66:d0:
                    ef:74:5b:dc:f9:ef:29:1e:fb:4c:a9:31:2b:d8:00:
                    58:4a:b0:d3:97:5c:6c:49:d4:f7:a5:94:68:92:37:
                    cc:f5:cd:d4:f4:7b:3c:82:56:8b:6e:c4:e7:b5:b2:
                    36:da:5b:51:21:1d:78:99:7a:e9:31:8c:5a:fd:cc:
                    b1:db:f9:3a:d2:54:c2:47:02:8a:24:17:4a:b8:4a:
                    6d:a9:e2:ce:1f:99:62:bd:92:52:c3:5d:18:41:06:
                    5d:90:b6:85:4e:6a:ff:ce:9a:ae:50:d1:96:fc:56:
                    90:fc:55:a9:c0:b3:04:39:0b:3a:64:4e:9e:f5:3b:
                    ee:1f:46:f2:7f:37:b3:61:da:2f:12:21:15:85:02:
                    4e:dd:ff:0b:5a:93:58:28:35:1b:57:36:9c:0c:93:
                    fb:05:71:c7:d0:df:4d:0f:43:a9:38:3d:3b:f6:f9:
                    2a:82:40:83:e1:c3:c4:4e:cb:27:16:8f:1a:75:95:
                    fe:1e:d9:65:3a:24:10:2b:1b:c4:38:55:11:30:41:
                    85:23:3c:d6:58:d8:c0:0a:2f:0a:7d:62:22:08:3b:
                    b5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B3:93:47:A0:B7:23:C2:76:78:14:AF:15:AC:81:D4:30:AB:C3:40
            X509v3 Authority Key Identifier:
                keyid:13:94:EE:52:C3:65:AD:1D:3A:BC:0E:30:E4:0D:11:05:99:26:17:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5TuUsNlrR06vA4w5A0RBZkmF5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/617e9a-0d3a-47f8-9856-1da055e8b4f3/1/E5TuUsNlrR06vA4w5A0RBZkmF5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/617e9a-0d3a-47f8-9856-1da055e8b4f3/1/E5TuUsNlrR06vA4w5A0RBZkmF5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:bd:b9:39:fb:1b:2a:d1:04:47:77:14:bf:0c:c2:4b:2a:ed:
         73:7d:e9:29:a6:8e:09:46:2d:5b:d7:6d:28:45:13:1d:9a:0d:
         80:a3:01:7d:6d:b3:6d:a9:c9:b6:c2:1e:61:6f:30:ac:8a:61:
         22:73:c5:07:04:71:ee:06:f7:54:15:20:5e:af:3d:82:0e:ca:
         99:45:77:c4:11:32:8d:83:db:1e:e2:fa:ab:a7:84:4b:8d:fc:
         5e:1d:5b:47:ba:92:04:ea:13:58:4f:b6:c1:48:2f:62:0a:71:
         b0:62:69:38:9c:2e:07:73:c4:e8:a3:8b:b2:c4:27:c0:cf:a9:
         de:be:59:9f:2f:55:a0:4a:61:8c:24:9c:28:24:cc:cc:98:07:
         c1:53:7c:56:86:f7:6d:19:91:be:e1:65:45:38:c4:2f:99:a1:
         4c:d6:91:a1:2e:1c:bf:ba:96:59:17:1e:fa:02:b6:82:1f:b1:
         1d:a5:7b:db:e1:1c:80:f9:d0:7e:a1:c2:41:40:22:06:dc:25:
         e3:95:61:66:5a:3e:a0:97:d6:9a:c6:c9:f1:07:ba:ba:96:82:
         40:fc:59:8d:9e:0f:d6:33:7a:7a:28:08:48:ff:ec:cc:1d:8d:
         22:dc:55:4e:3a:87:6d:b8:06:96:5e:12:a1:28:b4:13:54:f5:
         8f:fe:37:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:47:26 2026 by rpki-client