Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft
File:                     5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft (raw, json)
Hash identifier:          4FbiQ7gUIYeI2/Eh70VUNP3hsySdnbFNKus4UkcqTUo=
Subject key identifier:   FC:3B:2E:F4:85:18:73:74:AD:2B:EE:29:5A:30:90:56:91:97:75:19
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Certificate issuer:       /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial:       01A17DAA232C711BCD99DF7C9CB2D98A842B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft
Manifest number:          1B0A
Signing time:             Tue 27 Oct 2026 14:01:04 +0000
Manifest this update:     Tue 27 Oct 2026 14:01:04 +0000
Manifest next update:     Wed 28 Oct 2026 14:01:04 +0000
Files and hashes:         1: 5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl (hash: ChUZ836FfI4+ZccWVWwnqKj7BBjQ3lFKaKwJZ/3PCvY=)
                          2: KO4mia6vpCQ5fMg8P-ojUEmovkU.roa (hash: b7t7kGBW1DJSzBBc1XcCKIKNx+8AWkzeNhrLG3xW7cA=)
                          3: Ukp7cmdvPkEzNJphlYGregM89Lk.roa (hash: i/553d2qnprRZJF1uWLSLfvvW3PBjVt5T9cb7fhLihg=)
                          4: epI0wDY0-d1uIvfmr5mmAVqsGiI.roa (hash: qZSk2Sxje0LPm/2NfUgVPh13VAKA0WS/1PVdgw9jxTE=)
                          5: hcNgV5pro-JzVwRO6d1L6k9hBSE.roa (hash: USRsxqk8iLeOL2/A7LGzQ4Uv1QZgrw1Kv+J+q/x2MDE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:aa:23:2c:71:1b:cd:99:df:7c:9c:b2:d9:8a:84:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
        Validity
            Not Before: Oct 27 14:01:04 2026 GMT
            Not After : Oct 28 14:01:04 2026 GMT
        Subject: CN=fc3b2ef485187374ad2bee295a30905691977519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4c:95:a6:a8:55:b7:ff:3b:fb:39:6c:1c:fd:
                    ec:41:c9:23:0d:3e:d7:b1:14:52:24:aa:8a:95:83:
                    b4:7d:27:b6:50:91:02:b9:4c:22:85:02:ab:40:15:
                    09:0b:90:32:1d:6f:23:25:e7:98:10:a2:01:bd:17:
                    a6:f7:ee:5f:28:c2:5f:3e:6c:c7:18:4b:de:fc:32:
                    6c:3c:94:84:1b:3d:19:ec:d7:00:b3:3a:72:32:45:
                    d3:0b:80:b3:84:62:9c:1d:d5:75:eb:90:0c:a6:f8:
                    b7:3c:85:1a:e1:d4:5c:df:80:35:ed:53:35:6d:c0:
                    e3:a7:c6:6b:98:f9:72:2c:6d:48:ee:ff:9d:d8:5f:
                    ba:a0:c2:0e:ca:5e:8a:0a:ab:46:3b:31:f1:d6:5c:
                    0d:b4:a9:c6:da:42:f2:ce:a1:4e:6c:3b:0e:6a:09:
                    ab:22:c4:ff:28:4c:93:0f:85:d5:50:b1:b5:58:c5:
                    47:a3:aa:3f:eb:67:91:d1:3e:f4:40:e4:b9:57:02:
                    bc:4b:89:da:64:fb:33:6c:04:0d:29:84:e2:1c:69:
                    e8:17:a4:7b:e6:ad:a3:3c:e2:28:e8:e7:c6:6f:a9:
                    91:df:30:30:cc:43:6c:29:5f:12:50:b4:fc:f6:d4:
                    5a:ab:d7:db:a0:e9:64:56:4a:7a:1f:f3:cf:c1:1e:
                    00:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3B:2E:F4:85:18:73:74:AD:2B:EE:29:5A:30:90:56:91:97:75:19
            X509v3 Authority Key Identifier:
                keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:5c:76:1a:09:5b:9d:42:e5:bd:46:6b:36:05:92:e4:c8:cb:
         83:12:61:f5:df:49:64:7d:20:17:ab:66:62:a0:74:fe:60:71:
         0b:42:98:bb:26:87:69:3a:1a:2d:62:ad:78:32:94:52:00:0a:
         41:87:4e:cc:b1:6e:ef:85:78:57:f0:b3:bf:78:a7:a7:c6:73:
         5b:f5:6c:0c:9c:71:d2:ee:7d:80:d8:78:57:d5:f3:ca:37:74:
         54:81:39:b3:c8:7c:6b:65:6f:9e:88:a4:67:74:c2:ec:3f:e2:
         4c:88:f3:87:4e:c6:c7:af:ed:de:4b:e9:35:73:42:13:ad:e3:
         72:ac:fe:15:ac:b1:8b:7a:72:8f:4d:45:71:85:55:c4:a4:4e:
         e4:78:87:65:a7:2f:a5:71:0b:59:5a:20:f1:53:83:ec:52:1b:
         89:50:1b:fc:3f:a0:9c:f6:a3:b7:fa:3d:79:c0:bf:d1:9e:9a:
         cc:2f:3e:08:0b:d8:c6:53:07:c1:13:dc:0a:37:f9:c7:58:07:
         8d:56:29:26:c5:d1:43:b7:a2:c6:0c:e9:31:56:37:76:c9:b8:
         81:f2:74:0c:8a:3f:1e:20:bd:6f:e6:97:d3:c3:88:c1:d5:b4:
         5d:23:81:c2:98:61:74:58:2b:5c:ee:68:04:3a:b9:0a:1a:58:
         3b:c9:97:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:50:00 2026 by rpki-client