Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
File:                     X75lriPyB_ppUlX1WpB6wWCL4JQ.mft (raw, json)
Hash identifier:          RID398Y7ejwuOWCbW6KcFD9HZN4oW4tTTU6r7cIOB3I=
Subject key identifier:   0E:71:5A:A1:D6:18:D0:74:83:A0:57:BE:A1:33:C7:CF:89:64:79:D1
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Certificate issuer:       /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial:       01A17695A156A4897093D2DF9056BBE36B4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
Manifest number:          1AF9
Signing time:             Mon 26 Oct 2026 05:01:19 +0000
Manifest this update:     Mon 26 Oct 2026 05:01:19 +0000
Manifest next update:     Tue 27 Oct 2026 05:01:19 +0000
Files and hashes:         1: 67OiFVEvbIFfNzy1WDjYUfSQKxg.roa (hash: HElN3xLoYKV8LeEgQttQ0NlwlcIsPVvOtRy+CwFBbFc=)
                          2: 9D820He12zEiGHJY2yEp95HuOYo.roa (hash: JgNweIsliEaUH1GQxpLBgGrSQ23iPTPHkKTdFr797ts=)
                          3: HPAT1MyeKAtUXfiwHelB0dU143I.roa (hash: MB/EaJsVrRQhtNPL6YNv0ijVFjc3MkwuTavJrFTSstk=)
                          4: TieuC1DoyThjRQq3uG3ihjLScTo.roa (hash: vC9rnpVx2T8cbVOPfkfZTZYOxBuzPINUpSnwkUZDkSE=)
                          5: X75lriPyB_ppUlX1WpB6wWCL4JQ.crl (hash: h2aSe/oil0lI6h7y2RO5FHR1zmNf0u87jQB1bCTiw6w=)
                          6: vfeKSqmq5LUcZl4LB-EIYGiRkYw.roa (hash: GoUAFs4BAgVbY3rRcRCUBg3w55R401BDamLqYJ0JGHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 05:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:76:95:a1:56:a4:89:70:93:d2:df:90:56:bb:e3:6b:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
        Validity
            Not Before: Oct 26 05:01:19 2026 GMT
            Not After : Oct 27 05:01:19 2026 GMT
        Subject: CN=0e715aa1d618d07483a057bea133c7cf896479d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cd:70:fa:f5:85:ce:d0:4f:ab:06:a9:57:f6:
                    37:04:96:91:8e:b9:8d:99:d1:b7:2e:c1:9d:f4:4a:
                    94:d0:6a:81:65:4b:65:e5:24:92:bd:fc:86:f8:20:
                    77:b2:75:1b:bb:1a:e8:cc:bb:18:b7:75:f0:6f:eb:
                    64:08:a7:f6:3f:25:82:6f:e8:90:dd:d0:c4:4c:c4:
                    5e:07:d9:68:59:0a:28:d1:df:d4:95:4c:3e:cc:c7:
                    16:56:2c:c3:71:0a:a4:fe:2f:d0:c1:8f:82:67:a2:
                    8f:14:8f:e1:7d:66:eb:9b:36:48:ad:91:ac:16:8a:
                    c1:ce:0b:20:16:9f:46:74:6a:45:2c:7e:b6:a9:3e:
                    9a:0f:de:28:35:2d:ab:5a:ec:f7:30:60:60:4d:d0:
                    6f:28:02:49:32:f0:61:05:9c:7e:20:4f:92:7c:e9:
                    fb:2e:d9:90:00:86:b0:44:87:30:28:d9:40:4e:f3:
                    32:7a:55:3b:25:d8:00:c3:b9:fd:21:60:c5:e0:9b:
                    b3:c6:23:1f:5d:95:69:2d:f5:d4:37:6e:13:c7:d9:
                    5a:80:b4:53:b4:c6:06:7a:87:4a:8e:68:4e:e8:83:
                    4b:d5:64:5a:79:d3:97:67:a3:62:8c:d4:54:d1:fe:
                    15:35:b4:55:a4:42:c7:1a:c5:e0:91:5c:f5:ec:78:
                    2e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:71:5A:A1:D6:18:D0:74:83:A0:57:BE:A1:33:C7:CF:89:64:79:D1
            X509v3 Authority Key Identifier:
                keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:9c:e2:55:ac:fa:ff:cc:3a:31:82:db:4c:57:f6:dd:35:bc:
         70:dd:d7:ce:ca:07:88:50:3b:8f:c7:61:8a:06:d4:6c:1e:bd:
         42:1f:9b:af:e1:2c:df:aa:ef:c5:a2:4b:70:32:fb:c4:ea:e3:
         b4:95:d0:cd:8f:d4:8f:ea:34:9f:f3:dd:a7:0e:da:c9:71:dc:
         eb:76:de:7d:f9:b6:06:58:23:a1:cf:54:b7:2e:61:fb:ce:24:
         31:23:eb:4f:c9:20:bf:63:d3:32:53:ba:a8:13:31:66:2e:68:
         ed:6c:b7:df:1c:b4:4c:4b:1b:c2:95:b8:2b:28:61:02:db:aa:
         22:e6:89:4a:ca:9c:1e:81:ad:86:81:c8:89:37:5f:27:69:be:
         e0:fb:56:ad:91:06:6e:4e:a0:e8:eb:28:d7:9a:0c:29:98:f6:
         ee:bd:19:92:01:87:01:4a:db:07:82:09:bd:69:8e:de:41:00:
         3d:e8:06:b6:48:75:0d:d3:04:0a:b3:15:c7:f1:1a:af:05:9c:
         e5:1f:06:76:1b:50:5c:00:ca:32:5f:7f:8c:05:d7:76:77:fb:
         ea:da:3b:9e:e2:94:e5:8b:04:c2:f5:1c:28:cb:e2:6c:94:d1:
         f1:61:42:1a:d4:b6:aa:c7:67:20:d4:81:f2:f7:a8:51:83:ef:
         55:05:8e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 16:03:54 2026 by rpki-client