Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/f77002-6bf7-413a-a779-38a4bf17dbb1/1/5t1UYIO_ZSPazXWw3mqSXiWOfXw.mft
File:                     5t1UYIO_ZSPazXWw3mqSXiWOfXw.mft (raw, json)
Hash identifier:          51IMFb+bKvuMJ/kF/skpkTXQhd7E6vMS/5+egfxNtJI=
Subject key identifier:   A7:44:0F:35:61:6A:34:7E:BE:18:61:71:10:BA:4F:79:61:14:15:24
Authority key identifier: E6:DD:54:60:83:BF:65:23:DA:CD:75:B0:DE:6A:92:5E:25:8E:7D:7C
Certificate issuer:       /CN=e6dd546083bf6523dacd75b0de6a925e258e7d7c
Certificate serial:       01A174A7543A7FBBA0D62E6942F394E9A592
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5t1UYIO_ZSPazXWw3mqSXiWOfXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/f77002-6bf7-413a-a779-38a4bf17dbb1/1/5t1UYIO_ZSPazXWw3mqSXiWOfXw.mft
Manifest number:          0118
Signing time:             Sun 25 Oct 2026 20:01:25 +0000
Manifest this update:     Sun 25 Oct 2026 20:01:25 +0000
Manifest next update:     Mon 26 Oct 2026 20:01:25 +0000
Files and hashes:         1: 0DosBvc1nYTBnk-k7-9MkqoJuso.roa (hash: HpDjKyJ1RrZFlilOHlA6dkNWt1QM+OdtMilpqKGSWkQ=)
                          2: 5t1UYIO_ZSPazXWw3mqSXiWOfXw.crl (hash: 9QQ5LCAsmAbbGSBC/uvc2SxKIjDCqExxg4woDGvzmpY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/f77002-6bf7-413a-a779-38a4bf17dbb1/1/5t1UYIO_ZSPazXWw3mqSXiWOfXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/f77002-6bf7-413a-a779-38a4bf17dbb1/1/5t1UYIO_ZSPazXWw3mqSXiWOfXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5t1UYIO_ZSPazXWw3mqSXiWOfXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:74:a7:54:3a:7f:bb:a0:d6:2e:69:42:f3:94:e9:a5:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6dd546083bf6523dacd75b0de6a925e258e7d7c
        Validity
            Not Before: Oct 25 20:01:25 2026 GMT
            Not After : Oct 26 20:01:25 2026 GMT
        Subject: CN=a7440f35616a347ebe18617110ba4f7961141524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ad:39:a0:63:32:cd:d0:8d:19:a9:8f:19:6f:
                    dd:50:16:85:4e:25:a9:a1:f5:5f:34:35:8c:b5:72:
                    86:c1:c8:9b:31:17:4c:79:0c:99:99:30:06:1f:c7:
                    f1:d7:91:e0:30:8c:9a:40:65:d4:62:96:15:22:e6:
                    91:5b:c5:03:b9:85:86:b3:0a:17:89:57:f9:96:31:
                    9f:c7:53:f1:77:fe:83:11:5e:74:59:7f:6a:2d:ca:
                    65:81:05:d6:95:90:3d:89:97:e9:21:33:ee:ea:89:
                    62:5a:59:0d:20:0c:77:4d:12:ef:ef:65:04:2a:4f:
                    7d:02:5e:1a:87:76:e7:96:51:5e:1f:a7:8b:ac:20:
                    dc:12:f4:87:35:08:8f:60:c0:f8:54:7d:47:df:ad:
                    6a:11:62:bf:35:a0:e3:4e:0b:86:8b:e3:c8:c4:34:
                    8f:ab:e8:cd:38:ee:84:25:a5:3f:55:9c:18:b9:46:
                    be:4b:5e:1b:35:89:03:48:11:f9:77:bc:1b:27:ed:
                    ab:b8:8c:2b:2b:1e:71:52:72:ff:25:dc:0c:ee:c7:
                    fe:dc:d9:45:b3:4c:74:eb:b1:5a:00:3d:38:10:55:
                    7e:dd:74:c5:32:60:46:74:32:d0:bf:62:66:1b:7d:
                    83:a6:3a:0d:09:eb:60:ac:e2:b4:52:5a:94:61:8e:
                    73:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:44:0F:35:61:6A:34:7E:BE:18:61:71:10:BA:4F:79:61:14:15:24
            X509v3 Authority Key Identifier:
                keyid:E6:DD:54:60:83:BF:65:23:DA:CD:75:B0:DE:6A:92:5E:25:8E:7D:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5t1UYIO_ZSPazXWw3mqSXiWOfXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f77002-6bf7-413a-a779-38a4bf17dbb1/1/5t1UYIO_ZSPazXWw3mqSXiWOfXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f77002-6bf7-413a-a779-38a4bf17dbb1/1/5t1UYIO_ZSPazXWw3mqSXiWOfXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:e1:7c:a1:ea:38:87:02:a0:a1:ad:27:57:8d:fe:87:36:da:
         21:8a:e5:f6:c7:d3:fa:c2:ac:48:a5:d4:b4:a4:db:85:63:79:
         ec:0b:29:f7:76:c9:11:c3:79:9f:4c:6d:81:75:84:f5:20:19:
         31:64:ef:3f:6b:dd:f7:d7:32:19:7c:1c:c7:86:b9:25:e5:a6:
         7a:41:f9:ae:99:7e:fa:50:b2:04:d9:6f:76:b6:45:9a:7b:dc:
         12:a4:0a:f2:af:7a:7a:34:07:11:0e:e6:f4:2b:c2:63:bb:6a:
         27:5e:6d:d8:d1:63:54:97:53:82:14:70:10:81:0a:b8:c5:5f:
         3a:08:74:f3:58:b1:bf:06:90:fb:e6:de:33:83:a4:b6:83:a2:
         53:6a:a8:b6:a0:c5:d7:c7:49:b7:50:0b:b9:86:0d:83:43:bb:
         2c:54:53:c6:01:f4:f8:30:9d:0a:b5:e2:60:05:5b:e7:d8:ba:
         bd:0b:99:d0:70:af:a3:08:c6:d4:02:51:19:43:18:b4:c0:35:
         20:5e:53:05:58:c3:66:cc:e9:ad:80:03:63:c2:12:76:2e:f2:
         6e:af:66:78:7a:31:2f:b3:12:90:82:8c:4d:2d:2a:2d:88:35:
         4c:51:62:c9:c3:0f:1e:fe:a5:6a:d4:bf:7b:05:3e:62:3b:39:
         73:a4:b8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:19:24 2026 by rpki-client