Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
File:                     A-ynkyRXUrZ6iB9441q4_0ndPsE.mft (raw, json)
Hash identifier:          4kv+esjqoRP5SJ3uhEn+iluYDW+oFnrThyvW+ZG1/kU=
Subject key identifier:   C5:89:7C:4F:A5:B7:2F:2A:2C:05:C0:39:E7:BD:45:86:1D:E7:55:81
Authority key identifier: 03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1
Certificate issuer:       /CN=03eca793245752b67a881f78e35ab8ff49dd3ec1
Certificate serial:       01A1401601697A3060B8A6AC245A17EA1852
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
Manifest number:          1AAC
Signing time:             Thu 15 Oct 2026 15:02:26 +0000
Manifest this update:     Thu 15 Oct 2026 15:02:26 +0000
Manifest next update:     Fri 16 Oct 2026 15:02:26 +0000
Files and hashes:         1: A-ynkyRXUrZ6iB9441q4_0ndPsE.crl (hash: SXEOIVqzYwPBhLskDmsak5SDljtYT/9KlNGYojbi36o=)
                          2: XHxwIZBTZRjnQKSihRspwmKfqzw.asa (hash: k1pdEq1OyCjXSRTI0eNTGpnCfUhmunSzK9u8AF/CUbk=)
                          3: Yg1vDl0DhjeaHWIjulFGn2EXs50.roa (hash: ZHTaupqQKeBhzDbcDiW4xvhVp2wefwY9mwNkCrn+I/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:16:01:69:7a:30:60:b8:a6:ac:24:5a:17:ea:18:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03eca793245752b67a881f78e35ab8ff49dd3ec1
        Validity
            Not Before: Oct 15 15:02:26 2026 GMT
            Not After : Oct 16 15:02:26 2026 GMT
        Subject: CN=c5897c4fa5b72f2a2c05c039e7bd45861de75581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:14:1a:e4:0b:7f:b2:c9:94:fa:d5:10:c9:0f:
                    90:14:b3:37:63:03:df:07:21:42:91:b1:06:a5:da:
                    56:ef:ee:f6:88:ea:d9:e2:df:26:2b:95:78:cb:73:
                    20:70:7f:88:e5:1a:e0:d4:c6:01:59:a9:ff:52:59:
                    b7:f3:c1:bf:32:ad:94:3e:f1:c7:b5:1b:57:55:84:
                    d0:c7:4b:c8:82:89:c9:98:5f:2d:eb:9d:57:55:db:
                    6a:f4:27:ee:1f:1e:60:49:38:16:99:0f:62:3a:d7:
                    78:28:7a:c6:a6:76:d4:c3:f9:9e:0f:d5:eb:d6:c6:
                    03:9d:63:c5:11:8a:fd:e4:0f:5a:3e:d0:2e:75:8c:
                    65:67:1a:e0:9a:79:86:34:0f:93:d7:c6:f0:cb:11:
                    6b:8c:e2:7e:1d:24:1c:47:36:77:44:79:75:b7:b5:
                    d9:04:52:bb:71:1a:b8:04:ec:d3:da:81:69:7f:0c:
                    e3:2b:20:b4:80:9a:6e:67:40:e3:78:ba:18:9a:0c:
                    12:58:a7:c3:39:6b:1b:a9:14:d9:80:3b:03:ae:11:
                    34:45:2d:56:92:7b:54:65:e5:c7:50:64:86:b9:15:
                    af:3f:ca:70:1e:2b:71:fb:1a:49:52:7f:02:5a:18:
                    ae:e0:68:df:c6:a4:af:8c:bc:01:7b:44:c4:c7:eb:
                    ad:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:89:7C:4F:A5:B7:2F:2A:2C:05:C0:39:E7:BD:45:86:1D:E7:55:81
            X509v3 Authority Key Identifier:
                keyid:03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:09:64:17:01:91:ae:a9:3a:cd:8b:2f:98:a4:01:41:8a:c2:
         7a:51:20:5f:1d:a7:fa:ba:2e:e8:1a:58:6f:fd:d6:49:2f:99:
         de:4a:d5:45:a2:ba:2e:b5:1a:b5:3f:94:ff:7f:52:b1:6c:45:
         05:60:d9:ad:40:b5:ac:89:97:2a:2a:80:66:52:cd:f8:b3:ac:
         ff:4c:08:cc:9e:e8:7d:72:77:1f:e1:3e:6f:1e:dd:47:31:d0:
         7c:02:54:8e:c3:7b:79:f1:52:a8:32:38:f2:58:c9:a4:b4:ed:
         c6:5f:c6:d1:c8:f9:da:2f:c5:e0:ca:0e:69:5e:4e:ef:24:5e:
         b1:f7:81:64:40:fb:df:d2:5c:d0:98:c4:e1:4c:7c:dc:9e:03:
         6e:c5:92:b1:4e:29:55:1b:6f:90:d8:ed:e8:43:22:1e:dc:27:
         11:c7:0a:af:ba:41:9d:5d:fd:73:75:05:eb:5b:fb:cc:ce:cf:
         d6:eb:da:c4:5b:68:84:52:b7:5f:6a:f5:97:37:2b:21:7d:fb:
         50:fa:3f:a3:89:d9:31:9a:69:56:27:7f:f8:b3:ae:c8:9a:7a:
         ee:53:56:57:6b:25:af:8f:94:85:cb:26:6d:5e:f1:6f:f2:ac:
         37:46:67:66:6f:bd:83:e1:f7:61:f2:be:85:a0:73:89:bc:f0:
         01:32:46:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:51:13 2026 by rpki-client