Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/290221-8f36-48ed-9b79-1d29c14b3800/1/5QUE0-6U3GjDIH7dcd-IQnlXQSU.mft
File:                     5QUE0-6U3GjDIH7dcd-IQnlXQSU.mft (raw, json)
Hash identifier:          KB/Lx6NrJiWsedakdTxHiNk1wrv6BVvXasrpNrWe2bg=
Subject key identifier:   E9:FA:58:34:0E:0F:39:0E:D9:03:63:FE:D4:FA:01:70:DE:02:75:A8
Authority key identifier: E5:05:04:D3:EE:94:DC:68:C3:20:7E:DD:71:DF:88:42:79:57:41:25
Certificate issuer:       /CN=e50504d3ee94dc68c3207edd71df884279574125
Certificate serial:       01A147CDF727D3F85E6FE9BEAED74BFDD135
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5QUE0-6U3GjDIH7dcd-IQnlXQSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/290221-8f36-48ed-9b79-1d29c14b3800/1/5QUE0-6U3GjDIH7dcd-IQnlXQSU.mft
Manifest number:          0123
Signing time:             Sat 17 Oct 2026 03:00:42 +0000
Manifest this update:     Sat 17 Oct 2026 03:00:42 +0000
Manifest next update:     Sun 18 Oct 2026 03:00:42 +0000
Files and hashes:         1: 5QUE0-6U3GjDIH7dcd-IQnlXQSU.crl (hash: 2qkNHqw2puLbyayvFMX3g/dmNLE1mPbsg5L4JRO0wxs=)
                          2: uieVQKIrYQnOS10ZPQidTSptqvk.roa (hash: MivO7hC4cgF74++kcIqr2G3F0NA+YWEQTrP/kODx1y0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/290221-8f36-48ed-9b79-1d29c14b3800/1/5QUE0-6U3GjDIH7dcd-IQnlXQSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/290221-8f36-48ed-9b79-1d29c14b3800/1/5QUE0-6U3GjDIH7dcd-IQnlXQSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5QUE0-6U3GjDIH7dcd-IQnlXQSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:47:cd:f7:27:d3:f8:5e:6f:e9:be:ae:d7:4b:fd:d1:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e50504d3ee94dc68c3207edd71df884279574125
        Validity
            Not Before: Oct 17 03:00:42 2026 GMT
            Not After : Oct 18 03:00:42 2026 GMT
        Subject: CN=e9fa58340e0f390ed90363fed4fa0170de0275a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:39:de:29:bd:db:6f:a9:56:9b:69:b0:79:dc:
                    a5:d0:01:8c:27:87:91:60:50:83:22:91:97:8a:df:
                    0e:2f:6a:5f:9b:1d:20:30:07:c8:cd:fc:f4:1d:c7:
                    52:16:30:08:a3:29:0e:a3:a1:30:12:50:85:19:b8:
                    5e:ce:0b:80:c4:54:91:35:0b:57:86:46:e9:9c:10:
                    d3:07:a9:b7:60:ed:dc:66:1b:3a:96:7a:2d:0c:ce:
                    03:f5:d6:e6:36:d3:ed:e7:ea:19:c0:e3:db:27:34:
                    c1:a4:47:5b:7a:7c:4d:cd:02:b5:bc:fd:cb:84:af:
                    e1:82:e0:c0:0e:ed:a3:21:4c:ce:ab:af:ec:df:79:
                    a1:78:84:da:b2:aa:08:8c:6e:96:f8:70:0c:63:34:
                    8d:cc:3d:24:cb:08:d7:86:13:be:d3:3e:04:53:cb:
                    b9:9d:2c:f4:a0:a8:ac:5c:29:d3:cc:ce:89:e4:96:
                    63:4e:ea:c9:e8:ea:1d:f5:77:de:96:85:39:26:80:
                    c8:0e:6a:fa:3a:8b:cc:00:01:86:2b:3a:2c:97:d7:
                    fe:53:fd:13:1f:c0:1b:4c:4f:51:e5:bd:c4:0b:3e:
                    c5:72:c1:d1:c1:e2:71:d5:5f:cd:51:b7:80:19:be:
                    8f:94:c3:f9:6b:6b:49:12:60:94:1c:e6:ca:19:b3:
                    58:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FA:58:34:0E:0F:39:0E:D9:03:63:FE:D4:FA:01:70:DE:02:75:A8
            X509v3 Authority Key Identifier:
                keyid:E5:05:04:D3:EE:94:DC:68:C3:20:7E:DD:71:DF:88:42:79:57:41:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QUE0-6U3GjDIH7dcd-IQnlXQSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/290221-8f36-48ed-9b79-1d29c14b3800/1/5QUE0-6U3GjDIH7dcd-IQnlXQSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/290221-8f36-48ed-9b79-1d29c14b3800/1/5QUE0-6U3GjDIH7dcd-IQnlXQSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:a1:7f:c4:fd:ae:34:fe:d3:15:1f:2c:48:42:4b:1e:bb:27:
         05:29:d3:3f:ba:b1:d5:34:83:12:b4:38:7f:24:96:a3:12:d0:
         20:18:f2:f0:75:fd:12:e2:5a:19:b3:f8:a7:80:82:a6:f4:f8:
         70:8b:bd:af:78:a4:75:93:1b:2e:e1:7f:b2:e0:e5:b0:33:11:
         d1:ae:2c:f0:5e:cc:b7:6a:19:c3:62:04:a9:99:7f:1f:0a:3a:
         21:45:aa:9a:2a:03:24:ff:dc:fc:f7:c9:08:91:af:7f:05:3e:
         25:aa:97:15:3c:93:b4:1e:3c:95:cd:51:e5:d9:19:4a:c1:a3:
         ff:d8:f0:48:d2:22:e7:ac:ff:57:8a:cf:95:4c:2d:d1:57:2c:
         8e:44:57:b1:e8:fd:c5:ba:72:51:0a:df:76:37:a4:be:11:d4:
         40:29:d3:6a:72:9b:86:b9:9e:bb:0d:7d:14:35:3d:5f:0c:eb:
         51:b8:22:02:7a:c2:f4:95:e9:0e:4c:ef:28:9f:fc:e9:b5:75:
         81:ef:6e:d5:26:01:8f:41:c2:2c:8f:0c:67:85:59:59:8c:10:
         2c:c2:bb:67:35:8b:41:b2:bb:fb:86:37:87:2d:a9:da:b3:a6:
         2b:c7:d7:87:4e:bd:e5:3d:28:1b:da:11:0d:e4:32:8c:04:7f:
         72:7c:ff:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:05:52 2026 by rpki-client