Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
File:                     5LTFOvZfC4OWuVtNB9TsTnvid-U.mft (raw, json)
Hash identifier:          OyK4PEicE7eu3y+6QRzA3Rnu/e5QdxHTPxQpMxJxZLQ=
Subject key identifier:   92:04:F6:5B:A2:BB:E4:79:1A:D6:FC:55:23:64:1A:92:30:CC:02:59
Authority key identifier: E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5
Certificate issuer:       /CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5
Certificate serial:       01A108814EA9F8011CB014545856158CE56A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
Manifest number:          1A8A
Signing time:             Sun 04 Oct 2026 20:00:54 +0000
Manifest this update:     Sun 04 Oct 2026 20:00:54 +0000
Manifest next update:     Mon 05 Oct 2026 20:00:54 +0000
Files and hashes:         1: 5LTFOvZfC4OWuVtNB9TsTnvid-U.crl (hash: wqA7oFbwiw/fNnqZGo9u0TebLImIp5cWvFNVbL4JI6Y=)
                          2: 8n1cP-EeM_0aPON8tQRs5t94Tcw.roa (hash: oWMSKnzC7MzhiIiFzW+fvutsE0+XNV6RpmpSUYLiCP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 20:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:08:81:4e:a9:f8:01:1c:b0:14:54:58:56:15:8c:e5:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5
        Validity
            Not Before: Oct  4 20:00:54 2026 GMT
            Not After : Oct  5 20:00:54 2026 GMT
        Subject: CN=9204f65ba2bbe4791ad6fc5523641a9230cc0259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:07:5e:35:03:a3:78:91:99:58:ad:5b:e9:ac:
                    52:f6:c5:6c:57:c4:9d:93:89:e0:99:ca:4d:86:11:
                    9c:7d:d4:b7:6a:7d:13:b3:4d:b1:d6:6e:6c:da:cf:
                    a4:30:76:ae:c8:e8:ea:f0:c8:e1:f0:b8:04:97:93:
                    b2:73:33:fa:c2:32:22:f5:64:e7:db:50:35:7d:0e:
                    0d:e4:88:31:86:ef:d0:7e:20:69:8d:c3:47:08:29:
                    63:2e:4f:f4:61:f9:a4:34:84:ad:a5:d5:96:5a:1c:
                    5b:f1:21:30:fa:9f:9a:09:bd:d2:7f:58:17:74:44:
                    57:70:1a:96:0e:11:5d:e9:be:b6:11:29:fd:79:16:
                    37:ea:e6:a5:9e:8c:3a:52:e7:ce:ef:97:53:18:20:
                    46:3c:ae:a9:16:6a:ae:c6:6d:aa:5e:96:43:7a:1d:
                    15:14:97:38:e3:d7:84:62:df:77:bb:6c:83:7b:20:
                    ae:b8:7f:64:b3:d0:95:dd:ab:29:4d:04:93:fc:b0:
                    2b:91:c4:b5:cd:f0:06:c4:4f:0b:29:4b:dd:2e:9e:
                    bc:3d:5e:1e:fa:04:75:22:73:78:2e:bc:fb:ff:87:
                    0e:43:6e:d9:91:f5:71:63:ec:79:a7:f2:a2:6f:74:
                    1f:8a:3f:14:03:7d:2e:fb:42:da:eb:aa:19:31:60:
                    89:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:04:F6:5B:A2:BB:E4:79:1A:D6:FC:55:23:64:1A:92:30:CC:02:59
            X509v3 Authority Key Identifier:
                keyid:E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ae:8f:db:50:2f:79:57:75:98:17:f7:33:21:18:9d:2f:5a:
         c6:77:06:80:44:ea:9d:a8:99:43:2a:54:cf:91:08:54:db:d2:
         87:59:95:2f:0f:ca:69:51:f2:14:fe:f4:ee:74:59:30:df:9c:
         c0:4d:49:df:b5:4f:43:76:4e:e1:1e:2d:0a:25:6c:68:e1:e2:
         fb:32:7c:47:eb:20:05:a4:76:42:5a:b7:6d:ea:cd:1c:b0:b5:
         db:f0:7c:01:96:21:0c:e1:bc:ff:bf:47:6d:3e:90:1f:53:6d:
         9a:83:e1:7a:a6:dd:c5:37:51:2f:6b:03:a6:7d:5c:7b:e9:7c:
         27:e6:ad:fd:d1:22:6c:89:a8:47:7a:53:7c:b9:02:e8:36:02:
         23:99:82:9c:83:38:e2:2b:fb:3a:8d:24:fa:05:99:83:50:23:
         f3:40:36:80:a9:b9:59:8a:3c:eb:c4:9f:fd:0a:a2:2e:60:82:
         d0:92:67:41:97:47:ca:72:b0:dc:cd:b4:c1:58:58:30:5a:fc:
         92:d7:10:1b:29:ce:e8:57:6a:eb:11:a5:66:90:c0:5a:c3:e3:
         87:53:5f:4f:73:72:8e:99:51:84:e6:ce:3c:aa:62:ed:2f:b5:
         4b:f6:54:92:07:ac:0f:76:5e:38:01:3a:c7:ef:59:f1:b1:c6:
         0c:31:dc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 02:51:21 2026 by rpki-client