Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
File:                     5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft (raw, json)
Hash identifier:          Ch0uy8UYfJv8OGVZUqMRzKe5VksG5U/+Y1DRM2iN7Qw=
Subject key identifier:   E0:74:07:6E:E4:EF:6A:7B:CC:2E:62:77:EB:BF:B3:4F:3E:2F:E8:73
Authority key identifier: E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57
Certificate issuer:       /CN=e623299ee47b4f612db90a14f95e40767ae06657
Certificate serial:       01A13D815001307EB7BAC033D8803B1E8B36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
Manifest number:          1735
Signing time:             Thu 15 Oct 2026 03:00:47 +0000
Manifest this update:     Thu 15 Oct 2026 03:00:47 +0000
Manifest next update:     Fri 16 Oct 2026 03:00:47 +0000
Files and hashes:         1: 5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl (hash: prUmA6+Tc4/5+6tiXlCRWHAHxJY3vx+cBXPeEY0RGuY=)
                          2: kVVy-YWr30S0GSdgLLy6UhLp1JQ.roa (hash: MLFi2OYZr+v/54OGb70/05XIuu/GA7oMfXFZI0ZBmD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 03:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:81:50:01:30:7e:b7:ba:c0:33:d8:80:3b:1e:8b:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e623299ee47b4f612db90a14f95e40767ae06657
        Validity
            Not Before: Oct 15 03:00:47 2026 GMT
            Not After : Oct 16 03:00:47 2026 GMT
        Subject: CN=e074076ee4ef6a7bcc2e6277ebbfb34f3e2fe873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a8:67:6e:74:3b:75:8f:2a:c1:aa:63:45:69:
                    87:19:c8:81:74:3c:8f:ca:cc:a2:bc:6e:27:1e:c1:
                    88:db:aa:fb:73:54:48:ae:c6:ea:f0:22:d1:dd:df:
                    b7:01:c7:b4:70:96:d3:ee:aa:64:86:91:21:40:42:
                    66:c8:8b:db:95:77:95:72:72:15:1d:75:da:e2:ca:
                    c1:1c:39:ec:ad:1a:71:61:50:03:ac:b9:6a:0e:6d:
                    c7:1a:5c:ff:5c:72:1d:08:58:f2:93:53:a3:b5:86:
                    8f:eb:13:61:47:42:15:41:04:88:80:c6:4f:56:af:
                    d6:07:c9:2b:2a:2b:32:67:59:fe:3f:ea:0d:48:10:
                    2d:ad:c6:bf:fa:27:de:d0:b1:6f:88:60:1a:9d:4e:
                    fe:63:f6:02:04:d1:df:70:df:91:65:fa:8a:94:f5:
                    2b:01:1e:60:e3:90:2b:a2:7f:ec:49:fa:e0:2e:f1:
                    88:79:90:a2:a1:f6:7f:9a:bf:51:14:a1:e2:ee:94:
                    ad:e5:82:6a:0d:38:f1:02:41:a8:56:29:34:7a:89:
                    23:eb:d6:22:43:46:b0:ad:00:c5:8d:aa:b5:c3:2c:
                    c6:75:f2:9e:66:b8:58:fe:b9:91:e1:9b:2f:6b:14:
                    67:b5:ce:36:80:4c:d5:17:b0:f5:54:b6:6c:66:63:
                    ca:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:74:07:6E:E4:EF:6A:7B:CC:2E:62:77:EB:BF:B3:4F:3E:2F:E8:73
            X509v3 Authority Key Identifier:
                keyid:E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:e7:88:e8:b9:32:85:a6:33:83:df:55:b1:67:f1:e4:7c:76:
         e7:ca:09:3a:72:19:43:0c:09:a3:a6:68:9f:3d:9c:d6:ba:5d:
         05:1d:4a:cf:4d:32:17:ad:b5:03:59:c3:79:dd:98:c8:a8:b6:
         2b:dd:f4:86:59:e0:f0:96:31:5d:b8:64:12:0a:69:28:a9:f0:
         b8:60:13:3b:f3:b0:41:18:94:0e:0e:40:ed:d8:e9:3d:0c:c5:
         de:0c:e5:0e:8b:69:15:aa:7b:10:63:20:e7:2d:1f:c2:ca:c4:
         b9:3f:b1:d2:a2:f8:59:86:77:97:ae:1f:e9:1b:3b:70:5b:be:
         df:7e:bb:b2:05:9c:48:25:2b:be:95:71:f4:84:84:16:65:44:
         4c:42:f3:8b:19:75:20:87:cd:7f:36:89:ee:21:d9:2a:1d:07:
         65:be:3f:0d:10:97:86:68:40:4b:da:b9:65:5f:06:69:b1:4a:
         cc:a6:42:8c:36:f6:d8:d8:89:38:63:fd:74:7b:b8:d4:e5:ef:
         03:f0:02:3b:9c:fe:4b:ba:7b:57:e2:95:2a:d3:42:75:67:dc:
         d2:23:64:94:b5:81:c3:0d:eb:04:96:5d:7b:8a:27:d4:58:03:
         6e:c9:89:fd:d8:8c:40:f4:02:b4:fa:a5:f1:7f:ce:7b:31:e7:
         05:ed:d0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:26:01 2026 by rpki-client