Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
File:                     5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft (raw, json)
Hash identifier:          WniavdUD0SuvTXxbRmaZM1BN7vw8ej2L8QGTCxZ/oJ8=
Subject key identifier:   29:81:89:28:C0:C1:53:66:CB:71:42:0A:68:0D:0E:3B:6E:8A:CA:AD
Authority key identifier: E5:05:D9:34:97:F1:9D:25:63:06:6B:40:92:00:96:97:11:F2:8C:67
Certificate issuer:       /CN=e505d93497f19d2563066b409200969711f28c67
Certificate serial:       01A13E265819108FDE685B891A1B04F3303B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
Manifest number:          1243
Signing time:             Thu 15 Oct 2026 06:01:02 +0000
Manifest this update:     Thu 15 Oct 2026 06:01:02 +0000
Manifest next update:     Fri 16 Oct 2026 06:01:02 +0000
Files and hashes:         1: 5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl (hash: mf5tkOuQUMouUkQl5N/MhQT/NzmSpdXsDCpsJRw3xN0=)
                          2: 5qQEdMBcIt5XFFFRCD8GxSK29ZM.roa (hash: uDkJZLcHqBgj1LakSJJ7gsoFR9aK94n0OpJdt1tDHJU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 06:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:26:58:19:10:8f:de:68:5b:89:1a:1b:04:f3:30:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e505d93497f19d2563066b409200969711f28c67
        Validity
            Not Before: Oct 15 06:01:02 2026 GMT
            Not After : Oct 16 06:01:02 2026 GMT
        Subject: CN=29818928c0c15366cb71420a680d0e3b6e8acaad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:42:61:c7:da:c9:f2:39:5c:a7:b1:08:6d:0c:
                    79:32:b3:60:73:41:16:85:99:66:19:16:76:ce:7f:
                    f0:86:93:07:91:6f:39:b3:9c:3f:7b:5d:e8:c4:1f:
                    0d:9f:7e:16:11:9b:bd:ce:ce:00:e9:e0:79:17:7f:
                    2f:36:a9:93:21:b6:54:ac:55:13:ab:1c:e2:f5:f2:
                    e3:13:3a:b7:33:90:39:2f:3d:d5:20:86:6c:aa:c3:
                    e7:a9:46:67:bd:13:ff:bd:98:c3:1b:b0:26:d4:e3:
                    d6:e6:2e:f1:c8:37:cb:5e:ca:84:78:80:90:6e:b7:
                    c7:53:53:0a:1c:89:72:ec:a2:2b:77:d3:af:39:c6:
                    5b:7e:88:3c:48:31:8e:ae:6a:ae:86:3d:1b:6e:32:
                    23:c5:e0:15:7d:18:a7:b1:3a:6e:22:c1:a1:41:cf:
                    0a:e2:68:5c:ea:cf:e5:e4:bd:7c:84:97:b7:cd:8f:
                    8f:b9:aa:9d:b3:f4:b8:24:d7:bf:2f:7e:75:6b:26:
                    44:5d:f5:bd:34:1a:2f:4b:6c:4e:ad:d8:82:97:3b:
                    8d:07:6f:6c:51:ea:78:2b:da:0b:80:55:ef:a9:a1:
                    fc:5a:4f:3d:04:95:c2:76:44:e9:49:66:a7:93:78:
                    92:e2:1e:4c:b1:47:b2:9a:f6:24:28:64:9f:14:e7:
                    2c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:81:89:28:C0:C1:53:66:CB:71:42:0A:68:0D:0E:3B:6E:8A:CA:AD
            X509v3 Authority Key Identifier:
                keyid:E5:05:D9:34:97:F1:9D:25:63:06:6B:40:92:00:96:97:11:F2:8C:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:f1:b8:2b:06:e3:14:e7:ec:40:f0:3d:82:8b:ed:e4:bd:ba:
         33:22:9f:f0:df:18:90:7d:58:18:75:6b:37:9e:36:c8:58:3c:
         00:86:69:a2:08:49:b4:cb:41:c6:76:72:5d:9a:0d:90:ac:89:
         4f:44:8a:85:c7:74:af:6b:6f:6c:02:eb:8d:8a:e0:ed:c9:17:
         df:ef:9d:95:f8:24:f5:6f:a2:1c:ba:9e:1c:9e:c3:a6:de:11:
         d1:46:f0:d8:e3:a9:75:9e:85:ed:a5:d5:c7:e1:ab:81:e6:fc:
         83:b1:9e:67:df:e6:5e:99:11:88:c3:b0:41:95:23:76:03:13:
         2f:9c:99:f5:db:b5:70:ea:4e:e5:42:15:47:e6:23:99:5e:2c:
         5b:88:ca:cc:53:e7:63:db:16:af:f0:e5:f6:81:53:05:6e:b5:
         28:a3:c9:14:3b:34:4a:bb:7d:c8:8f:63:6d:6b:02:94:be:d4:
         56:05:54:1d:10:bd:8e:12:a8:e4:be:3b:99:b1:70:69:81:6d:
         c3:cb:c6:01:36:b4:a5:75:76:55:18:57:ff:08:31:b7:c3:db:
         63:2f:dd:4d:ce:9b:13:d5:90:f9:89:d4:2c:0c:3d:c4:6d:87:
         3e:ba:a0:a2:45:5f:8e:07:65:a0:7e:86:d1:7f:e8:66:7a:19:
         a5:48:5a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:35:20 2026 by rpki-client