Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
File:                     V3bZoLVb1JWhvjxcA_olHT3ouMU.mft (raw, json)
Hash identifier:          elPwYA3DIA9vu4J+H5xy9Pi4WhXa6Ks04cQElwVbB6U=
Subject key identifier:   7E:C8:39:40:74:4F:92:92:D9:1A:32:95:7E:30:45:B4:EB:78:D8:9C
Authority key identifier: 57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5
Certificate issuer:       /CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
Certificate serial:       01A17DAA87F3243C794734AD03DAB8776295
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
Manifest number:          1686
Signing time:             Tue 27 Oct 2026 14:01:30 +0000
Manifest this update:     Tue 27 Oct 2026 14:01:30 +0000
Manifest next update:     Wed 28 Oct 2026 14:01:30 +0000
Files and hashes:         1: 5O4WJBayXN8-T5sAxCOVSxDJECk.roa (hash: 1xrSDNWEV4bb8nFWycmGbVzjtMS9SCVl02w2LA86yYc=)
                          2: G1Ty4WndBpOGD61GKAs-CwP5c2w.roa (hash: l0eAmw+GJHiz9ePv9I+0pPo3dWb64rnkIyzrqbPQk6o=)
                          3: KJ_UKUidS9-7KSDGLThVTELwDhI.roa (hash: dHBmhOaPvkrCjpSOzFqmoqtogZjlMERH8Hhj6/qx0yI=)
                          4: NuEtWDfqstg6Pj9E1KeSos8IDaw.roa (hash: wtuhCZ4o02QJy1QmedWkrl+M7I3hD/AeGG3bB2Srdj0=)
                          5: V3bZoLVb1JWhvjxcA_olHT3ouMU.crl (hash: 3yWagLYXjGWVAbl1+lP2TAi6dTPmD9HPzGzjDwYI/iA=)
                          6: kMsITRvtaXC741Y_7AjN_jGGmv4.roa (hash: gbq77+xKSdpHzBJMY7zv47/LbqIo3f6akkibyM35M7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:aa:87:f3:24:3c:79:47:34:ad:03:da:b8:77:62:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
        Validity
            Not Before: Oct 27 14:01:30 2026 GMT
            Not After : Oct 28 14:01:30 2026 GMT
        Subject: CN=7ec83940744f9292d91a32957e3045b4eb78d89c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:64:54:32:11:22:49:7b:89:05:f0:a7:40:25:
                    52:d2:c7:d9:40:7e:dc:86:bd:e2:a0:5b:98:36:84:
                    2c:11:83:56:e6:3c:a6:98:a3:73:31:85:20:3d:70:
                    df:01:e4:28:02:ff:28:41:62:66:d7:7d:2a:56:f4:
                    d8:8f:ba:b1:e1:ae:8e:b4:38:19:2e:86:4d:a5:ac:
                    c2:19:7b:a7:32:40:e7:51:6a:e9:e8:73:74:99:95:
                    c1:d4:60:c3:7c:8a:7d:bb:4f:18:e4:63:36:f5:9a:
                    74:d9:36:27:21:e4:35:87:48:81:92:19:83:e4:42:
                    7f:23:f9:e5:6f:fb:06:86:24:e0:cb:8a:c8:c2:15:
                    13:e7:0f:e0:a4:ef:d0:18:12:17:71:dc:bf:6d:e6:
                    ca:02:6b:8d:33:07:15:c0:37:8f:cf:59:49:c9:eb:
                    85:e2:b0:58:6b:cc:e5:8a:4d:05:9f:78:a5:9f:85:
                    fd:2e:e2:44:3b:52:4d:37:12:2d:bd:4e:e4:c5:cd:
                    d7:36:e8:8c:5d:78:dd:5f:06:a2:c5:94:2f:1b:41:
                    d8:bd:f6:3d:0b:4b:28:62:bc:48:c7:92:66:0d:49:
                    ec:4a:ea:08:55:71:06:de:1e:a8:3c:a3:5e:e2:88:
                    f0:ba:f4:b8:9b:3f:df:c3:43:45:48:8d:31:d1:79:
                    26:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C8:39:40:74:4F:92:92:D9:1A:32:95:7E:30:45:B4:EB:78:D8:9C
            X509v3 Authority Key Identifier:
                keyid:57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:6c:06:33:ad:41:d4:4f:eb:01:ab:67:55:62:14:c0:4a:b2:
         ee:36:7b:2f:80:69:c3:ed:d9:e8:f0:df:d3:9e:21:29:15:ae:
         18:24:b8:69:bb:4b:3f:94:91:6b:1f:aa:29:6a:eb:52:12:f5:
         b1:dd:e1:e1:34:d0:44:3f:d6:20:fd:f9:cb:79:61:fa:c6:e4:
         92:54:32:ee:c6:16:f0:84:4a:50:ce:93:ba:d7:29:42:fa:ae:
         e6:eb:0d:aa:4d:aa:43:f4:5c:e5:68:ce:90:5a:0d:ce:33:43:
         77:0b:6a:cc:61:fc:05:48:d5:74:d5:47:84:97:38:3f:f1:13:
         18:7a:87:8d:7a:0d:4f:39:ee:5a:36:2b:c7:56:a4:23:0f:21:
         dc:27:25:6f:87:e7:8d:83:f2:6b:66:30:a9:40:b7:e1:08:3b:
         02:67:dc:36:ad:61:cd:5a:1a:41:d2:01:3d:15:65:bb:ad:41:
         66:94:7c:f2:bb:da:b5:40:8e:11:f4:6b:4e:fc:c9:3f:74:71:
         8d:8c:14:d8:3b:16:9a:3f:5c:87:28:69:fe:2f:ad:65:74:e7:
         3c:78:c5:25:d8:94:f6:5f:fc:b6:93:a6:aa:9c:6c:b1:97:19:
         d1:9c:5f:0b:9b:32:38:78:79:c7:85:76:25:fc:3e:d4:c7:4c:
         c4:05:5b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:08:25 2026 by rpki-client