Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
File:                     5GZIM5avs3fl43nRYVveD9TZ7Uc.mft (raw, json)
Hash identifier:          1KVq0/Kj7qR+/DK7DQ4DXtTgk0AyKnnhU8PxHNETE4U=
Subject key identifier:   DA:17:01:9B:A9:29:6E:86:B2:B2:2A:BB:D8:E8:55:41:5C:63:7B:8F
Authority key identifier: E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47
Certificate issuer:       /CN=e466483396afb377e5e379d1615bde0fd4d9ed47
Certificate serial:       01A13F028BF872F33A80EDA3F40676054768
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
Manifest number:          119D
Signing time:             Thu 15 Oct 2026 10:01:33 +0000
Manifest this update:     Thu 15 Oct 2026 10:01:33 +0000
Manifest next update:     Fri 16 Oct 2026 10:01:33 +0000
Files and hashes:         1: 5GZIM5avs3fl43nRYVveD9TZ7Uc.crl (hash: Jpe05hwp+3oe6Qf06wue67ERt3cPEuYLCrh7m6AH86M=)
                          2: hNYIQ5HHhINGm0B4xE-M57SIxF0.roa (hash: FqszJttjAhJJ6gXeV7wcVvhxNzpQaBx6Ggtmu08rd0M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:02:8b:f8:72:f3:3a:80:ed:a3:f4:06:76:05:47:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e466483396afb377e5e379d1615bde0fd4d9ed47
        Validity
            Not Before: Oct 15 10:01:33 2026 GMT
            Not After : Oct 16 10:01:33 2026 GMT
        Subject: CN=da17019ba9296e86b2b22abbd8e855415c637b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:40:7f:1f:97:86:a9:c8:61:74:76:2d:4f:bc:
                    2f:1c:c4:78:3b:d9:da:eb:6f:83:4c:93:d6:6b:30:
                    4a:25:cf:9e:99:17:20:45:40:fe:81:4d:7e:7b:2b:
                    9d:1d:43:72:de:79:dc:50:7d:9d:4f:42:4e:ac:85:
                    46:52:8b:a0:a0:7a:58:71:af:7c:c2:06:1b:e2:de:
                    42:b5:c6:3c:52:df:39:d6:49:ca:02:07:e4:f4:e0:
                    f5:90:24:19:12:c8:ab:67:f3:c9:3b:b3:b1:96:fe:
                    cd:15:5e:cc:e5:ec:f8:ad:0f:f8:d5:2d:7e:8f:62:
                    2b:35:be:66:91:ae:b6:3d:e2:cf:ed:7a:e4:52:6e:
                    54:23:ab:bb:6e:0f:c1:98:52:05:99:0c:ad:ca:78:
                    0f:a6:48:8f:2b:b1:75:1a:7a:62:aa:38:9b:d9:20:
                    35:d9:d5:23:97:bc:3b:c8:20:eb:6c:da:a3:7c:49:
                    6f:9b:13:7e:db:48:79:e2:f2:4b:26:4d:b4:36:45:
                    d7:6c:33:ad:94:31:a7:c5:2c:a4:cc:71:61:5f:c8:
                    ba:e1:55:03:61:a1:8a:b4:6c:bb:ee:27:35:27:73:
                    5c:f9:42:dd:65:ad:d7:7c:46:a4:c9:8d:2f:13:93:
                    0b:33:24:5b:b1:ce:69:f2:af:e8:cd:fd:2e:33:08:
                    dc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:17:01:9B:A9:29:6E:86:B2:B2:2A:BB:D8:E8:55:41:5C:63:7B:8F
            X509v3 Authority Key Identifier:
                keyid:E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:a9:78:9a:64:62:07:57:a1:45:b9:b2:7b:b2:bf:ba:0c:e8:
         e2:3d:37:e6:7a:10:f5:ec:3b:02:50:1c:34:a8:6c:10:21:34:
         68:92:50:18:0f:d6:2c:bf:ec:2f:e9:d8:d4:94:67:27:8b:0d:
         cb:e4:4a:56:b5:15:b9:61:a1:47:45:e4:09:ee:f9:d0:09:cf:
         ef:a8:18:bf:5d:2e:8c:c0:80:35:ad:d3:31:94:c8:40:44:55:
         19:5f:93:bf:5c:9c:81:0e:b1:d6:1f:2e:ee:19:c6:5e:91:2e:
         31:da:2d:6d:10:05:ce:90:c8:51:89:9e:5d:db:a6:44:a7:23:
         62:39:e9:08:e6:a4:8e:fe:b5:63:01:12:89:7b:a1:e5:8a:bf:
         af:8c:f9:c4:46:2c:64:79:74:c5:a8:7f:60:83:62:ea:5c:a4:
         4c:97:9b:d6:ce:ce:dc:80:04:4c:7f:9a:11:c9:e2:4e:e7:94:
         75:c1:de:d7:4a:37:04:b2:ce:bb:15:79:6c:52:56:6e:c9:83:
         5d:bb:93:0b:d3:e8:45:4e:78:a0:f3:17:b9:6d:27:d0:d7:ee:
         fe:bf:39:3d:9c:4c:8a:0e:cf:9a:e7:72:84:6f:e7:3b:84:96:
         52:4c:61:85:78:b2:6f:ee:b0:48:50:31:88:47:8c:9d:d2:62:
         18:3a:0d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:05:38 2026 by rpki-client