Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.mft
File:                     56q82sOtn7MtJK1gyKJsueq41YU.mft (raw, json)
Hash identifier:          OpZrq2hRNlwfr5Ou9nZudQBQhHt+P9hsXgIS5qpT274=
Subject key identifier:   6A:40:C4:5E:A0:91:22:C2:70:01:57:13:5E:AE:B8:EE:73:26:6D:82
Authority key identifier: E7:AA:BC:DA:C3:AD:9F:B3:2D:24:AD:60:C8:A2:6C:B9:EA:B8:D5:85
Certificate issuer:       /CN=e7aabcdac3ad9fb32d24ad60c8a26cb9eab8d585
Certificate serial:       01A13DB8306C783A1E8D7BCFF23E6C693CC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/56q82sOtn7MtJK1gyKJsueq41YU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.mft
Manifest number:          1AA5
Signing time:             Thu 15 Oct 2026 04:00:43 +0000
Manifest this update:     Thu 15 Oct 2026 04:00:43 +0000
Manifest next update:     Fri 16 Oct 2026 04:00:43 +0000
Files and hashes:         1: 1n-fLpwGNv0XEKkYGc5i5IYYKE4.roa (hash: LdbcjYgR0sUT6a/ZumcXflfofrXMjG43yFEGklbWfOk=)
                          2: 56q82sOtn7MtJK1gyKJsueq41YU.crl (hash: 6rUXMMuYj+iLUwELmjnXU5VNxk2YQcoG8LG+w/Kujc4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/56q82sOtn7MtJK1gyKJsueq41YU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 04:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:b8:30:6c:78:3a:1e:8d:7b:cf:f2:3e:6c:69:3c:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7aabcdac3ad9fb32d24ad60c8a26cb9eab8d585
        Validity
            Not Before: Oct 15 04:00:43 2026 GMT
            Not After : Oct 16 04:00:43 2026 GMT
        Subject: CN=6a40c45ea09122c2700157135eaeb8ee73266d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ea:e5:58:22:28:46:47:c2:5f:22:f9:e6:ad:
                    25:07:c3:70:64:3f:35:f4:a5:e5:55:ec:78:1f:91:
                    c2:6f:c3:0b:82:2f:18:ff:4f:7e:94:3c:0d:65:94:
                    46:29:4e:5d:99:be:c0:7a:47:f9:0a:2a:ff:6b:cb:
                    45:2b:29:48:90:a7:62:dc:6f:49:23:0d:00:5f:ac:
                    c1:ef:41:3e:6d:85:34:7e:a1:20:f7:8a:46:53:f9:
                    64:df:d4:28:a3:c0:6e:7a:6d:80:47:05:66:a0:c5:
                    40:c7:ac:01:68:2f:ef:d5:5c:a2:17:2d:cf:15:35:
                    a2:09:43:a9:e0:99:89:13:b9:e3:73:1c:25:55:27:
                    80:ab:39:9c:e3:04:56:6d:f3:a4:c9:df:08:9b:96:
                    13:63:d3:66:1a:2a:37:9b:eb:4e:d2:19:03:cb:bf:
                    e9:76:76:ef:47:10:80:10:13:a3:95:14:1f:56:5b:
                    1b:a8:55:b5:16:c8:1c:03:29:c8:8d:22:ae:d3:42:
                    ce:93:9c:bb:c1:ea:78:37:23:71:70:56:f1:56:f4:
                    3e:6d:ad:92:42:ca:ae:1b:ea:37:99:93:42:0b:0a:
                    dc:be:96:64:ac:44:31:52:50:7d:d5:82:5a:77:22:
                    f5:6d:6c:f4:f6:c4:c4:09:98:99:21:8b:47:7e:e2:
                    53:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:40:C4:5E:A0:91:22:C2:70:01:57:13:5E:AE:B8:EE:73:26:6D:82
            X509v3 Authority Key Identifier:
                keyid:E7:AA:BC:DA:C3:AD:9F:B3:2D:24:AD:60:C8:A2:6C:B9:EA:B8:D5:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/56q82sOtn7MtJK1gyKJsueq41YU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:f7:9b:c9:3a:c2:7f:76:41:f0:52:45:dc:50:0e:36:a7:1d:
         7c:76:d8:a7:02:b7:ba:ef:1d:d6:cc:5e:33:f0:20:41:96:3b:
         98:ac:85:73:66:59:32:ed:c5:d8:b6:4c:33:83:5b:29:ec:3e:
         db:e2:20:d6:8e:40:a5:3d:8c:fd:73:c2:2f:07:07:31:98:1a:
         f2:0b:6d:b4:d2:4b:21:07:e7:f5:7a:c7:4e:06:ce:4f:39:93:
         ad:fa:73:3d:a8:a1:bf:f0:16:41:66:a9:3b:34:6f:95:1d:42:
         1f:c9:34:11:df:52:6b:a8:1f:f6:6b:92:0d:c5:5c:6a:c3:6c:
         0e:ec:fa:24:3f:e9:f9:28:ec:8d:be:46:b1:9d:e8:7c:9c:ae:
         10:90:70:bd:c2:86:9e:cc:1f:60:1d:c6:01:ea:9a:86:a3:79:
         7b:53:37:aa:61:8f:d8:04:55:b6:31:dc:f4:69:97:fa:0d:c5:
         f0:8a:0e:d2:36:f3:f0:7d:df:3f:f7:ac:48:b0:ff:20:64:18:
         aa:b2:bb:7d:57:4e:d2:67:96:7a:36:60:5d:1e:96:43:14:26:
         e3:2a:18:bc:b2:39:e4:ae:8b:a3:4b:04:d1:97:d2:9e:3f:d8:
         cd:bc:4f:8a:ad:b8:aa:e9:01:68:89:ac:95:da:2d:2b:1b:9d:
         34:c6:bc:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:26:53 2026 by rpki-client