Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
File:                     Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft (raw, json)
Hash identifier:          ew1WsQGXWNzNijhG7lDQc/zwDykS7UgjBEH+Z4/MXys=
Subject key identifier:   0C:52:88:C2:43:AF:04:97:A0:A9:8D:F5:F4:51:EA:BC:DC:07:F9:F0
Authority key identifier: 0D:DE:63:17:31:1F:E6:D5:38:57:7C:17:FE:C9:82:B8:2E:EA:9A:BD
Certificate issuer:       /CN=0dde6317311fe6d538577c17fec982b82eea9abd
Certificate serial:       01A14CBD97B4337CBA17D4606AEB7122638E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
Manifest number:          1642
Signing time:             Sun 18 Oct 2026 02:00:55 +0000
Manifest this update:     Sun 18 Oct 2026 02:00:55 +0000
Manifest next update:     Mon 19 Oct 2026 02:00:55 +0000
Files and hashes:         1: Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl (hash: q37MM86+IVa5kmn+xELz5BVfNI6OSpBg5N8MmGFZ1TI=)
                          2: _SVgDeMt7OyK763J59KOgA7Y4X0.roa (hash: JZm207g6Ascmgp0WtNlIOYunKJNalG/ciHHMl9wcILk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4c:bd:97:b4:33:7c:ba:17:d4:60:6a:eb:71:22:63:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dde6317311fe6d538577c17fec982b82eea9abd
        Validity
            Not Before: Oct 18 02:00:55 2026 GMT
            Not After : Oct 19 02:00:55 2026 GMT
        Subject: CN=0c5288c243af0497a0a98df5f451eabcdc07f9f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ff:ba:cb:d4:b8:9e:d0:25:21:37:4c:97:a6:
                    35:50:9e:26:e0:1e:dd:d1:05:8d:82:3c:75:ee:a3:
                    1e:26:10:cf:39:f6:26:ec:e8:30:8a:cd:17:44:2b:
                    ec:c2:39:93:0d:84:b8:82:46:16:52:76:88:3f:8b:
                    18:3c:19:a1:5c:e6:b5:4c:54:13:1f:a3:8c:4e:56:
                    6c:e2:cf:a1:8f:d1:7f:79:92:e8:3d:7e:1b:d9:6e:
                    3b:21:ab:3c:be:07:d5:a7:96:2a:c4:0f:e1:b3:dd:
                    33:45:32:d6:c9:f6:99:5b:87:09:08:16:9c:8f:51:
                    9d:c5:13:a0:20:e2:a7:1a:28:0f:18:17:24:d9:3e:
                    6a:7f:48:ed:a2:d0:7c:9a:bd:2e:31:28:2a:ff:4e:
                    76:3c:f4:44:6e:82:be:13:38:8b:e2:4b:dc:56:c6:
                    2a:99:44:9c:17:10:ba:68:4f:d4:eb:69:f6:e7:87:
                    ee:ba:fb:2a:01:7b:1a:aa:4e:08:48:38:ba:17:82:
                    44:62:68:19:b8:32:98:fc:7b:dd:e4:8f:6c:57:6d:
                    08:e6:fb:ae:d7:45:e0:aa:26:e0:3b:e1:2a:eb:55:
                    9b:42:61:45:d6:b7:3c:5f:16:d2:57:61:82:df:08:
                    b7:61:24:8b:36:fb:22:45:0a:2e:13:7d:59:ed:7d:
                    cf:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:52:88:C2:43:AF:04:97:A0:A9:8D:F5:F4:51:EA:BC:DC:07:F9:F0
            X509v3 Authority Key Identifier:
                keyid:0D:DE:63:17:31:1F:E6:D5:38:57:7C:17:FE:C9:82:B8:2E:EA:9A:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:fe:8d:4f:4b:c0:ed:59:d0:8c:2e:c1:18:06:00:61:a4:19:
         20:cd:72:ce:b9:86:22:6d:4f:52:01:2f:e4:3c:e8:41:27:23:
         ac:da:35:9e:40:06:11:89:15:b5:32:3d:bd:94:17:3a:91:e1:
         1d:ef:2b:82:b1:72:0a:a9:ef:2f:76:b6:cb:38:1b:a1:2b:d5:
         87:5c:85:ea:c1:97:11:19:43:6f:74:9a:06:94:71:c7:b2:4d:
         58:10:2a:fd:ca:d5:f3:10:14:21:1d:74:e4:79:c3:1f:c3:e7:
         69:8a:50:5c:2f:fc:55:af:a3:e9:d2:3e:d7:a2:7e:45:64:28:
         86:45:64:e4:c9:eb:1e:1b:b5:ae:89:82:9a:35:3a:fb:87:a5:
         e5:a0:24:5e:87:05:77:a7:ae:4d:f7:d7:ba:aa:86:35:91:d4:
         a3:2d:36:f4:67:a4:ad:e1:37:af:35:09:89:ad:1a:26:b9:ae:
         48:dc:4d:cc:73:22:6c:54:ca:7c:f4:8b:88:0a:23:01:73:00:
         43:06:f7:d9:ed:57:36:49:18:3f:27:a3:f0:38:f1:f2:9d:a2:
         76:d9:08:3e:de:5c:9d:52:72:79:04:e2:0b:d5:02:fb:3a:ef:
         41:67:11:95:97:88:ae:bd:8f:34:ba:4b:cd:bd:09:24:5a:be:
         06:06:1b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:33:38 2026 by rpki-client