Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
File:                     5GWsyQgJ77RczaJQoQV2GElLhus.mft (raw, json)
Hash identifier:          xhm/ihpTEJSvlgukaF3/R+T7yffgxR6S2+s22kFZ6Nw=
Subject key identifier:   83:E4:40:ED:80:A4:82:54:85:BD:8F:7F:EA:EC:DA:B8:2A:A2:BC:B5
Authority key identifier: E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB
Certificate issuer:       /CN=e465acc90809efb45ccda250a1057618494b86eb
Certificate serial:       01A13DEED4F26D71DD051D3E5DE3BBEE2FB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
Manifest number:          1AA7
Signing time:             Thu 15 Oct 2026 05:00:24 +0000
Manifest this update:     Thu 15 Oct 2026 05:00:24 +0000
Manifest next update:     Fri 16 Oct 2026 05:00:24 +0000
Files and hashes:         1: 2SzXHkxCLVLxwqT1VXOIbH7zS1U.roa (hash: aCYVx/y4t8hASeqhW625AjPBxOCwC/8c0JG862QvXD0=)
                          2: 5GWsyQgJ77RczaJQoQV2GElLhus.crl (hash: 4QfL0Qt2OEHb3+FVAlyeSLMiVIv+5ggWStYhD/4uxAs=)
                          3: 6sd_k1RdUMYWXA26WfVTDEokc2M.roa (hash: 8hUqySg/rBZ3NT/ihAM6VBXGwvE0oaRfR5K9FgBx9sY=)
                          4: xprnXzLHdgCC1ErposCq6vG3jPU.roa (hash: yXNFomv+hurOUmhTIqZgZ4hQnilyhZpNY276iiDrBf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:ee:d4:f2:6d:71:dd:05:1d:3e:5d:e3:bb:ee:2f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e465acc90809efb45ccda250a1057618494b86eb
        Validity
            Not Before: Oct 15 05:00:24 2026 GMT
            Not After : Oct 16 05:00:24 2026 GMT
        Subject: CN=83e440ed80a4825485bd8f7feaecdab82aa2bcb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f2:e9:2f:74:42:cb:ab:1d:58:01:6b:01:30:
                    1d:a1:1e:bb:1e:5f:e7:63:b2:eb:a5:02:39:26:c4:
                    9e:d5:62:f2:ee:21:1c:16:b1:47:54:46:d4:88:98:
                    a3:a8:c5:2c:7d:8b:e9:e8:d2:bf:6f:ea:01:72:e8:
                    b4:5b:db:c8:18:8d:a8:10:92:e0:b4:df:32:1d:7a:
                    a3:d4:ae:f1:6e:5f:d5:41:d4:d5:9c:87:c3:de:cb:
                    59:d1:52:b0:dc:27:96:ff:e8:b8:02:98:72:47:f1:
                    7c:4e:23:99:34:f2:d7:38:44:bf:9d:71:33:94:05:
                    c9:8f:0a:ab:91:21:f5:9d:5f:81:d2:28:4f:75:ac:
                    53:36:d7:7d:20:36:02:16:f6:a0:4f:b6:6a:7c:21:
                    63:dd:cc:f9:5e:35:85:9c:11:5b:1d:38:0c:7d:e8:
                    44:33:76:e5:01:15:db:90:d0:15:e0:c3:4c:b9:48:
                    be:c2:37:f5:ab:ec:eb:cd:4d:1e:e5:d0:44:70:ac:
                    8a:3c:06:01:f7:a6:e8:16:c4:d8:f9:e0:13:8d:32:
                    84:21:80:ec:f3:52:49:75:29:ef:68:16:fc:1d:05:
                    81:dc:38:0b:86:80:59:50:3c:f2:20:af:66:d3:e4:
                    db:1c:f4:ae:22:88:cd:7b:28:1d:9c:2f:f0:7a:36:
                    60:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E4:40:ED:80:A4:82:54:85:BD:8F:7F:EA:EC:DA:B8:2A:A2:BC:B5
            X509v3 Authority Key Identifier:
                keyid:E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:b8:ee:43:53:34:a7:e9:d8:6c:f6:1f:11:81:6c:a3:c3:09:
         2a:42:57:c5:71:85:3f:65:24:a6:71:fa:11:a9:0b:cf:b7:5e:
         72:5d:71:93:7f:7b:8b:9f:8a:d1:99:90:3f:a0:b2:c9:e8:eb:
         17:9c:c9:53:5c:f0:66:ee:71:0c:d2:c0:f2:53:0e:4a:cc:b5:
         99:7e:b5:dd:b4:42:a2:ab:ad:fe:41:0c:e9:ea:08:86:b7:87:
         c9:c5:88:24:6b:3d:d7:91:08:77:dd:9f:08:e7:d5:af:26:ff:
         ee:78:0b:2a:e1:68:0f:df:78:18:74:05:10:2a:d3:24:34:b0:
         e8:b7:ef:3b:6d:27:11:e0:76:7c:6c:af:5e:3f:81:8e:3e:35:
         fb:3f:96:9f:e2:8c:ad:7e:3e:69:8e:91:6a:a0:ce:e4:3d:39:
         2e:e5:2e:fb:bd:09:a3:30:05:7d:2f:fa:59:77:94:53:9e:64:
         47:13:23:64:2b:2e:ce:6c:c9:f5:3d:2d:b9:4a:67:65:62:70:
         cb:5d:be:3f:4d:7b:bb:9c:a4:51:cb:91:fe:e8:e9:7d:52:f1:
         a5:0f:99:06:c6:e9:b4:f2:4d:ec:e4:8f:25:15:40:a4:fd:d1:
         a9:1a:34:5e:ba:4a:fb:9e:6a:c9:f9:38:ca:85:99:c3:6d:3a:
         ab:cc:40:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:27:16 2026 by rpki-client