Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
File:                     5IKZWNgAyhrebhPKeygLIpzmYC4.mft (raw, json)
Hash identifier:          g0gEMCagVOobinxRqXyuYGQD6Bdn2wPdbvfSqqTpHK8=
Subject key identifier:   61:57:68:92:41:C9:4C:A7:2A:7E:AE:17:31:BF:6E:C0:83:7B:9E:8F
Authority key identifier: E4:82:99:58:D8:00:CA:1A:DE:6E:13:CA:7B:28:0B:22:9C:E6:60:2E
Certificate issuer:       /CN=e4829958d800ca1ade6e13ca7b280b229ce6602e
Certificate serial:       01A147600EBCC93DCC4AF3D3D2E5A2B5589F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
Manifest number:          1AA6
Signing time:             Sat 17 Oct 2026 01:00:39 +0000
Manifest this update:     Sat 17 Oct 2026 01:00:39 +0000
Manifest next update:     Sun 18 Oct 2026 01:00:39 +0000
Files and hashes:         1: 5IKZWNgAyhrebhPKeygLIpzmYC4.crl (hash: ruXU62dpwj9MSXVL0qWwtoGWDju3DFTYWhcXXppPnZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 20:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:47:60:0e:bc:c9:3d:cc:4a:f3:d3:d2:e5:a2:b5:58:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4829958d800ca1ade6e13ca7b280b229ce6602e
        Validity
            Not Before: Oct 17 01:00:39 2026 GMT
            Not After : Oct 18 01:00:39 2026 GMT
        Subject: CN=6157689241c94ca72a7eae1731bf6ec0837b9e8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0e:1c:b4:54:8c:fb:eb:2f:a5:f5:d2:f7:75:
                    92:1e:7c:1c:4a:74:8e:5f:23:c0:6f:a6:5e:ca:bf:
                    1b:30:5c:8e:b2:0a:d4:81:95:c5:2a:57:ac:ab:3f:
                    cd:82:d0:e2:3c:ff:94:e1:aa:d0:84:8b:d1:7a:9a:
                    d2:34:4c:b8:3c:ed:09:30:5c:4b:c6:6f:27:25:a7:
                    d7:c6:a4:6d:43:fd:e4:c5:b9:00:ab:4b:49:8f:4c:
                    e5:07:4c:f2:dc:47:bf:27:72:36:3a:18:1c:9c:5e:
                    a0:f8:69:b3:e9:16:ea:27:7a:dd:47:20:ca:1d:00:
                    26:4e:44:81:0e:1f:c3:23:a3:39:95:0a:ec:e7:0a:
                    c9:f0:00:9a:ca:e6:4c:56:12:3b:4c:07:bc:67:10:
                    b6:6b:99:a6:f4:01:ab:45:a0:82:c6:ed:2e:bb:62:
                    d3:8a:2c:74:e9:9f:ac:70:76:cd:89:9e:e2:d4:13:
                    17:6b:9b:03:fb:60:9c:31:31:13:1b:c2:98:dd:2a:
                    0c:37:ae:ab:07:18:95:45:f9:af:54:e7:75:2d:39:
                    25:fa:2d:2f:29:48:0a:85:e7:ce:d0:be:cc:1d:7a:
                    4a:f2:52:2c:50:8b:9d:74:98:78:bb:a5:f8:f4:30:
                    95:8b:ce:00:c0:23:51:38:03:ae:8a:76:74:92:0c:
                    b1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:57:68:92:41:C9:4C:A7:2A:7E:AE:17:31:BF:6E:C0:83:7B:9E:8F
            X509v3 Authority Key Identifier:
                keyid:E4:82:99:58:D8:00:CA:1A:DE:6E:13:CA:7B:28:0B:22:9C:E6:60:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:bf:c1:d9:ee:f6:dd:2f:85:1b:d1:45:12:6f:84:c7:16:79:
         a6:af:85:b0:14:61:1e:28:ac:0b:13:03:71:1b:90:3f:49:04:
         a7:bf:3d:b2:26:13:f0:73:ae:14:db:25:15:fc:ad:02:f3:e9:
         b7:bd:ec:b9:92:87:0a:0c:1d:46:4a:55:e0:5c:66:cc:a8:80:
         42:49:4e:2a:1f:a8:1e:ca:70:ff:d6:8e:36:d7:73:93:ba:87:
         ba:3e:ec:fd:18:9c:d3:0e:9d:f4:eb:cd:8d:7e:d6:c6:94:7e:
         da:39:d7:9a:2e:56:f9:b6:88:aa:7d:bb:0a:d3:6a:57:f9:6a:
         13:06:1a:10:2d:82:0d:f4:c7:90:33:01:45:62:5a:74:5e:54:
         60:18:a5:ab:ac:84:26:50:24:37:b3:40:ff:19:6b:6c:b3:f6:
         78:a0:f3:95:29:8b:70:01:76:8f:95:82:3a:02:5a:9d:20:37:
         c0:65:48:4c:ec:2a:a0:76:05:6e:0b:4b:5c:53:38:5e:45:e8:
         ca:f4:a0:47:df:91:90:0f:04:07:cd:d1:68:ad:66:bb:9c:15:
         3e:77:ea:5b:bf:15:fb:85:20:74:3d:a1:70:40:5c:fc:cd:bb:
         44:6c:d9:65:3a:90:24:7e:0c:8b:e0:28:96:5a:87:db:d6:c4:
         3a:42:d6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:59:04 2026 by rpki-client