Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
File:                     5gBvGrt1cn57wwwXnml00tGPjzg.mft (raw, json)
Hash identifier:          xoXRKCf5lzdjLZI0ujE16vyypSS+49QGh3J3X7/x4sA=
Subject key identifier:   ED:B0:90:A9:1C:61:89:E3:CE:EA:F3:1F:0F:B7:5D:15:A2:7F:88:8C
Authority key identifier: E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38
Certificate issuer:       /CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38
Certificate serial:       01A13ECB71AEE4E5A50498716F81CC63F9D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
Manifest number:          15FA
Signing time:             Thu 15 Oct 2026 09:01:22 +0000
Manifest this update:     Thu 15 Oct 2026 09:01:22 +0000
Manifest next update:     Fri 16 Oct 2026 09:01:22 +0000
Files and hashes:         1: 5gBvGrt1cn57wwwXnml00tGPjzg.crl (hash: wtdzb2hrqygxu4zT2Mt075K/dqXoDa3jQsK0gL3O/5o=)
                          2: MWO6M6MJ4bPprYC1GxT7fwTCMB4.roa (hash: ANyTmu/82kqGvMyK/QfVvJiysGdLYGce9RuoYKBpHjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 09:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:cb:71:ae:e4:e5:a5:04:98:71:6f:81:cc:63:f9:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38
        Validity
            Not Before: Oct 15 09:01:22 2026 GMT
            Not After : Oct 16 09:01:22 2026 GMT
        Subject: CN=edb090a91c6189e3ceeaf31f0fb75d15a27f888c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:af:0d:c7:ba:30:32:ef:80:41:d5:72:72:a0:
                    59:23:71:8d:aa:52:84:93:85:38:c3:3c:bc:57:24:
                    f1:d7:8b:4d:6a:9f:4d:b6:7d:44:1a:28:96:9d:30:
                    b4:4f:90:28:cc:5f:d9:f1:a7:a4:51:d3:46:90:91:
                    28:92:54:9e:ee:ae:d8:6c:c1:b4:8c:e7:36:a8:f1:
                    1f:58:ac:64:c7:26:2a:32:ec:12:40:dc:8c:00:2e:
                    38:c1:93:1d:65:5a:a1:92:a7:ea:68:31:72:d3:bd:
                    48:a1:36:8d:9b:23:9d:d2:d3:75:9e:fa:46:a7:66:
                    a4:95:98:a9:33:0b:33:17:b1:67:5d:99:a5:84:d6:
                    50:f0:9e:78:9c:33:c3:89:13:77:40:75:f3:a4:cb:
                    d9:8a:6b:23:3c:56:98:19:08:95:c8:0b:a9:38:5e:
                    7c:9a:ad:92:62:89:0b:81:15:04:fa:5d:96:ea:74:
                    93:5b:19:b2:0a:f2:65:09:ea:e8:28:51:4e:bd:8a:
                    d3:87:6f:da:b1:a4:d0:5b:cb:48:d9:20:05:88:4b:
                    17:77:89:ae:30:3e:d9:32:81:1f:9a:58:be:98:93:
                    94:70:a0:56:b5:89:03:a9:c1:c5:5c:2d:03:0a:64:
                    2c:da:8a:33:7b:c8:2c:48:89:82:d1:1e:00:81:fd:
                    e0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B0:90:A9:1C:61:89:E3:CE:EA:F3:1F:0F:B7:5D:15:A2:7F:88:8C
            X509v3 Authority Key Identifier:
                keyid:E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:10:4a:90:dc:d8:11:92:3f:2b:11:c0:6f:8a:37:d4:5b:a0:
         c7:5f:26:d6:da:8b:7e:af:4b:d7:1f:85:e7:93:83:38:a8:fb:
         33:8b:56:28:8b:83:87:52:91:28:35:f7:05:32:9a:f4:52:42:
         a5:8a:b6:e1:37:dc:52:3b:99:c3:56:5f:90:bc:43:9f:0d:62:
         13:f5:ce:2f:ae:cd:5e:ac:23:ea:b3:66:56:60:f6:65:3d:56:
         cf:4d:13:45:c6:fc:07:fe:cf:19:ee:86:1d:b6:59:d2:05:f7:
         13:b6:5c:b5:2e:20:d4:ce:d3:20:5d:a6:be:c7:02:76:5e:83:
         f1:46:cf:89:a1:61:06:be:63:26:34:5a:28:8e:7e:bd:2e:b1:
         4a:01:71:e8:71:0b:be:3f:59:85:9f:ff:72:4e:8e:1d:0b:9f:
         cf:24:56:99:19:1b:0f:90:ef:a7:20:0f:a6:54:e6:94:16:a7:
         92:9f:76:09:43:ad:3c:61:f9:bd:dd:bf:c5:f2:47:03:7d:05:
         8c:99:46:b2:4c:f6:07:f9:f9:87:04:13:6f:28:26:18:39:0a:
         69:91:01:ff:b8:06:bf:ea:64:e2:6f:d4:d6:8a:b9:81:2c:5b:
         08:18:77:f2:e5:6a:16:5a:d3:1a:f9:47:01:b5:34:e6:ba:a1:
         80:79:92:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:57:18 2026 by rpki-client